last executing test programs: 6m21.608273232s ago: executing program 0 (id=1045): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m21.478618706s ago: executing program 0 (id=1047): clock_getres(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(&(0x7f0000000340)='\x00\x01\x00\x00\x00\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\x00\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\x03\x00\x00\x00m\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xa1\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"F\xb4\x02\xc5T\xe5\xc7\x98\xcd\fs\x1ap^\xc1jL\xfb{\xd8\x9e;L9\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90F@\x8a_\xe0\xd7\xfag\x9f\xcfp2*}=\x01h\x04\x81V9\xa1Q\xe19\x85\xa4x\xb6/\xbe~M\xac%\x03\xdfm\x174\xb0\x8a{)$\xa6\xad\xadg6\x02P\xbf\x9a\x1d\xaeR\x1f_\x1b\x9cma\xc3\xa5\x19b\'H\x94|\x18\x8a\xd5\xbb\"\xfe\xdf\x8f', 0x7) fallocate(r1, 0x0, 0x400000000000000, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000100)) 6m20.409956609s ago: executing program 0 (id=1051): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000000)='omfs\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) r8 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f00000001c0)=0x3000) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000fec000/0x12000)=nil, 0x12000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) syz_usb_connect(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0xf3f, 0x0, 0x0, 0xfffffdcf) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) syz_emit_ethernet(0x22, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 6m16.430286304s ago: executing program 0 (id=1064): r0 = syz_open_dev$dri(&(0x7f0000001100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r2}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r2}, 0x20) (async, rerun: 64) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioprio_get$pid(0xb686cb5b45109825, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) 6m16.429881243s ago: executing program 0 (id=1065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="bb", 0x1}], 0x1, 0x0, 0x0, 0x80d0}, 0x8005) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, r2, &(0x7f0000000380)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 6m15.419463514s ago: executing program 0 (id=1069): socket(0x28, 0x5, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x16) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60", @ANYRES32], 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x0, 0x4c, 0xfffffffffffffffd}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80800, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2000000}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES8=r0], 0x28}, 0x50c0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x7, 0x62, {{0xa, 0x4, 0x3, 0x35, 0x28, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x2}, @timestamp_addr={0x44, 0xc, 0xaf, 0x1, 0xc, [{@rand_addr=0x64010101, 0xfff}]}]}}}}}) 5m59.894528983s ago: executing program 32 (id=1069): socket(0x28, 0x5, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000340)={0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x16) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60", @ANYRES32], 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a"], 0x34}}, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, 0x0, 0x4c, 0xfffffffffffffffd}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80800, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2000000}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0, @ANYRES8=r0], 0x28}, 0x50c0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x7, 0x62, {{0xa, 0x4, 0x3, 0x35, 0x28, 0x64, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x2}, @timestamp_addr={0x44, 0xc, 0xaf, 0x1, 0xc, [{@rand_addr=0x64010101, 0xfff}]}]}}}}}) 2m41.975373443s ago: executing program 5 (id=1852): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x40000) getpeername$packet(r1, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffff"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) read$msr(r4, &(0x7f0000000140)=""/61, 0x3d) 2m38.93975748s ago: executing program 5 (id=1868): syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000340)={0x0, @reserved}) recvmmsg(r7, &(0x7f0000009500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001a40)=""/4096}], 0x56}, 0x80001}], 0x1, 0x2100, 0x0) sendto$unix(r7, &(0x7f00000000c0)='\t', 0x1, 0x41, 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x6, 0x40002, 0x2, {0xd, @sliced={0x4, [0xebde, 0x6, 0xbf25, 0xfffc, 0x6, 0xfffe, 0xf4, 0x3, 0x2, 0xfff, 0x0, 0x6, 0x3, 0x2, 0x6, 0x2, 0xfff9, 0x6, 0x7f, 0xc50f, 0x5ac, 0xff9a, 0x4, 0x5f6d, 0x6, 0x3, 0x2, 0x8, 0x7ff, 0x1, 0x662, 0x5, 0x5, 0x9, 0xb, 0x401, 0x1, 0x8, 0x8f8d, 0x2, 0x2, 0x6, 0x4, 0x9529, 0x7, 0x5, 0x6, 0xfff1], 0x5}}, 0x3}) 2m38.003096663s ago: executing program 5 (id=1870): r0 = syz_open_dev$cec(0x0, 0x0, 0x20181) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0xfbf3, &(0x7f0000000580)={0x0, 0x1c26, 0x10100, 0x1, 0xfffffff4, 0x0, r2}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r2, 0x2ded, 0xa02, 0x4a, 0x0, 0x0) (async) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000002) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xa5) (async) fallocate(0xffffffffffffffff, 0xa, 0x44, 0x3e8a) (async) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) readahead(r0, 0x7, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40011) (async) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4824c1, 0x0) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x18b) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="e17f6ee9ce2b89c26658d58a1812a6e2b440e038d0f4e99b86b78afed1aec06e8c7c7764839b00c11156eb679ba04c116dc7fa281c23624f922af64433331138fd2a6aa6aa6b453f2a62512baecfc39b1c36cf25ec31361b693b530b4772b6580b56cd4f20505c3e5fef6058", 0x6c}], 0x6, &(0x7f00000007c0)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRESDEC=r1], 0x40, 0x20040005}, 0x20000001) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x1880a0, &(0x7f0000000640)='\x01v\xe8\x98\xbb\xc9\x9c\xc5\xf5w]p\xe0R\xa8\xeb]\x86\xc4+\xf6h\xf4j\x9d\x06NBgj\x97\x81]\xbb\t\x0e4\xec1\xe7\x1a\xbcZ\xa8gEz\x14DJ\xd1%3h\xb5\xa5\xf9\xa6\x1b\x1f\x8c\xf3\xf6\xb8ep\xab@\x8e\x10:\x9e\x14?>\x9c\x9b\xe7I\x12\xfd=I\f\xef\xfa\x83\xca[\f\x99<\xdc\x9a\x19AB`\x17\x95\xc8\xb0\xa1\xfdpQ\xb5\xf0\xf7(\xfa\xab/\xd4\xd5-0\xb0\x808\xeez\x15\xd2\x0f=&nc\xf6\xbf4\xcc\xbdN\xb2\xe6\xb89j)F/^\xa4\x1f\x96u\x980]\xd5sg|\x95\x1f\f\"X\x8dm\xf2\x91\xd1\x06\x9a\xb1\xa6\xe4\xf9\x1b^\rNF\v.\xc2\xfa\xd41]\x13\xac\x1cH\xf0/j\x9fy%\xb0\xfd/\xc0Gs\x9b\"\x065S\xb1z\x89\a\xa0\xce\x97\xd3\x83v\x90\x92(\x9c\xd3\x89\xd1\xd1\xee*\xce\xa8}') (async) ioctl$TIOCCBRK(r8, 0x5428) 2m37.797161741s ago: executing program 5 (id=1871): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000700)}, 0x10) 2m37.562233031s ago: executing program 5 (id=1873): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r9, r8, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) syz_clone3(&(0x7f0000003b00)={0x20ca6bd519f76f4b, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x3c}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 2m36.898442257s ago: executing program 5 (id=1875): syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='hpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101b03) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = fsmount(r8, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x301800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 2m21.727657573s ago: executing program 33 (id=1875): syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r5 = fsopen(&(0x7f0000000240)='hpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101b03) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = fsmount(r8, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x301800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 9.847869498s ago: executing program 6 (id=2282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0xc00c001}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000003e000701feffffff00000000017c0000040042800c000180060006008002000011000280070014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9.606098306s ago: executing program 6 (id=2285): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16=r0]) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000000000009417374c0753eeae96bd9e18f9587e932f070752c2c50eea5fdca27e4863715d8e194873c541b0cfaea02c6bfa194501071d4daab110115d45b1fb417134001299a8eea3e6c57e9cca3eff66b32eb46b34bf7683c2bf618a43b96a14413bffde2aeff86dd0ff627558a3e618e1f38aa82dd6270e530a6fc479c1f067314eba672d45b696d9b7ac3a0480090ddbcbd1bde3e96fb9047af9d5e71e594155e16bc0168ebd006dca90ab4f621a074a1dab8a6add5cd62575f63973bb1b78e96290a65c8ba2f2f07d997759dfc5f8c19f037675b5c5b60b1abd0000000002e0d0d3a9e66b0c9cae1036f660906723dc54b4a07d12529aacb1"], 0xc, 0xfffffffffffffffe) r5 = add_key(&(0x7f00000002c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) listen(r9, 0x0) 8.532799604s ago: executing program 6 (id=2288): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r5, &(0x7f00000001c0)=""/147, 0x93) 8.438393474s ago: executing program 3 (id=2289): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) fsopen(&(0x7f0000000140)='virtiofs\x00', 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 12) 8.437746862s ago: executing program 1 (id=2290): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net\x00') r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000003c0)={0x0, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x60}}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) setsockopt$inet_group_source_req(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x1, {{0x2, 0x4e2a, @multicast2}}, {{0x2, 0x4e22, @multicast1}}}, 0xfffffe0f) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 8.105093316s ago: executing program 3 (id=2292): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010062, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a0000000000"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9000000010000008000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002e00010000001400030070696d3672656731000000000000000008002c000500000008000500", @ANYRES32=0x0, @ANYBLOB="44002b8008000800", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="080011000800000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 7.366902221s ago: executing program 6 (id=2295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) 7.274296729s ago: executing program 1 (id=2296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) r4 = eventfd2(0x65c, 0x80000) r5 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r4, 0x7, 0x2, r5}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000400)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.370001639s ago: executing program 6 (id=2297): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000004c0)=@e={0xff, 0x3, 0x0, 0x0, @generic}) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 6.368249189s ago: executing program 4 (id=2298): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000004c0)=@e={0xff, 0x3, 0x0, 0x0, @generic}) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) 4.971780934s ago: executing program 3 (id=2300): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x40000000) creat(&(0x7f0000000100)='./file0\x00', 0x120) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, r2, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 4.502213448s ago: executing program 3 (id=2301): r0 = socket$inet6(0xa, 0x6, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)}, 0x40002062) socket$key(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x654800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x801}}, './file0\x00'}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000f14010027bd7000fcdbdf250800450073727080"], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @empty}, 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) close(0xffffffffffffffff) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x30) syz_usb_connect(0x1, 0x5d, &(0x7f0000000240)=ANY=[@ANYBLOB="4ad2a01cac535e68317461364d8556da66a44387c531897a4626f349d704f062e623b0496797b95f04dc3eea22da00f821cf93d412e5a788f96c6c7eaa0ccee3e7fac14f04d110d95af5578de4620401821624e43161b892b94c3a984f10db245f23604175b50cbd6a77597d1dc2586bd79ad339e75916430dae87410086751b3a36e70fea4eb2f3ebaafc6c71f7b0611d6e3dd1d3808b8c", @ANYRES32=0x0], 0x0) listen(r7, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r9) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xd9, 0x4000000, 0x8c, 0x0, 0x3, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) fstat(r2, &(0x7f0000000300)) sendmsg$kcm(r3, 0x0, 0x0) 4.322609778s ago: executing program 1 (id=2302): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='pvfs2\x00', 0x0, 0x0) (fail_nth: 3) 4.080797711s ago: executing program 1 (id=2303): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee8, 0x8030, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) io_uring_setup(0x7e7e, &(0x7f00000001c0)={0x0, 0xa2e2, 0x2, 0x3}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r5 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0xffffffffffffff99, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0xffffffffffffff8f, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x40000c5) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) 3.141963589s ago: executing program 4 (id=2306): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0x7, 0x13, 0x3}, {0x5, 0x1, 0x9, 0x6}, {0x7f, 0x4a, 0x80, 0x7f}]}, 0x10) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x105041) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@local, @multicast1, r3}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000300)) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="59b93ae1c8f207f0a747a4170a8a9ef31c7d25df519de9d027702c61cd05d5ec54622e876d5138178efdcb85ebbed81a30b2a526d7c5e7792b32a7e2db9122e1a85db2055a83b92a4146e2f5c8000ae7c55913cdfdf6f0edb75a2b013118ce6af61c716dce2de9732a9b566e21cb31b5cd643a97015cf1d753eae0c6f29ece3d2bfe45985f869e9b49eb98507ab7bda32cbee64d268ca3b693d5d48b32e77fc973e8f3d2458c174d93ba51ba1928446bdaa82acc3e6fe6f121144a391a324af7a3723a4a3a6ee635c7f42d2d94c74190e9dd29d28323dd6123e0197f7cbadead3ccda6f0e51b8226dd65ed381323fed72f61a25c33ca193c", 0xf8}, {&(0x7f00000004c0)="7e244ccaad21e6f7170f211ccb9038288bb1e07f92fba3bdc743b2e0088a76763eeb6910f9a1b3f1a7512843f240014c20f4d1f729e6739ba22f5c9b9574ac4b118975fa45647f949d918eb11f73f0a5840d741b8065af0a4aa9190064e0364d2470c4a4ba7a5e7a3d65a7710e7adb", 0x6f}, {&(0x7f0000000540)="7431c42e830403b596af4883d0d7e18fbe60541e47dd936adaeed9e0343dcb01b51149e22911ae248d85ab4e6539a76d264fa958434cb61a166657e3d86f7d1de242b2ebe8faf2bcd811776448361e81db84c6fad0137600d8ee9e8ce40f9c05e985ab5484c2b1d8b502d11ed84f99", 0x6f}, {&(0x7f00000005c0)="5fa20f4a0efda67b3489502da288", 0xe}], 0x4, &(0x7f0000000640)=[{0x58, 0x6, 0x0, "c63b7e88d4b91f26d14f0e99f6e94129382bf9a602507519ec5ff12e7a71b0acb2017c8aceafcbd7724ba03314658d8d9b34da27742e9666ebb651079415124e3cdd02d7d94c80"}, {0xe0, 0x114, 0x8, "a50dc0a5fd4f037aeb10a66aa7b53818c829b06d7539a090d23cb00aa7ab854d58af0eb7c037a03ecbdb4e78987ea63d8f07456185275c0a7155edae3d464f56c2a068d99006c46db4595154190c8816195c2496baa6942f6b32deb7c6f1305a02a7780d14036c114aac0b041db20fd9a195eb4c39ce5c56c920a64b3c13bbb657e9b291512b356815d2f2b042886cab013bd427b0a99a1c223876504bbcb629ca50310b3b1d895d719ba15c0f095ddb5f89074095fcd88aa766dea95ea1dd02df64c3f3af6149f30fbef5"}], 0x138}}], 0x1, 0x4000004) (async) syz_usb_connect(0x6, 0x65f, &(0x7f00000007c0)={{0x12, 0x1, 0x110, 0xac, 0x72, 0x47, 0xff, 0x3823, 0x1, 0xc1f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64d, 0x2, 0x9, 0x10, 0x30, 0x7, [{{0x9, 0x4, 0xe9, 0x7, 0x3, 0x35, 0xb9, 0xde, 0x80, [@hid_hid={0x9, 0x21, 0x5, 0x3e, 0x1, {0x22, 0x9c4}}], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}, @generic={0x11, 0x24, "0a70c70ab20d248e78a4fc69b1dfd8"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x0, 0xd3, 0x1, 0x4, [@generic={0x4a, 0x3, "cfeecf0dea9d45154a06af9908c9d2f0c0cc9076c638adb74c1e09daba4841afbd229fb0f55e97f0a0da647f6a3f778702f840e879daf842ccba2b7df6ca467f78560da6d7fb83bb"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x0, 0x40, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfb, 0x7}]}}]}}, {{0x9, 0x4, 0xec, 0xf, 0x10, 0xcf, 0xc5, 0x74, 0xc, [], [{{0x9, 0x5, 0x4, 0x10, 0x200, 0x3, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x9}]}}, {{0x9, 0x5, 0x1, 0x8, 0x10, 0x0, 0xb1, 0x3, [@generic={0x8f, 0x2e, "ad3dadefda0c7406bd222344dad9198cdf95d14e06c59d09267a1f668414cf0bf8060ffeb5ddd190b4ec838c1faa50c21a70e48e058887d3bfeaedcbb469c95d2fe5354c3ab523e88b92e699ef1c84a90e633c6493998c46a899b22c1b6539447fc87fb9133b4725499e49f9fabc7a63d2d29ccea7c992f3047efdd6fa5b96bb22a0c8cb841c17238f2ffbdba5"}, @generic={0xa7, 0x3, "ec9244f775e31cc9040181d9a8ff7030e403ea80b1879bd1c9ed2ed0455735e7e8dc1731b06dc5faaf538d25a8cbb943fa11d93424086f20a8b65aa628460da57c455b13939f17a89304c5ed24df196306d505cd08384123f70fe1835ac4e2d881926f423da305214f63ec686318febf4499d70112a67c30f5c67f43e5d75b2ceaa8d505002d940ce58b27b06d0e764a70767ce1abac62fe805325d5bf524286285a7b06a6"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x400, 0x2, 0x1, 0xec, [@generic={0xfd, 0x24, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x1}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0xa, 0x4, 0xf6}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0xd, 0xe2, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x3, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x7ff, 0x3, 0x9, 0x26, [@generic={0xfd, 0xe, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9abe}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x2c, 0x8, 0xd}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x2, 0xf, 0xe, [@generic={0xf0, 0x23, "2f54dd24fca699a1d838c874c7709341fd0ca58d34a230c57c32d7a013afc2b027f8a67c2b5a35a3d12b23f98608882d864281b9360d67d3274cabeb05cd69208e8b2b1c2cda1c1fc828995cf447919120c35f835ad92729ea5c514fd9a222366af5103ef0972a2e684b2a7e418fefd907b0ccc814a59113b8f1dcb0fa967142d78658ea3d7e225386caee7a0d7f3571d93a32c1ef6602a10df017c8e14e485771d935060bd91e7f4f5ac74d96aa1c2d26a61d1342c6e5191f231a7db75ef34fe0ab925b15cb4314b284c81bf44c84e9067c1606ca60f234f4f0c99e7956e1dfd7fd44fcc75e89d0b6971000e88b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xd}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0xe, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x5, 0xff, 0xee, [@generic={0x2b, 0xc, "5e1e36c994f26fbd02bad7766fd9ee683018c140170ec7424e88b3e3b4fce4914646477a8b4b052a84"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xb, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xb407}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x81, 0x7}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x7, 0x1, 0x4, [@generic={0x15, 0x8, "e8a3f45e4e3924966a8cf72b9fbe9ed7dd927e"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x1, 0x8, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff9}]}}, {{0x9, 0x5, 0x8, 0x1, 0x10, 0x3, 0x7, 0x5}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0x0, 0x2, [@generic={0x61, 0x2, "d53a7fa360327f53a847790118f2c9e838bd8af29d842c840fd7f56b99cf74cebc0c053c37ecbf0646a71fa20a0d0c6addea3025001a75b1ed1d435e9533352851f75a9fca4555110b054cf8ae31a92367692d86340a462e1a2bca7104a3aa"}, @generic={0x1c, 0xb, "94789c77cfd686c0ff223f889a4caef886afddf07fbc0e5daf51"}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x201, 0x81, 0x0, 0x1, 0x8, 0x8}, 0xbd, &(0x7f0000000e80)={0x5, 0xf, 0xbd, 0x4, [@generic={0x9e, 0x10, 0x1, "bdcbe6f6b7e381ac991e267d96e007ead87a223a4afd1c176d2b066fa40ce5a47236e02744845feaf85bedbd0b8401dcc1035c40143c0fd3c80a7e4aaa72d64832ff84be8e1a41828100839fc3ba6435a80c80d6976bc75353924c77e5f0a6f497b37177c69b85d1238fcbae0685d766da4ef11c4ded2c277fdc0b4fa5b86384bcf745a0ffefdf2b6cc010ad2cc0b7b384a27ccbfcca1bc0b45d5a"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x11, 0x7f, 0x1, 0x1580, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0xfff, 0xf000, 0x7}]}, 0x7, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x861}}, {0x47, &(0x7f0000000fc0)=@string={0x47, 0x3, "ce048dcc36f775747fa1139cf177d5021a38abe420ef13986a33de97cc4ab43caffea89732cb4f89ac5671fddf26d77900ac0012dda0746615ace2a4cd61c224ad95470c61"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x406}}, {0x97, &(0x7f0000001080)=@string={0x97, 0x3, "dc2bfb3a67a2c57962f349b1ce33bd0bdec088fd0ce20ad01130703180f9f846636223908da5a2edf363a3c108746644ae797794ea9d3476d332415b94ddffd2049b63148fdaf5640c63fb8670da57aa7ebd2048013b6cfdd1206a56e02c1ada426de7fb606994530ae9b8e42ac71eb56a434065a165e7619ab077c1c55aedeeece0364b0ff37ff0722900aea79854e490e390be0d"}}, {0x8c, &(0x7f0000001140)=@string={0x8c, 0x3, "a035025f15dc2ba89dcdd09df5834e3b59b0414a19ee53d139105a507e22b53ba17ea6146c5ea47b76d401efd55e6ae61c8aa8c03d49ee3e5f1879942712541618c2d891dbe852eee02d1b23c905235262642e0cd01a6f1f5ef9a0c67624ead378c99a854544d047b36d89f84fbececcdf233dc1a412834a5702aa0bafaa1ed52929d813b71cf5d61b76"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x429}}]}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000012c0), 0x280381, 0x0) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001300)={0x0, @in6={{0xa, 0x4e24, 0x6c, @empty, 0x5}}, 0x5, 0xff, 0x1, 0x3, 0x9}, &(0x7f00000013c0)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001400)={r5, 0x1000, "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"}, &(0x7f0000002440)=0x1008) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002480)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r6, 0x0, &(0x7f00000024c0)) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002500), 0x120601, 0x0) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002540)={'pimreg1\x00'}) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x70, 0x3, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004880}, 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000a, 0x50, r1, 0x10000000) (async) listen(r4, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000026c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7fff, 0x3}, &(0x7f0000002780)=0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000027c0)={r5, 0x2}, 0x8) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000029c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002980)=[0x0]}) 3.138956802s ago: executing program 1 (id=2307): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = eventfd(0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x69}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r9 = gettid() tkill(r9, 0x12) io_setup(0x6, &(0x7f0000000040)=0x0) io_pgetevents(r10, 0x3, 0x800000000000046, &(0x7f0000000700)=[{}, {}, {}], &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x20000000000e]}, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200047ea, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000380)=0xe) 3.111202639s ago: executing program 6 (id=2308): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001000d0bdd78a38ff853fd6e0e7e696dccec90f0"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000000c0)=[{0x3, &(0x7f0000001040)=0x3, 0x2}], 0x1, 0x0, &(0x7f0000000140)={0x77359400}, 0x1) setrlimit(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2.950432599s ago: executing program 4 (id=2309): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x8100) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000080)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r7, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) 2.907888356s ago: executing program 2 (id=2310): getpriority(0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xb, r0, 0x2}) mknodat(r3, &(0x7f0000000200)='./file1/file4/file7/file6\x00', 0x40, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000000)={0x210a, r1}, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(r1, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mount(0x0, 0x0, 0x0, 0x8000, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.364234909s ago: executing program 1 (id=2311): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000180)={0x1f00, 0x0, 0xf7fffff8}) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000206d0494c2000000000001090224000100000003090400000103000300092134b40001220600090581030002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000a40)={0x2c, &(0x7f0000000340)={0x40, 0x8, 0x6, {0x6, 0xd, "85050000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) open(0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000840)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 2.270210464s ago: executing program 2 (id=2312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)=',$:@^@,\x00', r2) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='?', 0x1, r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) rt_sigqueueinfo(r1, 0x2, &(0x7f0000000180)={0x28, 0x8, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFCONF(r9, 0x8912, &(0x7f0000000400)) 1.964724735s ago: executing program 4 (id=2313): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) 1.861204749s ago: executing program 4 (id=2314): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) 1.069851115s ago: executing program 2 (id=2315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) msgsnd(0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) r6 = eventfd2(0x65c, 0x80000) r7 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r6, 0x7, 0x2, r7}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000400)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.069204053s ago: executing program 3 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0xc9aac4b05face13b, &(0x7f0000000080)=0x4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mlockall(0x7) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d735164e", @ANYRES16=r6, @ANYBLOB="00042bbd7000fcdbdf2505000000080009000100000005000600f3000000080009000f00000005000700020000000500070003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4090) 858.036752ms ago: executing program 4 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b903000600000000"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x2000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, 0x0, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={0x0}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x200000) 397.668249ms ago: executing program 2 (id=2318): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0xfffffec3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000002c0), 0x40000000000002e, 0x82) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, 0x0) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') (async, rerun: 64) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/76, 0x0, 0x1e936c51ba65ab0d}) (async, rerun: 32) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000080)={0x0, r8}) (async, rerun: 32) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) (async) read$FUSE(r6, 0x0, 0x0) (async, rerun: 32) io_setup(0x2, &(0x7f0000000200)=0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES64=r9, @ANYRES32=r7, @ANYRESOCT=r5, @ANYRESHEX=r5, @ANYBLOB="c03df18863bbb16da853562366d6645a0ba5f71fca7ebab9e8e1ffb573c77c8a1f213a92fb30a708b4ea74d2456897e61876408bb5a6f26a4f2a69e51c3d30a2bd1b734a89cda59c9e162772c2d326fc68cee5229422c6064e5fccd81545e30730fa407a8fd39be85ccbf10493fb1036f5b72d66009b44441241c2c75e740b0491acf9dd36c4fec06d0eaaa154fe2a9b", @ANYRES8=r0], 0x1c}}, 0x20000894) 142.304356ms ago: executing program 2 (id=2319): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000023008000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe0000000085000000180000009700000001000100950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb4413c0bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdee75dca3772be2c9d2d29"], 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) mount$nfs(&(0x7f00000001c0)='&\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'/dev/uinput\x00'}, {'\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@flag='mand'}, {@permit_directio}, {@dont_measure}, {@audit}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x63, 0x33, 0x37, 0x38, 0x38, 0x31, 0x65], 0x2d, [0x61, 0x31, 0x33, 0x32], 0x2d, [0x61, 0x33, 0x31, 0x35], 0x2d, [0x65, 0x36, 0x35, 0x34], 0x2d, [0x36, 0x61, 0x32, 0x31, 0x34, 0x2, 0x36, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 118.845883ms ago: executing program 3 (id=2320): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$midi(r5, &(0x7f00000001c0)=""/147, 0x93) 0s ago: executing program 2 (id=2321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0xff}}, './file0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)) setresuid(0x0, 0xee00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r10) kernel console output (not intermixed with test programs): p1): failed to get link speed/duplex [ 604.307351][ T5964] net_ratelimit: 6 callbacks suppressed [ 604.307409][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.464557][ T43] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 604.593698][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.613019][T12562] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1889'. [ 604.623285][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1889'. [ 604.632750][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 604.693669][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 604.708332][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.723567][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.740586][ T43] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.759451][ T43] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.771601][ T43] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.788471][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 604.809839][ T43] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 604.819615][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.843760][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.848621][ T43] usb 4-1: config 0 descriptor?? [ 605.393668][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.525181][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.830878][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.384061][ T43] corsair-cpro 0003:1B1C:0C10.0021: item fetching failed at offset 1/5 [ 606.392688][ T43] corsair-cpro 0003:1B1C:0C10.0021: probe with driver corsair-cpro failed with error -22 [ 606.450790][T10717] usb 4-1: USB disconnect, device number 50 [ 606.747307][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.957974][ T30] audit: type=1400 audit(1753946210.479:736): avc: denied { search } for pid=12583 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.373164][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 607.386077][ T30] audit: type=1400 audit(1753946210.479:737): avc: denied { search } for pid=12583 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.409308][ T30] audit: type=1400 audit(1753946210.479:738): avc: denied { search } for pid=12583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.444425][ T30] audit: type=1400 audit(1753946210.479:739): avc: denied { search } for pid=12583 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.467650][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.551949][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 607.572264][ T30] audit: type=1400 audit(1753946210.889:740): avc: denied { read open } for pid=12585 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.603576][ T30] audit: type=1400 audit(1753946210.889:741): avc: denied { getattr } for pid=12585 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.637181][T12582] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 607.647780][T12582] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 607.708080][ T30] audit: type=1400 audit(1753946210.909:742): avc: denied { getattr } for pid=12585 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 607.734369][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.779855][ T30] audit: type=1400 audit(1753946211.089:743): avc: denied { read } for pid=12590 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 607.801805][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.830045][ T30] audit: type=1400 audit(1753946211.089:744): avc: denied { open } for pid=12590 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1882 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 607.855036][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.110220][T12582] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 609.116190][T12582] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 609.222986][ T30] audit: type=1400 audit(1753946212.739:745): avc: denied { add_name } for pid=12583 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 609.412791][ T5964] net_ratelimit: 3 callbacks suppressed [ 609.412807][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.373631][ T5967] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 610.392401][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.470160][T12622] FAULT_INJECTION: forcing a failure. [ 610.470160][T12622] name failslab, interval 1, probability 0, space 0, times 0 [ 610.610519][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.3.1902 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 610.610547][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.610558][T12622] Call Trace: [ 610.610564][T12622] [ 610.610572][T12622] dump_stack_lvl+0x16c/0x1f0 [ 610.610598][T12622] should_fail_ex+0x512/0x640 [ 610.610621][T12622] should_failslab+0xc2/0x120 [ 610.610644][T12622] __kmalloc_cache_noprof+0x6a/0x3e0 [ 610.610665][T12622] ? proc_self_get_link+0x1a9/0x230 [ 610.610694][T12622] proc_self_get_link+0x1a9/0x230 [ 610.610720][T12622] ? __pfx_proc_self_get_link+0x10/0x10 [ 610.610743][T12622] step_into+0x195e/0x2270 [ 610.610769][T12622] ? __pfx_step_into+0x10/0x10 [ 610.610793][T12622] ? lookup_fast+0x156/0x610 [ 610.610816][T12622] walk_component+0xfc/0x5b0 [ 610.610838][T12622] link_path_walk+0x627/0xe20 [ 610.610867][T12622] path_openat+0x1b0/0x2cb0 [ 610.610889][T12622] ? rcu_is_watching+0x12/0xc0 [ 610.610909][T12622] ? irqentry_exit+0x3b/0x90 [ 610.610936][T12622] ? __pfx_path_openat+0x10/0x10 [ 610.610959][T12622] ? do_filp_open+0x8a/0x470 [ 610.610983][T12622] do_filp_open+0x20b/0x470 [ 610.611006][T12622] ? __pfx_do_filp_open+0x10/0x10 [ 610.611047][T12622] ? alloc_fd+0x471/0x7d0 [ 610.611075][T12622] do_sys_openat2+0x11b/0x1d0 [ 610.611102][T12622] ? __pfx_do_sys_openat2+0x10/0x10 [ 610.611129][T12622] ? __pfx___schedule+0x10/0x10 [ 610.611147][T12622] ? rcu_is_watching+0x12/0xc0 [ 610.611168][T12622] ? irqentry_exit+0x3b/0x90 [ 610.611191][T12622] __x64_sys_openat+0x174/0x210 [ 610.611218][T12622] ? __pfx___x64_sys_openat+0x10/0x10 [ 610.611255][T12622] do_syscall_64+0xcd/0x4c0 [ 610.611278][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.611296][T12622] RIP: 0033:0x7fa6ab78d310 [ 610.611311][T12622] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 610.611332][T12622] RSP: 002b:00007fa6ac66bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 610.611350][T12622] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6ab78d310 [ 610.611362][T12622] RDX: 0000000000000000 RSI: 00007fa6ac66bfa0 RDI: 00000000ffffff9c [ 610.611372][T12622] RBP: 00007fa6ac66bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 610.611382][T12622] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 610.611393][T12622] R13: 0000000000000001 R14: 00007fa6ab9b6080 R15: 00007fff1a3ce868 [ 610.611418][T12622] [ 610.902021][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.198338][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.423662][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.438464][ T5967] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.022682][ T5967] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.634635][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.650761][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 612.650777][ T30] audit: type=1400 audit(1753946215.659:750): avc: denied { remove_name } for pid=12623 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 612.693602][ T30] audit: type=1400 audit(1753946215.669:751): avc: denied { unlink } for pid=12623 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2628 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 612.843625][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 612.879802][ T5967] usb 2-1: string descriptor 0 read error: -71 [ 612.886210][ T5967] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 612.895359][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.943657][ T5967] usb 2-1: can't set config #1, error -71 [ 612.953971][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 613.662665][ T5967] usb 2-1: USB disconnect, device number 50 [ 613.669268][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 613.843604][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 613.943776][T12653] fuse: blksize only supported for fuseblk [ 614.494605][ T5965] net_ratelimit: 4 callbacks suppressed [ 614.494621][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.481265][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.677821][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.750678][T12687] syz0: rxe_newlink: already configured on wg1 [ 615.828148][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.839827][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1919'. [ 615.858722][T12693] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1922'. [ 615.908678][T12690] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1922'. [ 616.766686][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 616.777721][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 616.787351][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 616.802720][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 616.810271][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 616.823136][ T9945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 616.832067][ T9945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 616.840439][ T9945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 616.852384][ T9945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 616.860014][ T9945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 618.930678][ T9945] Bluetooth: hci2: command tx timeout [ 621.013698][ T9945] Bluetooth: hci2: command tx timeout [ 622.865215][T12693] gretap0: entered promiscuous mode [ 622.879007][T12690] 0ªî{X¹¦: renamed from gretap0 [ 622.888890][T12690] 0ªî{X¹¦: left promiscuous mode [ 622.894363][T12690] 0ªî{X¹¦: entered allmulticast mode [ 622.908023][T12690] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 623.090600][ T9945] Bluetooth: hci2: command tx timeout [ 623.311266][T12780] rdma_rxe: rxe_newlink: failed to add wg1 [ 623.325939][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 623.898341][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.924242][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.987671][T12699] lo speed is unknown, defaulting to 1000 [ 625.033963][T12699] wg1 speed is unknown, defaulting to 1000 [ 625.073559][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.163700][ T9945] Bluetooth: hci2: command tx timeout [ 625.305779][T12800] trusted_key: encrypted_key: insufficient parameters specified [ 625.366216][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.946476][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.994654][ T5967] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 626.053684][ T30] audit: type=1400 audit(1753946229.529:752): avc: denied { firmware_load } for pid=12791 comm="syz.3.1939" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 626.221954][T12811] binder: BINDER_SET_CONTEXT_MGR already set [ 626.228174][T12811] binder: 12803:12811 ioctl 4018620d 200000000040 returned -16 [ 626.504616][ T5967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 108, setting to 64 [ 626.517115][ T5967] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 626.606916][ T5967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 626.627650][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 626.645127][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.704001][ T5967] usb 5-1: Product: syz [ 626.713790][ T5967] usb 5-1: Manufacturer: syz [ 626.742579][ T5967] usb 5-1: SerialNumber: syz [ 626.757097][T12799] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 626.803677][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 627.154016][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 627.156008][ T5967] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 627.414004][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 627.573294][T12828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1944'. [ 628.105907][T12830] dvmrp17: entered allmulticast mode [ 628.160339][T12827] binder: 12824:12827 ioctl 4018620d 0 returned -22 [ 628.170878][T12824] dvmrp17: left allmulticast mode [ 628.212616][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.221677][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.580544][T12699] chnl_net:caif_netlink_parms(): no params data found [ 628.848053][T10717] usb 5-1: USB disconnect, device number 59 [ 628.866984][T10717] usblp0: removed [ 628.940605][T12851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 628.974812][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 628.989800][T12699] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.020515][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.052205][T12699] bridge_slave_0: entered allmulticast mode [ 629.075726][T12699] bridge_slave_0: entered promiscuous mode [ 629.096408][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.118289][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1949'. [ 629.123844][T12699] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.153893][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.194761][T12699] bridge_slave_1: entered allmulticast mode [ 629.219003][T12699] bridge_slave_1: entered promiscuous mode [ 629.417077][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.470971][T12699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.525377][T12699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.745982][T12699] team0: Port device team_slave_0 added [ 629.775124][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.800807][T12699] team0: Port device team_slave_1 added [ 630.192173][T12699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.202452][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.253948][T12699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.292048][T12699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.425862][T12699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.451829][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.461399][T12699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.957652][T12699] hsr_slave_0: entered promiscuous mode [ 630.974928][T12699] hsr_slave_1: entered promiscuous mode [ 630.984193][T12699] debugfs: 'hsr0' already exists in 'hsr' [ 630.990305][T12699] Cannot create hsr debugfs directory [ 631.513950][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.621403][T12699] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 631.648631][T12699] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 631.662749][T12699] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 631.686411][T12699] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 631.704209][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.845579][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.880465][T12699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.923414][T12699] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.947924][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.955100][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.977479][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.984652][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.003746][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 632.128381][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 632.194727][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 632.345085][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 632.354481][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 632.458898][T12699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.513575][ T5885] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 632.572928][T12923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.587739][T12923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.614101][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 632.693843][ T5885] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.712590][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.960357][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.981984][ T24] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.989023][ T5885] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.028832][ T24] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 633.043866][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 633.050545][ T24] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 633.059703][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0 [ 633.059745][ T5885] usb 4-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.00 [ 633.059766][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.061606][ T5885] usb 4-1: config 0 descriptor?? [ 633.095728][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.114551][ T24] usb 2-1: config 0 descriptor?? [ 633.407373][T12699] veth0_vlan: entered promiscuous mode [ 633.426099][T12699] veth1_vlan: entered promiscuous mode [ 633.472589][T12699] veth0_macvtap: entered promiscuous mode [ 633.482557][T12699] veth1_macvtap: entered promiscuous mode [ 633.521665][T12699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.144015][ T24] corsair-cpro 0003:1B1C:0C10.0022: item fetching failed at offset 1/5 [ 634.157175][T12699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.176755][ T24] corsair-cpro 0003:1B1C:0C10.0022: probe with driver corsair-cpro failed with error -22 [ 634.234566][T12938] nfs: Unknown parameter '' [ 634.249946][ T24] usb 2-1: USB disconnect, device number 51 [ 634.256355][ T9942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.268816][T12939] rdma_rxe: rxe_newlink: failed to add wg1 [ 634.274330][T12938] 9pnet_fd: Insufficient options for proto=fd [ 634.276383][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 634.336466][ T5964] net_ratelimit: 8 callbacks suppressed [ 634.336483][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 634.385671][ T9942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.412221][ T9942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.414639][T12941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.434717][T12941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.459108][ T9942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.534499][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 634.590464][ T9942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.715802][ T9942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.217856][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.280174][ T9942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.292135][ T9942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.315692][ T30] audit: type=1400 audit(1753946238.829:753): avc: denied { mounton } for pid=12699 comm="syz-executor" path="/root/syzkaller.ld8oRN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=39405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 635.359196][ T30] audit: type=1400 audit(1753946238.869:754): avc: denied { mount } for pid=12699 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 635.391620][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.434168][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 635.440196][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 635.459274][ T5885] usb 4-1: USB disconnect, device number 51 [ 635.503597][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.703509][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.952158][ T30] audit: type=1400 audit(1753946239.469:755): avc: denied { setopt } for pid=12948 comm="syz.1.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 635.983842][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.113771][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.243548][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.353597][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.832910][T12963] Bluetooth: MGMT ver 1.23 [ 639.393353][ T5965] net_ratelimit: 12 callbacks suppressed [ 639.393367][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.523188][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1981'. [ 639.534293][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.535591][T12982] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 639.548155][T12982] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 639.558153][T12982] vhci_hcd vhci_hcd.0: Device attached [ 639.573272][T12983] vhci_hcd: connection closed [ 639.578608][T10450] vhci_hcd: stop threads [ 639.588647][T10450] vhci_hcd: release socket [ 639.593068][T10450] vhci_hcd: disconnect device [ 639.644009][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.762523][ T49] bond1: (slave ip6gretap1): link status up again after 0 ms [ 639.770406][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.813552][ T5970] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 639.884122][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.946735][ T5885] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 639.965252][ T5970] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 639.979300][ T5970] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.989127][ T5970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 639.995840][ T5970] usb 4-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.00 [ 640.004989][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.012533][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.043666][ T9945] Bluetooth: hci2: command 0x0406 tx timeout [ 640.404169][ T5970] usb 4-1: config 0 descriptor?? [ 640.418474][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.503756][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 640.546306][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.728671][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.389582][ T5885] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.410814][ T5885] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.425963][ T5885] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.442059][ T5885] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.475786][ T5885] usb 7-1: config 0 interface 0 has no altsetting 0 [ 641.501530][ T5885] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 641.510887][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.571523][ T5885] usb 7-1: config 0 descriptor?? [ 642.735274][ T5885] corsair-cpro 0003:1B1C:0C10.0023: item fetching failed at offset 1/5 [ 642.762219][ T5885] corsair-cpro 0003:1B1C:0C10.0023: probe with driver corsair-cpro failed with error -22 [ 642.778043][T13023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.794435][ T5970] usbhid 4-1:0.0: can't add hid device: -71 [ 642.798937][T13023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.800475][ T5970] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 642.822049][ T5970] usb 4-1: USB disconnect, device number 52 [ 643.053706][ T5905] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 643.305423][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.569086][T13042] usb usb8: usbfs: process 13042 (syz.4.1999) did not claim interface 0 before use [ 643.737830][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 643.750928][ T5905] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 643.760025][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.769624][ T5905] usb 2-1: config 0 descriptor?? [ 643.776392][ T5905] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 643.882018][ T30] audit: type=1400 audit(1753946247.389:756): avc: denied { setopt } for pid=13043 comm="syz.2.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 644.241713][ T5885] usb 7-1: USB disconnect, device number 2 [ 644.426279][ T49] net_ratelimit: 27 callbacks suppressed [ 644.426315][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.080299][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.138309][T13060] : entered promiscuous mode [ 645.205382][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.236872][T13063] libceph: resolve '4..' (ret=-3): failed [ 645.443619][ T5905] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 645.486431][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.645150][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.694550][ T5905] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 645.717093][ T5905] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.750944][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 645.759020][ T5905] usb 4-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.00 [ 645.768707][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.780782][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.792719][ T5905] usb 4-1: config 0 descriptor?? [ 645.883831][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.004178][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.033747][T13070] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2007'. [ 646.145433][ T5885] usb 2-1: USB disconnect, device number 52 [ 646.154399][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.594640][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.540473][ T30] audit: type=1400 audit(1753946251.059:757): avc: denied { ioctl } for pid=13085 comm="syz.6.2014" path="socket:[39787]" dev="sockfs" ino=39787 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 647.540546][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.716783][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.762150][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 648.768984][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 648.809408][ T5905] usb 4-1: USB disconnect, device number 53 [ 648.921141][T13101] FAULT_INJECTION: forcing a failure. [ 648.921141][T13101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.935910][T13101] CPU: 0 UID: 0 PID: 13101 Comm: syz.3.2018 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 648.935935][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 648.935944][T13101] Call Trace: [ 648.935951][T13101] [ 648.935958][T13101] dump_stack_lvl+0x16c/0x1f0 [ 648.935981][T13101] should_fail_ex+0x512/0x640 [ 648.935998][T13101] _copy_to_user+0x32/0xd0 [ 648.936012][T13101] do_pages_stat+0x5b4/0x840 [ 648.936031][T13101] ? __pfx_do_pages_stat+0x10/0x10 [ 648.936047][T13101] ? __lock_acquire+0x622/0x1c90 [ 648.936085][T13101] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.936102][T13101] ? lockdep_hardirqs_on+0x7c/0x110 [ 648.936119][T13101] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 648.936137][T13101] kernel_move_pages+0x106a/0x1430 [ 648.936155][T13101] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 648.936168][T13101] ? __pfx_kernel_move_pages+0x10/0x10 [ 648.936183][T13101] ? __fget_files+0x20e/0x3c0 [ 648.936201][T13101] ? fput+0x70/0xf0 [ 648.936223][T13101] ? ksys_write+0x1ac/0x250 [ 648.936241][T13101] ? __pfx_ksys_write+0x10/0x10 [ 648.936261][T13101] __x64_sys_move_pages+0xe0/0x1c0 [ 648.936282][T13101] ? do_syscall_64+0x91/0x4c0 [ 648.936294][T13101] ? lockdep_hardirqs_on+0x7c/0x110 [ 648.936306][T13101] do_syscall_64+0xcd/0x4c0 [ 648.936319][T13101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.936330][T13101] RIP: 0033:0x7fa6ab78e9a9 [ 648.936339][T13101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.936353][T13101] RSP: 002b:00007fa6ac68d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 648.936369][T13101] RAX: ffffffffffffffda RBX: 00007fa6ab9b5fa0 RCX: 00007fa6ab78e9a9 [ 648.936379][T13101] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 648.936388][T13101] RBP: 00007fa6ac68d090 R08: 0000200000000040 R09: 0000000000000000 [ 648.936398][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.936407][T13101] R13: 0000000000000000 R14: 00007fa6ab9b5fa0 R15: 00007fff1a3ce868 [ 648.936426][T13101] [ 649.472859][ T9942] net_ratelimit: 14 callbacks suppressed [ 649.472876][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 649.986820][ T5905] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 650.074272][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.183820][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.193258][ T5905] usb 4-1: config 2 has an invalid interface number: 186 but max is 0 [ 650.258955][ T5905] usb 4-1: config 2 has no interface number 0 [ 650.271605][ T5905] usb 4-1: config 2 interface 186 has no altsetting 0 [ 650.291662][ T5905] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 650.300875][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.309911][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.364715][ T5905] usb 4-1: Product: syz [ 650.369444][ T5905] usb 4-1: Manufacturer: syz [ 650.383064][ T5905] usb 4-1: SerialNumber: syz [ 650.403585][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.494100][T13117] rdma_rxe: rxe_newlink: failed to add wg1 [ 650.507490][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2022'. [ 650.513638][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.636306][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.948502][T13123] libceph: resolve '4..' (ret=-3): failed [ 650.955604][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.007226][ T5905] catc 4-1:2.186: Can't set altsetting 1. [ 651.023557][ T5905] catc 4-1:2.186: probe with driver catc failed with error -5 [ 651.072774][ T5905] usb 4-1: USB disconnect, device number 54 [ 651.091704][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.121777][T13126] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 651.131361][T13126] overlayfs: missing 'lowerdir' [ 651.251953][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.366632][T13130] netlink: 'syz.6.2025': attribute type 2 has an invalid length. [ 651.374546][T13130] netlink: 'syz.6.2025': attribute type 4 has an invalid length. [ 652.118769][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.133983][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.420773][T13138] Invalid source name [ 652.443659][T13138] UBIFS error (pid: 13138): cannot open "./file0", error -22 [ 652.444189][T13138] dlm: no local IP address has been set [ 652.473701][T13138] dlm: cannot start dlm midcomms -107 [ 652.830891][T13146] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 653.350451][ T30] audit: type=1400 audit(1753946256.869:758): avc: granted { setsecparam } for pid=13158 comm="syz.6.2033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 653.703730][ T5967] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 653.863655][ T5967] usb 5-1: Using ep0 maxpacket: 32 [ 653.875662][ T5967] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.886311][ T9945] Bluetooth: hci2: command 0x0406 tx timeout [ 653.897308][ T5967] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.912965][ T5967] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.933622][ T5967] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.958665][ T5967] usb 5-1: config 0 interface 0 has no altsetting 0 [ 653.975775][ T5967] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 653.997734][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.093956][ T5967] usb 5-1: config 0 descriptor?? [ 654.473716][ T9942] net_ratelimit: 20 callbacks suppressed [ 654.473732][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.947587][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.227274][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.331116][ T5967] corsair-cpro 0003:1B1C:0C10.0024: item fetching failed at offset 1/5 [ 656.351866][ T5967] corsair-cpro 0003:1B1C:0C10.0024: probe with driver corsair-cpro failed with error -22 [ 656.447326][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.574130][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.613597][T10717] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 656.807194][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.933037][T10717] usb 7-1: config 0 has an invalid interface number: 199 but max is 1 [ 658.155778][T10717] usb 7-1: config 0 has no interface number 1 [ 658.227139][T10717] usb 7-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 658.274510][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 658.355296][T10717] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 658.455522][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 659.324591][ T24] usb 5-1: USB disconnect, device number 60 [ 659.425742][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 659.810381][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.250542][T10717] usb 7-1: string descriptor 0 read error: -71 [ 660.274729][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.302814][T10717] usb 7-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 660.332778][T13219] 9pnet_fd: Insufficient options for proto=fd [ 660.341036][T10717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 660.346446][T13219] new mount options do not match the existing superblock, will be ignored [ 660.362803][ T30] audit: type=1400 audit(1753946263.879:759): avc: denied { remount } for pid=13217 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 660.366276][T13219] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 660.475848][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.624730][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.754041][T10717] usb 7-1: config 0 descriptor?? [ 660.877386][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.902343][T13230] comedi comedi2: rti802: I/O port conflict (0x209e1,4) [ 660.909870][T10717] usb 7-1: can't set config #0, error -71 [ 661.114298][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.223794][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.275447][T10717] usb 7-1: USB disconnect, device number 4 [ 661.353155][T13236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2051'. [ 661.373857][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.534566][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.104062][ T30] audit: type=1400 audit(1753946265.199:760): avc: denied { checkpoint_restore } for pid=13239 comm="syz.4.2054" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 662.286800][T13249] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 662.570633][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.676571][T13253] tipc: Enabling of bearer rejected, failed to enable media [ 663.739592][T13266] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002 [ 664.884502][ T49] net_ratelimit: 10 callbacks suppressed [ 664.884562][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.327574][ T30] audit: type=1400 audit(1753946268.749:761): avc: denied { mount } for pid=13269 comm="syz.2.2063" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 665.735451][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.827101][ T30] audit: type=1400 audit(1753946269.349:762): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 665.933674][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.412296][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.530818][ T30] audit: type=1326 audit(1753946270.049:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.2.2069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0344f8e9a9 code=0x0 [ 666.629316][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 668.163663][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 668.636055][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 668.891157][T13307] delete_channel: no stack [ 669.669266][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 669.834125][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.013934][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.143529][T10717] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 670.244774][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.384769][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.876479][T13312] nfs: Deprecated parameter 'nointr' [ 670.904921][T10717] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 670.905486][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.916020][T10717] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.938195][T10717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 670.944912][T10717] usb 4-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.00 [ 670.960719][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'. [ 670.970831][T10717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.981410][T10717] usb 4-1: config 0 descriptor?? [ 671.075012][ T30] audit: type=1400 audit(1753946274.569:764): avc: denied { mount } for pid=13340 comm="syz.2.2078" name="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 671.099092][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.149270][ T30] audit: type=1400 audit(1753946274.569:765): avc: denied { search } for pid=13340 comm="syz.2.2078" name="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.174880][ T30] audit: type=1400 audit(1753946274.569:766): avc: denied { search } for pid=13340 comm="syz.2.2078" name="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.225721][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.250100][ T30] audit: type=1400 audit(1753946274.569:767): avc: denied { search } for pid=13340 comm="syz.2.2078" name="/" dev="configfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 671.980238][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.313791][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.437106][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.563954][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.753631][ T1204] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 672.802368][T13359] libceph: resolve '4..' (ret=-3): failed [ 672.921620][ T1204] usb 7-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=30.62 [ 673.104081][T13364] ubi31: attaching mtd0 [ 673.111742][T13364] ubi31: scanning is finished [ 673.116529][T13364] ubi31: empty MTD device detected [ 673.269197][ T1204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.296504][T13366] libceph: resolve '4..' (ret=-3): failed [ 673.322823][ T1204] usb 7-1: Product: syz [ 673.328658][ T1204] usb 7-1: Manufacturer: syz [ 673.382352][T13364] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 673.390007][T13364] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 673.397358][T13364] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 673.404523][T13364] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 673.411978][T13364] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 673.418852][T13364] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 673.426963][T13364] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 977509214 [ 673.436996][T13364] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 673.481288][T10717] usbhid 4-1:0.0: can't add hid device: -71 [ 673.503624][T10717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 673.520425][T10717] usb 4-1: USB disconnect, device number 55 [ 673.521721][T13367] ubi31: background thread "ubi_bgt31d" started, PID 13367 [ 673.527458][ T1204] usb 7-1: SerialNumber: syz [ 673.562614][ T30] audit: type=1400 audit(1753946277.079:768): avc: denied { relabelfrom } for pid=13368 comm="syz.3.2085" name="" dev="pipefs" ino=40759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 673.639508][ T1204] usb 7-1: config 0 descriptor?? [ 673.658670][ T1204] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 673.670093][ T1204] usbduxfast 7-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 673.920683][ T30] audit: type=1400 audit(1753946277.439:769): avc: denied { link } for pid=13370 comm="syz.3.2086" name="file1" dev="overlay" ino=2144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 674.041018][ T30] audit: type=1400 audit(1753946277.439:770): avc: denied { setattr } for pid=13370 comm="syz.3.2086" name="#1c" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 674.280137][ T5905] usb 7-1: USB disconnect, device number 5 [ 674.291578][ T30] audit: type=1400 audit(1753946277.469:771): avc: denied { rename } for pid=13370 comm="syz.3.2086" name="#1c" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 674.331246][ T30] audit: type=1400 audit(1753946277.479:772): avc: denied { create } for pid=13370 comm="syz.3.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 674.354224][ T30] audit: type=1400 audit(1753946277.659:773): avc: denied { add_name } for pid=13354 comm="syz.6.2081" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 674.374771][ C1] vkms_vblank_simulate: vblank timer overrun [ 674.434285][T13378] block device autoloading is deprecated and will be removed. [ 675.063827][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2090'. [ 675.104680][ T49] net_ratelimit: 16 callbacks suppressed [ 675.104698][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 675.244940][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 675.363763][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 675.728624][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 675.907614][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.175046][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.283689][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.396210][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.594267][T13418] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2098'. [ 677.644832][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 677.757228][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 678.490849][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 678.490864][ T30] audit: type=1326 audit(1753946282.009:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.2.2099" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0344f8e9a9 code=0x0 [ 679.414394][T10717] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 680.179814][ T9942] net_ratelimit: 6 callbacks suppressed [ 680.179853][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 680.206904][T10717] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 680.217555][T10717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.284416][T10717] usb 4-1: Product: syz [ 680.488227][T10717] usb 4-1: Manufacturer: syz [ 680.495972][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 680.503920][T10717] usb 4-1: SerialNumber: syz [ 680.521030][T10717] usb 4-1: config 0 descriptor?? [ 680.624572][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 680.955094][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 680.988120][T10717] usb 4-1: USB disconnect, device number 56 [ 681.078611][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.214111][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.414989][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.609428][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.926195][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.993923][ T5905] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 682.204150][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 683.019753][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.046574][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.048738][T13472] 9pnet_fd: Insufficient options for proto=fd [ 683.098576][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.206851][T13478] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 683.285209][T13480] tmpfs: Unknown parameter 'usrquota_inode_har`limit' [ 683.348321][ T30] audit: type=1400 audit(1753946286.859:778): avc: denied { link } for pid=13479 comm="syz.3.2115" name="#1f" dev="tmpfs" ino=2191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 683.424920][T13482] tap0: tun_chr_ioctl cmd 1074025675 [ 683.447179][T13482] tap0: persist enabled [ 683.454053][ T30] audit: type=1400 audit(1753946286.889:779): avc: denied { rename } for pid=13479 comm="syz.3.2115" name="#20" dev="tmpfs" ino=2191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 683.505190][T13483] tap0: tun_chr_ioctl cmd 1074025675 [ 683.510507][T13483] tap0: persist enabled [ 683.516312][ T5905] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 683.538791][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.567834][T13482] input: syz0 as /devices/virtual/input/input37 [ 683.574208][ T5905] usb 7-1: config 0 descriptor?? [ 683.652790][ T30] audit: type=1400 audit(1753946287.129:780): avc: denied { execute } for pid=13484 comm="syz.3.2117" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 683.697766][T13487] FAULT_INJECTION: forcing a failure. [ 683.697766][T13487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.710960][T13487] CPU: 1 UID: 0 PID: 13487 Comm: syz.1.2118 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 683.710977][T13487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.710983][T13487] Call Trace: [ 683.710987][T13487] [ 683.710991][T13487] dump_stack_lvl+0x16c/0x1f0 [ 683.711011][T13487] should_fail_ex+0x512/0x640 [ 683.711024][T13487] _copy_to_user+0x32/0xd0 [ 683.711038][T13487] simple_read_from_buffer+0xcb/0x170 [ 683.711052][T13487] proc_fail_nth_read+0x197/0x240 [ 683.711066][T13487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 683.711080][T13487] ? rw_verify_area+0xcf/0x680 [ 683.711094][T13487] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 683.711107][T13487] vfs_read+0x1e1/0xc60 [ 683.711121][T13487] ? __pfx___mutex_lock+0x10/0x10 [ 683.711134][T13487] ? __pfx_vfs_read+0x10/0x10 [ 683.711150][T13487] ? __fget_files+0x20e/0x3c0 [ 683.711167][T13487] ksys_read+0x12a/0x250 [ 683.711178][T13487] ? __pfx_ksys_read+0x10/0x10 [ 683.711194][T13487] do_syscall_64+0xcd/0x4c0 [ 683.711207][T13487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.711218][T13487] RIP: 0033:0x7f563f58d3bc [ 683.711228][T13487] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 683.711238][T13487] RSP: 002b:00007f5640406030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 683.711248][T13487] RAX: ffffffffffffffda RBX: 00007f563f7b5fa0 RCX: 00007f563f58d3bc [ 683.711255][T13487] RDX: 000000000000000f RSI: 00007f56404060a0 RDI: 0000000000000006 [ 683.711261][T13487] RBP: 00007f5640406090 R08: 0000000000000000 R09: 0000000000000000 [ 683.711267][T13487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 683.711274][T13487] R13: 0000000000000000 R14: 00007f563f7b5fa0 R15: 00007fffb11d0038 [ 683.711287][T13487] [ 683.893677][ C1] vkms_vblank_simulate: vblank timer overrun [ 684.168146][T13496] tap0: tun_chr_ioctl cmd 2147774992 [ 684.176741][ T5905] savu 0003:1E7D:2D5A.0025: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 684.618396][ T5905] usb 7-1: USB disconnect, device number 6 [ 685.094381][ T5967] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 685.119461][T13508] rdma_rxe: rxe_newlink: failed to add wg1 [ 685.143919][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 685.243745][T13509] siw: device registration error -23 [ 685.259603][ T5964] net_ratelimit: 14 callbacks suppressed [ 685.259637][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.302586][ T5967] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 685.416454][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.496111][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.522703][ T5967] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.552340][ T5967] usb 2-1: config 0 interface 0 has no altsetting 0 [ 685.559795][ T5967] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 685.570038][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.612391][ T5967] usb 2-1: config 0 descriptor?? [ 685.617444][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.770882][T13511] input: syz0 as /devices/virtual/input/input38 [ 685.777362][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 685.894211][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.134964][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.219139][ T5967] hid-steam 0003:28DE:1102.0026: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 686.343567][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.463524][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.609143][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.764911][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.968459][T13525] FAULT_INJECTION: forcing a failure. [ 686.968459][T13525] name failslab, interval 1, probability 0, space 0, times 0 [ 687.031747][T13525] CPU: 1 UID: 0 PID: 13525 Comm: syz.2.2128 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 687.031776][T13525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 687.031787][T13525] Call Trace: [ 687.031794][T13525] [ 687.031802][T13525] dump_stack_lvl+0x16c/0x1f0 [ 687.031829][T13525] should_fail_ex+0x512/0x640 [ 687.031849][T13525] ? __kvmalloc_node_noprof+0x124/0x620 [ 687.031874][T13525] should_failslab+0xc2/0x120 [ 687.031898][T13525] __kvmalloc_node_noprof+0x137/0x620 [ 687.031920][T13525] ? nf_hook_entries_grow+0x285/0x860 [ 687.031946][T13525] ? nf_hook_entries_grow+0x285/0x860 [ 687.031965][T13525] nf_hook_entries_grow+0x285/0x860 [ 687.031995][T13525] __nf_register_net_hook+0x1cd/0x730 [ 687.032020][T13525] nf_register_net_hook+0x109/0x160 [ 687.032041][T13525] nf_register_net_hooks+0x5d/0xd0 [ 687.032065][T13525] nf_defrag_ipv4_enable+0xb8/0x120 [ 687.032090][T13525] nf_ct_netns_do_get+0x31d/0x620 [ 687.032113][T13525] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 687.032136][T13525] ? __pfx_nft_exthdr_init+0x10/0x10 [ 687.032160][T13525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 687.032186][T13525] nf_ct_netns_get+0x5b/0x150 [ 687.032207][T13525] nft_redir_init+0x202/0x2f0 [ 687.032231][T13525] nf_tables_newrule+0xe9e/0x28e0 [ 687.032250][T13525] ? __pfx_nft_redir_init+0x10/0x10 [ 687.032279][T13525] ? __pfx_nf_tables_newrule+0x10/0x10 [ 687.032308][T13525] ? __nla_parse+0x40/0x60 [ 687.032341][T13525] nfnetlink_rcv_batch+0x18ed/0x2330 [ 687.032383][T13525] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 687.032429][T13525] ? avc_has_perm_noaudit+0x149/0x3b0 [ 687.032487][T13525] ? __nla_parse+0x40/0x60 [ 687.032512][T13525] nfnetlink_rcv+0x3c1/0x430 [ 687.032537][T13525] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 687.032572][T13525] netlink_unicast+0x5a7/0x870 [ 687.032597][T13525] ? __pfx_netlink_unicast+0x10/0x10 [ 687.032619][T13525] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 687.032649][T13525] netlink_sendmsg+0x8d1/0xdd0 [ 687.032676][T13525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 687.032709][T13525] ____sys_sendmsg+0xa98/0xc70 [ 687.032736][T13525] ? copy_msghdr_from_user+0x10a/0x160 [ 687.032756][T13525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 687.032794][T13525] ___sys_sendmsg+0x134/0x1d0 [ 687.032815][T13525] ? __pfx____sys_sendmsg+0x10/0x10 [ 687.032833][T13525] ? __lock_acquire+0x622/0x1c90 [ 687.032886][T13525] ? __mutex_unlock_slowpath+0x80/0x800 [ 687.032916][T13525] __sys_sendmsg+0x16d/0x220 [ 687.032936][T13525] ? __pfx___sys_sendmsg+0x10/0x10 [ 687.032976][T13525] do_syscall_64+0xcd/0x4c0 [ 687.032999][T13525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.033018][T13525] RIP: 0033:0x7f0344f8e9a9 [ 687.033033][T13525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.033049][T13525] RSP: 002b:00007f0345dd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.033066][T13525] RAX: ffffffffffffffda RBX: 00007f03451b5fa0 RCX: 00007f0344f8e9a9 [ 687.033077][T13525] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 687.033087][T13525] RBP: 00007f0345dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 687.033098][T13525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 687.033108][T13525] R13: 0000000000000000 R14: 00007f03451b5fa0 R15: 00007fff5c1adc18 [ 687.033133][T13525] [ 687.360588][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.863942][T13529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2129'. [ 688.271561][ T5885] usb 2-1: USB disconnect, device number 53 [ 688.317946][T13535] misc userio: Invalid payload size [ 690.294406][T13564] misc userio: Invalid payload size [ 690.295553][ T13] net_ratelimit: 19 callbacks suppressed [ 690.295566][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.331625][T13565] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 690.364688][T13565] No source specified [ 690.434656][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.435633][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 690.573694][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.755404][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 690.762844][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.794531][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.794687][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 690.817947][ T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.830568][T13572] FAULT_INJECTION: forcing a failure. [ 690.830568][T13572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.837782][ T10] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.862816][T13572] CPU: 1 UID: 0 PID: 13572 Comm: syz.4.2142 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 690.862845][T13572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.862855][T13572] Call Trace: [ 690.862864][T13572] [ 690.862872][T13572] dump_stack_lvl+0x16c/0x1f0 [ 690.862900][T13572] should_fail_ex+0x512/0x640 [ 690.862921][T13572] _copy_to_user+0x32/0xd0 [ 690.862943][T13572] simple_read_from_buffer+0xcb/0x170 [ 690.862967][T13572] proc_fail_nth_read+0x197/0x240 [ 690.862991][T13572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.863015][T13572] ? rw_verify_area+0xcf/0x680 [ 690.863032][T13572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.863054][T13572] vfs_read+0x1e1/0xc60 [ 690.863077][T13572] ? __pfx___mutex_lock+0x10/0x10 [ 690.863099][T13572] ? __pfx_vfs_read+0x10/0x10 [ 690.863125][T13572] ? __fget_files+0x20e/0x3c0 [ 690.863154][T13572] ksys_read+0x12a/0x250 [ 690.863173][T13572] ? __pfx_ksys_read+0x10/0x10 [ 690.863200][T13572] do_syscall_64+0xcd/0x4c0 [ 690.863235][T13572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.863253][T13572] RIP: 0033:0x7f287cb8d3bc [ 690.863268][T13572] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 690.863284][T13572] RSP: 002b:00007f287d918030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.863301][T13572] RAX: ffffffffffffffda RBX: 00007f287cdb5fa0 RCX: 00007f287cb8d3bc [ 690.863318][T13572] RDX: 000000000000000f RSI: 00007f287d9180a0 RDI: 0000000000000005 [ 690.863328][T13572] RBP: 00007f287d918090 R08: 0000000000000000 R09: 0000000000000000 [ 690.863338][T13572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.863348][T13572] R13: 0000000000000000 R14: 00007f287cdb5fa0 R15: 00007ffef811acc8 [ 690.863372][T13572] [ 691.050479][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.102518][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 691.124296][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 691.133350][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.194008][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.252715][ T10] usb 4-1: config 0 descriptor?? [ 691.305523][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.515785][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.680946][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.689712][ T5905] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 691.743756][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.769272][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.873796][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.913665][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 691.925150][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 692.003833][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 692.016802][ T5905] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 692.050701][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.136668][ T5905] usb 5-1: Product: syz [ 692.193778][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 692.204697][ T5905] usb 5-1: Manufacturer: syz [ 692.230629][ T43] usb 2-1: config 0 has an invalid descriptor of length 133, skipping remainder of the config [ 692.253834][ T5905] usb 5-1: SerialNumber: syz [ 692.335326][ T5905] usb 5-1: config 0 descriptor?? [ 692.347707][ T43] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.351277][ T10] corsair-cpro 0003:1B1C:0C10.0027: item fetching failed at offset 1/5 [ 692.411568][ T43] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 693.131119][ T5905] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 693.481042][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.488356][ T10] corsair-cpro 0003:1B1C:0C10.0027: probe with driver corsair-cpro failed with error -22 [ 693.512287][ T43] usb 2-1: config 0 descriptor?? [ 693.518328][ T5905] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 693.658205][T13593] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2147'. [ 693.680599][T13593] wg1 speed is unknown, defaulting to 1000 [ 693.689709][T13593] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 693.729653][T13593] 8021q: adding VLAN 0 to HW filter on device bond2 [ 693.742161][ T43] usb 2-1: USB disconnect, device number 54 [ 693.748370][T13591] [U]  [ 693.751402][T13591] [U] [ 693.754077][T13591] [U] [ 693.756743][T13591] [U] [ 693.759400][T13591] [U] [ 693.762054][T13591] [U] [ 693.764710][T13591] [U] [ 693.767382][T13591] [U] [ 693.785340][T13591] [U] [ 693.788054][T13591] [U] [ 693.790726][T13591] [U] [ 693.855131][T13590] [U] [ 693.868455][T13593] bond2: (slave gretap0): making interface the new active one [ 693.879972][T13593] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 693.901773][T13579] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13579 comm=syz.4.2144 [ 694.241286][ T10] usb 4-1: USB disconnect, device number 57 [ 694.597610][T13609] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2153'. [ 694.609617][ T43] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 694.618662][ T43] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 694.651218][ T43] hid-generic 0000:0004:0000.0028: unknown main item tag 0x0 [ 694.687758][ T43] hid-generic 0000:0004:0000.0028: hidraw1: HID v0.00 Device [syz0] on syz0 [ 694.796895][T13612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2154'. [ 694.863630][ T5970] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 695.013618][ T5970] usb 2-1: Using ep0 maxpacket: 8 [ 695.018885][ T1204] usb 5-1: USB disconnect, device number 61 [ 695.022187][ T5970] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 695.039244][ T5970] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.065480][ T5970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 695.078010][ T5970] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 695.158735][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.178848][ T5970] usb 2-1: config 0 descriptor?? [ 695.192118][ T5970] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 695.206425][T13619] sp0: Synchronizing with TNC [ 695.243861][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 695.383647][ T49] net_ratelimit: 20 callbacks suppressed [ 695.383666][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.572261][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.580922][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.589356][ T10] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 695.604190][ T10] usb 4-1: config 0 has no interface number 0 [ 695.635392][ T10] usb 4-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 695.691881][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 695.705180][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.780947][ T10] usb 4-1: config 0 descriptor?? [ 695.843642][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.026126][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.151204][T13625] netlink: 'syz.4.2159': attribute type 2 has an invalid length. [ 696.183739][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.221108][T13625] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2159'. [ 696.377163][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.493763][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.613780][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.750946][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.863938][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 696.962434][ T10] asix 4-1:0.102 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 696.978831][ T10] asix 4-1:0.102: probe with driver asix failed with error -71 [ 697.093139][ T10] usb 4-1: USB disconnect, device number 58 [ 698.342667][ T10] usb 2-1: USB disconnect, device number 55 [ 698.362483][T13634] /dev/nullb0: Can't open blockdev [ 698.676881][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2162'. [ 698.719753][T13644] geneve2: entered promiscuous mode [ 698.725122][T13644] geneve2: entered allmulticast mode [ 698.995495][T13646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2164'. [ 700.453395][ T9942] net_ratelimit: 17 callbacks suppressed [ 700.487238][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.685675][T13675] netlink: 'syz.1.2172': attribute type 10 has an invalid length. [ 700.697227][ T30] audit: type=1400 audit(1753946303.509:781): avc: denied { ioctl } for pid=13664 comm="syz.3.2170" path="socket:[42511]" dev="sockfs" ino=42511 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 700.740915][ T30] audit: type=1400 audit(1753946303.629:782): avc: denied { listen } for pid=13664 comm="syz.3.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 700.860004][T13675] team0: Device hsr_slave_0 failed to register rx_handler [ 700.872876][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 700.885345][T13678] FAULT_INJECTION: forcing a failure. [ 700.885345][T13678] name failslab, interval 1, probability 0, space 0, times 0 [ 700.920285][T13678] CPU: 1 UID: 0 PID: 13678 Comm: syz.6.2173 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 700.920313][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.920328][T13678] Call Trace: [ 700.920334][T13678] [ 700.920342][T13678] dump_stack_lvl+0x16c/0x1f0 [ 700.920368][T13678] should_fail_ex+0x512/0x640 [ 700.920385][T13678] ? __kmalloc_noprof+0xbf/0x510 [ 700.920407][T13678] ? lsm_blob_alloc+0x68/0x90 [ 700.920422][T13678] should_failslab+0xc2/0x120 [ 700.920446][T13678] __kmalloc_noprof+0xd2/0x510 [ 700.920474][T13678] lsm_blob_alloc+0x68/0x90 [ 700.920492][T13678] security_sk_alloc+0x30/0x270 [ 700.920513][T13678] sk_prot_alloc+0xfb/0x2a0 [ 700.920541][T13678] sk_alloc+0x36/0xc20 [ 700.920560][T13678] inet_create+0x3a1/0x1040 [ 700.920585][T13678] ? inet_create+0x93/0x1040 [ 700.920615][T13678] __sock_create+0x335/0x8d0 [ 700.920645][T13678] udp_sock_create4+0xa6/0x450 [ 700.920669][T13678] ? __pfx_udp_sock_create4+0x10/0x10 [ 700.920695][T13678] ? lockdep_hardirqs_on+0x7c/0x110 [ 700.920715][T13678] ? crng_make_state+0x48e/0x6d0 [ 700.920738][T13678] rxrpc_open_socket+0x4f5/0x6b0 [ 700.920763][T13678] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 700.920796][T13678] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 700.920820][T13678] ? rcu_is_watching+0x12/0xc0 [ 700.920844][T13678] rxrpc_lookup_local+0xa01/0x1220 [ 700.920870][T13678] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 700.920895][T13678] ? __local_bh_enable_ip+0xa4/0x120 [ 700.920920][T13678] rxrpc_sendmsg+0x37e/0x680 [ 700.920950][T13678] ____sys_sendmsg+0xa98/0xc70 [ 700.920977][T13678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.921000][T13678] ? irqentry_exit+0x3b/0x90 [ 700.921032][T13678] ___sys_sendmsg+0x134/0x1d0 [ 700.921055][T13678] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.921072][T13678] ? __lock_acquire+0x622/0x1c90 [ 700.921133][T13678] __sys_sendmsg+0x16d/0x220 [ 700.921160][T13678] ? __pfx___sys_sendmsg+0x10/0x10 [ 700.921193][T13678] ? rcu_is_watching+0x12/0xc0 [ 700.921218][T13678] do_syscall_64+0xcd/0x4c0 [ 700.921241][T13678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.921259][T13678] RIP: 0033:0x7fbc84d8e9a9 [ 700.921275][T13678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.921292][T13678] RSP: 002b:00007fbc85c06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.921310][T13678] RAX: ffffffffffffffda RBX: 00007fbc84fb5fa0 RCX: 00007fbc84d8e9a9 [ 700.921321][T13678] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000005 [ 700.921332][T13678] RBP: 00007fbc85c06090 R08: 0000000000000000 R09: 0000000000000000 [ 700.921343][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.921353][T13678] R13: 0000000000000000 R14: 00007fbc84fb5fa0 R15: 00007ffdd40a2508 [ 700.921378][T13678] [ 701.293874][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.582548][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.627716][ T9945] Bluetooth: hci2: unexpected event for opcode 0x041b [ 701.703613][ T1204] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 701.711273][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.833916][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 701.973519][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.333734][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.660205][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 702.858745][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.807824][ T1204] usb 2-1: Using ep0 maxpacket: 16 [ 704.254411][ T1204] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 704.263251][ T1204] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.273468][ T1204] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.437221][ T1204] usb 2-1: string descriptor 0 read error: -71 [ 704.447814][ T1204] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 704.478095][ T1204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.518851][ T1204] usb 2-1: can't set config #1, error -71 [ 704.564739][ T1204] usb 2-1: USB disconnect, device number 56 [ 704.797759][T13693] FAULT_INJECTION: forcing a failure. [ 704.797759][T13693] name failslab, interval 1, probability 0, space 0, times 0 [ 704.872271][T13693] CPU: 1 UID: 0 PID: 13693 Comm: syz.4.2178 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 704.872298][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.872309][T13693] Call Trace: [ 704.872314][T13693] [ 704.872322][T13693] dump_stack_lvl+0x16c/0x1f0 [ 704.872347][T13693] should_fail_ex+0x512/0x640 [ 704.872362][T13693] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 704.872389][T13693] should_failslab+0xc2/0x120 [ 704.872413][T13693] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 704.872433][T13693] ? copy_process+0x4b6/0x7690 [ 704.872456][T13693] ? _raw_spin_unlock_irq+0x23/0x50 [ 704.872476][T13693] copy_process+0x4b6/0x7690 [ 704.872508][T13693] ? __pfx_copy_process+0x10/0x10 [ 704.872544][T13693] kernel_clone+0xfc/0x930 [ 704.872568][T13693] ? __pfx_kernel_clone+0x10/0x10 [ 704.872600][T13693] ? __mutex_unlock_slowpath+0x163/0x800 [ 704.872625][T13693] __do_sys_clone+0xce/0x120 [ 704.872647][T13693] ? __pfx___do_sys_clone+0x10/0x10 [ 704.872681][T13693] ? ksys_write+0x1ac/0x250 [ 704.872701][T13693] ? __pfx_ksys_write+0x10/0x10 [ 704.872727][T13693] do_syscall_64+0xcd/0x4c0 [ 704.872750][T13693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.872767][T13693] RIP: 0033:0x7f287cb8e9a9 [ 704.872781][T13693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.872797][T13693] RSP: 002b:00007f287d917fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 704.872814][T13693] RAX: ffffffffffffffda RBX: 00007f287cdb5fa0 RCX: 00007f287cb8e9a9 [ 704.872825][T13693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 704.872835][T13693] RBP: 00007f287d918090 R08: 0000000000000000 R09: 0000000000000000 [ 704.872846][T13693] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 704.872856][T13693] R13: 0000000000000000 R14: 00007f287cdb5fa0 R15: 00007ffef811acc8 [ 704.872880][T13693] [ 705.554071][ T9942] net_ratelimit: 14 callbacks suppressed [ 705.554096][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 705.591720][T13720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2186'. [ 705.663105][ T30] audit: type=1400 audit(1753946309.179:783): avc: denied { read } for pid=13719 comm="syz.2.2186" path="socket:[42573]" dev="sockfs" ino=42573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 705.821678][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.204673][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.481171][T13729] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2186'. [ 706.493927][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.651675][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 706.821006][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.097080][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 707.375523][T13739] vivid-007: ================= START STATUS ================= [ 707.383306][T13739] vivid-007: Generate PTS: true [ 707.390579][T13739] vivid-007: Generate SCR: true [ 707.395640][T13739] tpg source WxH: 320x240 (Y'CbCr) [ 707.400826][T13739] tpg field: 1 [ 707.404449][T13739] tpg crop: (0,0)/320x240 [ 707.408853][T13739] tpg compose: (0,0)/320x240 [ 707.413540][T13739] tpg colorspace: 8 [ 707.417408][T13739] tpg transfer function: 0/0 [ 707.423105][T13739] tpg Y'CbCr encoding: 0/0 [ 707.427678][T13739] tpg quantization: 0/0 [ 707.432014][T13739] tpg RGB range: 0/2 [ 707.436013][T13739] vivid-007: ================== END STATUS ================== [ 708.666172][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.758118][T13740] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 708.764751][T13740] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 708.936371][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.952208][T13740] vhci_hcd vhci_hcd.0: Device attached [ 708.972112][T13741] vhci_hcd: connection closed [ 708.982811][T10448] vhci_hcd: stop threads [ 709.014244][T10448] vhci_hcd: release socket [ 709.053493][T10448] vhci_hcd: disconnect device [ 709.093514][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 709.334350][T13757] FAULT_INJECTION: forcing a failure. [ 709.334350][T13757] name failslab, interval 1, probability 0, space 0, times 0 [ 709.373659][T13757] CPU: 1 UID: 0 PID: 13757 Comm: syz.2.2193 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 709.373686][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.373696][T13757] Call Trace: [ 709.373702][T13757] [ 709.373709][T13757] dump_stack_lvl+0x16c/0x1f0 [ 709.373735][T13757] should_fail_ex+0x512/0x640 [ 709.373751][T13757] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 709.373776][T13757] should_failslab+0xc2/0x120 [ 709.373798][T13757] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 709.373821][T13757] ? vfs_parse_fs_string+0xc3/0x150 [ 709.373849][T13757] kmemdup_nul+0x49/0xf0 [ 709.373870][T13757] vfs_parse_fs_string+0xc3/0x150 [ 709.373893][T13757] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 709.373923][T13757] ? shmem_next_opt+0xbc/0x120 [ 709.373947][T13757] ? __pfx_shmem_next_opt+0x10/0x10 [ 709.373969][T13757] vfs_parse_monolithic_sep+0x16f/0x1f0 [ 709.373992][T13757] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 709.374013][T13757] ? shmem_init_fs_context+0x222/0x2b0 [ 709.374038][T13757] ? __pfx_shmem_init_fs_context+0x10/0x10 [ 709.374063][T13757] ? alloc_fs_context+0x59b/0x9c0 [ 709.374090][T13757] path_mount+0x1438/0x1fd0 [ 709.374118][T13757] ? __pfx_path_mount+0x10/0x10 [ 709.374144][T13757] ? kmem_cache_free+0x2d1/0x4d0 [ 709.374163][T13757] ? putname+0x154/0x1a0 [ 709.374191][T13757] ? putname+0x154/0x1a0 [ 709.374217][T13757] ? __x64_sys_mount+0x28d/0x310 [ 709.374239][T13757] __x64_sys_mount+0x28d/0x310 [ 709.374263][T13757] ? __pfx___x64_sys_mount+0x10/0x10 [ 709.374294][T13757] do_syscall_64+0xcd/0x4c0 [ 709.374322][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.374340][T13757] RIP: 0033:0x7f0344f8e9a9 [ 709.374355][T13757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.374371][T13757] RSP: 002b:00007f0345dd4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 709.374388][T13757] RAX: ffffffffffffffda RBX: 00007f03451b5fa0 RCX: 00007f0344f8e9a9 [ 709.374399][T13757] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 709.374410][T13757] RBP: 00007f0345dd4090 R08: 00002000000000c0 R09: 0000000000000000 [ 709.374421][T13757] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000002 [ 709.374431][T13757] R13: 0000000000000001 R14: 00007f03451b5fa0 R15: 00007fff5c1adc18 [ 709.374455][T13757] [ 710.038581][T13765] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 710.045752][T13765] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2196'. [ 710.064356][T10446] Bluetooth: hci6: Frame reassembly failed (-84) [ 710.187231][T13776] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2198'. [ 710.287454][T13775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.603662][ T49] net_ratelimit: 10 callbacks suppressed [ 710.603683][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.733729][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.857160][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 710.988790][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.516304][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 711.742157][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 712.252174][T13768] Bluetooth: hci0: command tx timeout [ 712.257754][T13768] Bluetooth: hci6: command 0x1003 tx timeout [ 712.504999][ T30] audit: type=1400 audit(1753946315.379:784): avc: denied { getopt } for pid=13788 comm="syz.6.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 712.524493][ C0] vkms_vblank_simulate: vblank timer overrun [ 713.151175][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.573706][ T9945] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 714.783563][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.576625][T13812] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 715.588744][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.395239][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 716.758537][T13820] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2208'. [ 716.783579][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.329348][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.364467][T13832] syz0: rxe_newlink: already configured on wg1 [ 718.410367][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'. [ 718.608850][T10717] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 718.625588][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 719.228925][T13835] libceph: resolve '4..' (ret=-3): failed [ 719.325253][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 719.379575][T10717] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 719.400975][T10717] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.414665][ T9945] Bluetooth: hci2: unexpected event for opcode 0x041b [ 719.517618][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.214240][T10717] usb 5-1: config 0 interface 0 has no altsetting 0 [ 720.231555][T10717] usb 5-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice= 0.00 [ 720.245919][T10717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.281701][T10717] usb 5-1: config 0 descriptor?? [ 720.295691][T10717] usb 5-1: can't set config #0, error -71 [ 720.304449][T10717] usb 5-1: USB disconnect, device number 62 [ 720.325651][T10448] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 720.373621][T13844] syz.6.2215: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 720.392242][T13844] CPU: 0 UID: 0 PID: 13844 Comm: syz.6.2215 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 720.392269][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.392280][T13844] Call Trace: [ 720.392286][T13844] [ 720.392295][T13844] dump_stack_lvl+0x16c/0x1f0 [ 720.392322][T13844] warn_alloc+0x248/0x3a0 [ 720.392344][T13844] ? __pfx_warn_alloc+0x10/0x10 [ 720.392368][T13844] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 720.392380][T13844] ? __vmalloc_node_noprof+0xad/0xf0 [ 720.392393][T13844] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 720.392408][T13844] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 720.392428][T13844] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 720.392449][T13844] ? ___kmalloc_large_node+0xed/0x160 [ 720.392479][T13844] __kvmalloc_node_noprof+0x30a/0x620 [ 720.392498][T13844] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 720.392514][T13844] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 720.392529][T13844] ? xp_create_and_assign_umem+0x1b5/0xe20 [ 720.392540][T13844] xp_create_and_assign_umem+0x1b5/0xe20 [ 720.392553][T13844] ? dev_get_by_index+0x17c/0x380 [ 720.392569][T13844] xsk_bind+0x4c6/0x1570 [ 720.392598][T13844] ? __pfx_xsk_bind+0x10/0x10 [ 720.392622][T13844] ? __pfx_xsk_bind+0x10/0x10 [ 720.392650][T13844] __sys_bind+0x1a7/0x260 [ 720.392666][T13844] ? __pfx___sys_bind+0x10/0x10 [ 720.392691][T13844] __x64_sys_bind+0x72/0xb0 [ 720.392705][T13844] ? lockdep_hardirqs_on+0x7c/0x110 [ 720.392721][T13844] do_syscall_64+0xcd/0x4c0 [ 720.392744][T13844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.392760][T13844] RIP: 0033:0x7fbc84d8e9a9 [ 720.392774][T13844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.392792][T13844] RSP: 002b:00007fbc85be5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 720.392802][T13844] RAX: ffffffffffffffda RBX: 00007fbc84fb6080 RCX: 00007fbc84d8e9a9 [ 720.392809][T13844] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000b [ 720.392815][T13844] RBP: 00007fbc84e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 720.392821][T13844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.392827][T13844] R13: 0000000000000000 R14: 00007fbc84fb6080 R15: 00007ffdd40a2508 [ 720.392840][T13844] [ 720.392845][T13844] Mem-Info: [ 720.635564][T13844] active_anon:27793 inactive_anon:0 isolated_anon:0 [ 720.635564][T13844] active_file:24554 inactive_file:42243 isolated_file:0 [ 720.635564][T13844] unevictable:768 dirty:483 writeback:0 [ 720.635564][T13844] slab_reclaimable:12875 slab_unreclaimable:114601 [ 720.635564][T13844] mapped:42784 shmem:22572 pagetables:1427 [ 720.635564][T13844] sec_pagetables:0 bounce:0 [ 720.635564][T13844] kernel_misc_reclaimable:0 [ 720.635564][T13844] free:1233580 free_pcp:15210 free_cma:0 [ 720.681122][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.756835][T13844] Node 0 active_anon:114856kB inactive_anon:0kB active_file:98216kB inactive_file:168836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:171136kB dirty:1944kB writeback:0kB shmem:88752kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12744kB pagetables:5816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 721.800647][T13844] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 721.891070][T13844] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 721.939442][T13844] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 721.960091][T13844] Node 0 DMA32 free:1010924kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111732kB inactive_anon:0kB active_file:98216kB inactive_file:167528kB unevictable:1536kB writepending:1944kB present:3129332kB managed:2540088kB mlocked:0kB bounce:0kB free_pcp:42572kB local_pcp:29328kB free_cma:0kB [ 721.993645][ T1204] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 722.004520][T13844] lowmem_reserve[]: 0 0 1 1 1 [ 722.009364][T13844] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:8kB free_cma:0kB [ 722.056588][T13844] lowmem_reserve[]: 0 0 0 0 0 [ 722.061327][T13844] Node 1 Normal free:3884484kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22304kB local_pcp:16640kB free_cma:0kB [ 722.099479][T13844] lowmem_reserve[]: 0 0 0 0 0 [ 722.105819][T13844] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 722.124043][T13844] Node 0 DMA32: 47*4kB (ME) 60*8kB (UME) 365*16kB (UME) 219*32kB (ME) 127*64kB (UME) 86*128kB (UME) 45*256kB (UME) 28*512kB (UM) 10*1024kB (UME) 14*2048kB (UME) 223*4096kB (UM) = 1010828kB [ 722.152703][T13844] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 722.169582][ T1204] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 722.179948][ T1204] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 722.191551][ T1204] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 722.200767][T13844] Node 1 Normal: 209*4kB (UME) 42*8kB (UME) 43*16kB (UME) 246*32kB (UME) 63*64kB (UME) 16*128kB (UME) 8*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 942*4096kB (M) = 3884484kB [ 722.222834][ T1204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.242133][T13844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.253236][ T1204] usb 2-1: config 0 descriptor?? [ 722.256391][T13844] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 722.299645][T13844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.313022][T13844] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 722.322930][T13844] 89365 total pagecache pages [ 722.333475][T13844] 0 pages in swap cache [ 722.341301][T13844] Free swap = 124996kB [ 722.362988][T13844] Total swap = 124996kB [ 722.381837][T13844] 2097051 pages RAM [ 722.391186][T13844] 0 pages HighMem/MovableOnly [ 722.403471][T13844] 430051 pages reserved [ 722.416931][T13844] 0 pages cma reserved [ 722.654179][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 722.917096][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 723.070536][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 723.583531][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 723.666553][T10717] usb 2-1: USB disconnect, device number 57 [ 723.694953][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.184457][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.493730][ T30] audit: type=1400 audit(1753946327.799:785): avc: denied { map } for pid=13874 comm="syz.4.2223" path="socket:[43818]" dev="sockfs" ino=43818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 724.704190][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.824242][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 725.023569][ T43] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 725.044781][T13888] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 726.144828][ T43] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 726.383527][ T43] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 726.391873][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 726.403393][ T43] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 726.413901][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 726.423941][ T43] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 726.433113][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.436905][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.441419][ T43] usb 2-1: Product: syz [ 726.452800][ T43] usb 2-1: Manufacturer: syz [ 726.457796][ T43] usb 2-1: SerialNumber: syz [ 726.466421][ T43] usb 2-1: config 0 descriptor?? [ 726.472206][T13881] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 726.594529][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 726.598361][ T9945] Bluetooth: hci2: unexpected event for opcode 0x041b [ 728.043657][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 728.071247][ T43] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 728.083920][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 728.093092][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 728.102539][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 728.142459][ T43] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 728.166650][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 728.180816][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 728.196518][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 728.206870][ T43] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 728.219148][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 728.244218][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 728.267162][ T43] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 728.369250][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 728.461190][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 728.514314][ T43] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 728.532026][ T43] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 728.544448][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 728.586096][ T43] usb 2-1: USB disconnect, device number 58 [ 728.607707][ T43] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 728.887049][ T43] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 728.898516][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 728.934867][ T43] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 728.962683][ T43] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 729.032329][ T43] keyspan 2-1:0.0: device disconnected [ 729.214314][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 729.347186][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 730.179940][ T13] bond1: (slave ip6gretap1): link status up again after 0 ms [ 730.220354][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 730.237527][T13922] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 730.387056][T13922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.469597][T13925] bond0: (slave wlan0): Enslaving as an active interface with a down link [ 731.033628][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.085955][T13922] vlan2: entered allmulticast mode [ 731.164339][T13922] veth1: entered allmulticast mode [ 731.171932][T13922] veth1: entered promiscuous mode [ 731.181363][T13922] veth1: left promiscuous mode [ 731.188229][T13922] bond0: (slave vlan2): making interface the new active one [ 731.215743][T13922] veth1: entered promiscuous mode [ 731.253825][T13922] vlan2: entered promiscuous mode [ 731.259488][T13922] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 731.640358][ T43] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 731.698811][T13936] input: syz0 as /devices/virtual/input/input40 [ 731.813659][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 731.853740][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.943719][ T43] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.963672][ T43] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.977839][ T43] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.990997][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 732.033804][ T43] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 732.058840][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.070253][ T43] usb 5-1: config 0 descriptor?? [ 732.413508][ T1204] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 732.616304][ T1204] usb 2-1: Using ep0 maxpacket: 8 [ 732.635038][ T1204] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 732.976018][ T43] corsair-cpro 0003:1B1C:0C10.0029: item fetching failed at offset 1/5 [ 733.013941][ T1204] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 733.031090][ T43] corsair-cpro 0003:1B1C:0C10.0029: probe with driver corsair-cpro failed with error -22 [ 733.106095][ T5964] net_ratelimit: 13 callbacks suppressed [ 733.106108][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.123497][ T1204] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 733.244279][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.322283][ T1204] usb 2-1: Product: syz [ 733.340053][ T1204] usb 2-1: Manufacturer: syz [ 733.363884][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.385735][ T1204] usb 2-1: SerialNumber: syz [ 733.457276][T13944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.479372][T13944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.479750][ T1204] usb 2-1: config 0 descriptor?? [ 733.492467][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.513150][ T1204] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 733.531286][ T43] usb 5-1: USB disconnect, device number 63 [ 733.623636][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.744091][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.855267][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 733.929076][ T9945] Bluetooth: hci2: unexpected event for opcode 0x041b [ 734.534694][ T1204] gspca_zc3xx: reg_w_i err -71 [ 735.513223][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 735.596536][ T30] audit: type=1400 audit(1753946339.119:786): avc: denied { read } for pid=13932 comm="syz.1.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 735.622123][T13934] program syz.1.2239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 735.644010][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 735.770434][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.033691][ T1204] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 736.462870][ T1204] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 736.828487][ T1204] usb 2-1: USB disconnect, device number 59 [ 736.962746][T13970] FAULT_INJECTION: forcing a failure. [ 736.962746][T13970] name failslab, interval 1, probability 0, space 0, times 0 [ 737.136964][T13970] CPU: 0 UID: 0 PID: 13970 Comm: syz.4.2249 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 737.136991][T13970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.137000][T13970] Call Trace: [ 737.137007][T13970] [ 737.137013][T13970] dump_stack_lvl+0x16c/0x1f0 [ 737.137037][T13970] should_fail_ex+0x512/0x640 [ 737.137050][T13970] ? __kmalloc_node_noprof+0xc5/0x500 [ 737.137065][T13970] should_failslab+0xc2/0x120 [ 737.137080][T13970] __kmalloc_node_noprof+0xd8/0x500 [ 737.137096][T13970] ? crypto_alg_lookup+0x113/0x1e0 [ 737.137124][T13970] ? crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 737.137151][T13970] ? __pfx_crypto_alg_extsize+0x10/0x10 [ 737.137170][T13970] crypto_alloc_tfmmem.isra.0+0x38/0x110 [ 737.137188][T13970] crypto_create_tfm_node+0x85/0x350 [ 737.137206][T13970] crypto_alloc_tfm_node+0x102/0x260 [ 737.137218][T13970] sctp_inet_listen+0x825/0xa20 [ 737.137233][T13970] ? __pfx_sctp_inet_listen+0x10/0x10 [ 737.137261][T13970] ? __fget_files+0x20e/0x3c0 [ 737.137286][T13970] __sys_listen_socket+0x114/0x160 [ 737.137312][T13970] __sys_listen+0xa7/0x130 [ 737.137329][T13970] __x64_sys_listen+0x53/0x80 [ 737.137344][T13970] do_syscall_64+0xcd/0x4c0 [ 737.137358][T13970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.137369][T13970] RIP: 0033:0x7f287cb8e9a9 [ 737.137379][T13970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.137395][T13970] RSP: 002b:00007f287d918038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 737.137412][T13970] RAX: ffffffffffffffda RBX: 00007f287cdb5fa0 RCX: 00007f287cb8e9a9 [ 737.137423][T13970] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 737.137432][T13970] RBP: 00007f287d918090 R08: 0000000000000000 R09: 0000000000000000 [ 737.137441][T13970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.137451][T13970] R13: 0000000000000000 R14: 00007f287cdb5fa0 R15: 00007ffef811acc8 [ 737.137468][T13970] [ 737.701233][T13981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.724000][T13981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.831195][T13983] syz.4.2254: attempt to access beyond end of device [ 737.831195][T13983] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 737.850006][T13983] gfs2: error -5 reading superblock [ 737.968633][T13992] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2257'. [ 738.138567][T10450] net_ratelimit: 13 callbacks suppressed [ 738.138586][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.193644][ T1204] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 738.263593][ T5885] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 738.283557][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.353804][ T1204] usb 5-1: Using ep0 maxpacket: 32 [ 738.360529][ T1204] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 738.388262][ T1204] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 738.397818][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.399618][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 738.413680][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 738.421362][ T1204] usb 5-1: Product: syz [ 738.426068][ T1204] usb 5-1: Manufacturer: syz [ 738.431123][ T1204] usb 5-1: SerialNumber: syz [ 738.436434][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.448206][ T5885] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.460493][ T1204] usb 5-1: config 0 descriptor?? [ 738.465598][ T5885] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.476546][T13983] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 738.486720][ T5885] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.505785][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0 [ 738.512533][ T5885] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 738.521731][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.531636][ T5885] usb 2-1: config 0 descriptor?? [ 738.533957][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.653685][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.691109][ T1204] usb 5-1: USB disconnect, device number 64 [ 738.763584][T10450] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.873506][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 739.007077][ T9942] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 739.073641][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 739.251910][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 739.285145][ T5885] corsair-cpro 0003:1B1C:0C10.002A: item fetching failed at offset 1/5 [ 739.318336][ T5885] corsair-cpro 0003:1B1C:0C10.002A: probe with driver corsair-cpro failed with error -22 [ 739.376257][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 739.394647][ T43] usb 7-1: device descriptor read/64, error -71 [ 740.403527][ T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 740.533832][ T43] usb 7-1: device descriptor read/64, error -71 [ 740.650251][ T43] usb usb7-port1: attempt power cycle [ 740.662091][ T5905] usb 2-1: USB disconnect, device number 60 [ 740.670096][ T30] audit: type=1326 audit(1753946344.179:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14017 comm="syz.4.2263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f287cb8e9a9 code=0x0 [ 740.720721][ T49] Bluetooth: hci6: Frame reassembly failed (-84) [ 740.914462][T14023] FAULT_INJECTION: forcing a failure. [ 740.914462][T14023] name failslab, interval 1, probability 0, space 0, times 0 [ 740.927914][T14023] CPU: 1 UID: 0 PID: 14023 Comm: syz.2.2264 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 740.927941][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.927951][T14023] Call Trace: [ 740.927958][T14023] [ 740.927971][T14023] dump_stack_lvl+0x16c/0x1f0 [ 740.928002][T14023] should_fail_ex+0x512/0x640 [ 740.928019][T14023] ? __kmalloc_noprof+0xbf/0x510 [ 740.928042][T14023] ? io_cache_alloc_new+0x45/0xf0 [ 740.928060][T14023] should_failslab+0xc2/0x120 [ 740.928084][T14023] __kmalloc_noprof+0xd2/0x510 [ 740.928111][T14023] io_cache_alloc_new+0x45/0xf0 [ 740.928130][T14023] io_uring_cmd_prep+0x373/0x590 [ 740.928149][T14023] io_submit_sqes+0x835/0x2590 [ 740.928187][T14023] __do_sys_io_uring_enter+0xd6a/0x1630 [ 740.928219][T14023] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 740.928243][T14023] ? __pfx___schedule+0x10/0x10 [ 740.928261][T14023] ? rcu_is_watching+0x12/0xc0 [ 740.928283][T14023] ? irqentry_exit+0x3b/0x90 [ 740.928317][T14023] do_syscall_64+0xcd/0x4c0 [ 740.928340][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.928358][T14023] RIP: 0033:0x7f0344f8e9a9 [ 740.928374][T14023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.928391][T14023] RSP: 002b:00007f0345db3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 740.928410][T14023] RAX: ffffffffffffffda RBX: 00007f03451b6080 RCX: 00007f0344f8e9a9 [ 740.928421][T14023] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000008 [ 740.928432][T14023] RBP: 00007f0345db3090 R08: 0000000000000000 R09: 0000000000000000 [ 740.928442][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.928452][T14023] R13: 0000000000000000 R14: 00007f03451b6080 R15: 00007fff5c1adc18 [ 740.928477][T14023] [ 741.410742][ T43] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 741.453105][ T43] usb 7-1: device descriptor read/8, error -71 [ 741.803602][ T43] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 741.846226][ T43] usb 7-1: device descriptor read/8, error -71 [ 741.877811][T14034] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2268'. [ 742.029524][ T43] usb usb7-port1: unable to enumerate USB device [ 742.771280][T13767] Bluetooth: hci6: command 0x1003 tx timeout [ 742.771581][ T9945] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 742.987404][T14052] tap2: tun_chr_ioctl cmd 1074025675 [ 742.992805][T14052] tap2: persist enabled [ 743.067897][T14052] tap2: tun_chr_ioctl cmd 1074025675 [ 743.073256][T14052] tap2: persist enabled [ 743.079099][T14052] input: syz0 as /devices/virtual/input/input41 [ 743.178828][T14057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14057 comm=syz.6.2276 [ 743.223310][T14057] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2276'. [ 743.289875][ T13] net_ratelimit: 21 callbacks suppressed [ 743.289895][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.318192][T14056] tap2: tun_chr_ioctl cmd 2147774992 [ 743.437597][ T43] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 743.486172][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.743909][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.882251][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2267'. [ 743.932352][T14062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2267'. [ 744.023282][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2267'. [ 744.243908][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 744.253162][T14047] bridge0: entered promiscuous mode [ 744.259736][T14047] bridge0: entered allmulticast mode [ 744.275766][ T3502] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 744.409865][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2267'. [ 744.447217][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 744.467684][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.482570][ T43] usb 4-1: Product: syz [ 744.492426][ T43] usb 4-1: Manufacturer: syz [ 744.499642][ T43] usb 4-1: SerialNumber: syz [ 744.512535][ T43] usb 4-1: config 0 descriptor?? [ 744.530742][ T43] gspca_main: sq930x-2.14.0 probing 2770:930c [ 744.639243][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.070153][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.185885][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.371790][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.733601][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.863625][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 745.989863][T14050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.106582][T14050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.230433][T14083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2281'. [ 746.374347][ T43] gspca_sq930x: reg_w 0105 0f00 failed -110 [ 746.393021][ T43] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 746.470881][T10717] usb 4-1: USB disconnect, device number 59 [ 746.854311][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.128114][T13768] Bluetooth: hci2: command 0x0406 tx timeout [ 747.347751][T14103] Device name not specified. [ 747.347751][T14103] [ 747.355323][T14100] FAULT_INJECTION: forcing a failure. [ 747.355323][T14100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.374884][T14100] CPU: 1 UID: 0 PID: 14100 Comm: syz.1.2284 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 747.374901][T14100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 747.374908][T14100] Call Trace: [ 747.374911][T14100] [ 747.374916][T14100] dump_stack_lvl+0x16c/0x1f0 [ 747.374932][T14100] should_fail_ex+0x512/0x640 [ 747.374944][T14100] core_sys_select+0x949/0xc10 [ 747.374961][T14100] ? __pfx_core_sys_select+0x10/0x10 [ 747.374986][T14100] ? set_user_sigmask+0x21b/0x2b0 [ 747.375001][T14100] ? __pfx_set_user_sigmask+0x10/0x10 [ 747.375016][T14100] do_pselect.constprop.0+0x19f/0x1e0 [ 747.375029][T14100] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 747.375048][T14100] __x64_sys_pselect6+0x182/0x240 [ 747.375061][T14100] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 747.375072][T14100] ? xfd_validate_state+0x61/0x180 [ 747.375092][T14100] do_syscall_64+0xcd/0x4c0 [ 747.375106][T14100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.375117][T14100] RIP: 0033:0x7f563f58e9a9 [ 747.375126][T14100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.375136][T14100] RSP: 002b:00007f563d3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 747.375146][T14100] RAX: ffffffffffffffda RBX: 00007f563f7b6160 RCX: 00007f563f58e9a9 [ 747.375153][T14100] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 747.375159][T14100] RBP: 00007f563d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 747.375165][T14100] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 747.375171][T14100] R13: 0000000000000000 R14: 00007f563f7b6160 R15: 00007fffb11d0038 [ 747.375185][T14100] [ 748.018129][T14114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.076675][T10446] vlan2: left promiscuous mode [ 748.369798][T14119] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 748.389482][T14119] /dev/nullb0: Can't open blockdev [ 748.390934][T14120] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2293'. [ 748.483557][ T13] net_ratelimit: 14 callbacks suppressed [ 748.491187][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.757056][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.848929][T14122] syz0: rxe_newlink: already configured on wg1 [ 748.951356][T14124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.960247][T14124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.971730][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.051063][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 749.137307][ T5964] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.764653][ T3015] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 749.957656][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 750.668306][ T3015] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 750.793574][ T3015] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 750.934455][ T3015] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.034604][ T30] audit: type=1800 audit(1753946354.559:788): pid=14141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2299" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 751.063935][ T5965] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.117930][T14141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.128024][T14141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.742832][T10448] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 751.841462][T14152] FAULT_INJECTION: forcing a failure. [ 751.841462][T14152] name failslab, interval 1, probability 0, space 0, times 0 [ 751.854258][T14152] CPU: 0 UID: 0 PID: 14152 Comm: syz.1.2302 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 751.854283][T14152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 751.854293][T14152] Call Trace: [ 751.854300][T14152] [ 751.854307][T14152] dump_stack_lvl+0x16c/0x1f0 [ 751.854332][T14152] should_fail_ex+0x512/0x640 [ 751.854348][T14152] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 751.854371][T14152] should_failslab+0xc2/0x120 [ 751.854394][T14152] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 751.854413][T14152] ? __might_fault+0xe3/0x190 [ 751.854430][T14152] ? __might_fault+0x13b/0x190 [ 751.854448][T14152] ? getname_flags.part.0+0x4c/0x550 [ 751.854468][T14152] getname_flags.part.0+0x4c/0x550 [ 751.854488][T14152] getname_flags+0x93/0xf0 [ 751.854508][T14152] user_path_at+0x24/0x60 [ 751.854529][T14152] __x64_sys_mount+0x1fc/0x310 [ 751.854553][T14152] ? __pfx___x64_sys_mount+0x10/0x10 [ 751.854585][T14152] do_syscall_64+0xcd/0x4c0 [ 751.854608][T14152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.854632][T14152] RIP: 0033:0x7f563f58e9a9 [ 751.854646][T14152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.854662][T14152] RSP: 002b:00007f5640406038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 751.854680][T14152] RAX: ffffffffffffffda RBX: 00007f563f7b5fa0 RCX: 00007f563f58e9a9 [ 751.854690][T14152] RDX: 00002000000003c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 751.854700][T14152] RBP: 00007f5640406090 R08: 0000000000000000 R09: 0000000000000000 [ 751.854710][T14152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.854720][T14152] R13: 0000000000000000 R14: 00007f563f7b5fa0 R15: 00007fffb11d0038 [ 751.854744][T14152] [ 752.031137][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.204755][T10717] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 752.503599][T10717] usb 4-1: device descriptor read/64, error -71 [ 752.753957][T10717] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 753.053777][T10717] usb 4-1: device descriptor read/64, error -71 [ 753.234292][T10717] usb usb4-port1: attempt power cycle [ 753.460901][T14183] netlink: 'syz.2.2310': attribute type 2 has an invalid length. [ 753.783524][ T49] net_ratelimit: 13 callbacks suppressed [ 753.783541][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.803712][T10717] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 753.811437][T13768] Bluetooth: hci6: command 0x1003 tx timeout [ 753.819595][ T9945] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 753.844008][T10717] usb 4-1: device descriptor read/8, error -71 [ 753.905616][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 753.978397][T14192] syzkaller1: entered promiscuous mode [ 753.983980][T14192] syzkaller1: entered allmulticast mode [ 754.162724][T10717] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 754.167204][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 754.224705][T10717] usb 4-1: device descriptor read/8, error -71 [ 754.228409][T14196] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2313'. [ 754.247590][T14194] loop2: detected capacity change from 0 to 7 [ 754.257073][T14194] Dev loop2: unable to read RDB block 7 [ 754.262688][T14194] loop2: unable to read partition table [ 754.268795][T14194] loop2: partition table beyond EOD, truncated [ 754.275105][T14194] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 754.295849][ T68] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 754.303645][ T43] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 754.333770][T10717] usb usb4-port1: unable to enumerate USB device [ 754.403565][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 754.521499][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 754.703723][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 754.903865][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 754.955881][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 755.034109][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.047936][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 755.057062][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.067391][ T43] usb 2-1: config 0 descriptor?? [ 755.086152][T10446] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 755.252180][ T3502] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 755.490420][ T43] logitech 0003:046D:C294.002B: unknown main item tag 0x0 [ 755.682020][ T43] logitech 0003:046D:C294.002B: hidraw1: USB HID vb4.34 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 755.763449][ T43] logitech 0003:046D:C294.002B: no inputs found [ 755.821466][ T43] usb 2-1: USB disconnect, device number 61 [ 756.388548][ T31] INFO: task syz.5.1875:12523 blocked for more than 143 seconds. [ 757.226931][ T31] Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 [ 757.234308][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.242999][ T31] task:syz.5.1875 state:D stack:26824 pid:12523 tgid:12510 ppid:9855 task_flags:0x400140 flags:0x00004004 [ 757.255309][ T31] Call Trace: [ 757.258617][ T31] [ 757.261554][ T31] __schedule+0x118d/0x5df0 [ 757.266099][ T31] ? trace_sched_exit_tp+0x10/0x130 [ 757.271319][ T31] ? __lock_acquire+0x622/0x1c90 [ 757.276380][ T31] ? __pfx___schedule+0x10/0x10 [ 757.281815][ T31] ? find_held_lock+0x2b/0x80 [ 757.286571][ T31] ? schedule+0x2d7/0x3a0 [ 757.290928][ T31] schedule+0xe7/0x3a0 [ 757.348962][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.359066][ T31] __mutex_lock+0x81a/0x1070 [ 757.363824][ T31] ? usbdev_open+0x1b6/0x8b0 [ 757.368505][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 757.373816][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.378944][ T31] ? kobject_put+0xab/0x5a0 [ 757.383542][ T31] ? __pfx_device_match_devt+0x10/0x10 [ 757.389101][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 757.394489][ T31] ? usbdev_open+0x1b6/0x8b0 [ 757.401348][ T31] usbdev_open+0x1b6/0x8b0 [ 757.406060][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 757.413335][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 757.418938][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 757.425140][ T31] chrdev_open+0x231/0x6a0 [ 757.432913][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 757.438009][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 757.449279][ T31] do_dentry_open+0x744/0x1c10 [ 757.454198][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 757.459251][ T31] vfs_open+0x82/0x3f0 [ 757.467775][ T31] path_openat+0x1de4/0x2cb0 [ 757.475302][ T31] ? __pfx_path_openat+0x10/0x10 [ 757.480309][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 757.486501][ T31] do_filp_open+0x20b/0x470 [ 757.491077][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 757.500590][ T31] ? alloc_fd+0x471/0x7d0 [ 757.507847][ T31] do_sys_openat2+0x11b/0x1d0 [ 757.513490][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.518870][ T31] __x64_sys_openat+0x174/0x210 [ 757.529372][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 757.540350][ T31] do_syscall_64+0xcd/0x4c0 [ 757.544962][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.550945][ T31] RIP: 0033:0x7f2787d8d310 [ 757.556639][ T31] RSP: 002b:00007f27859d4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 757.565284][ T31] RAX: ffffffffffffffda RBX: 0000000000101b03 RCX: 00007f2787d8d310 [ 757.573362][ T31] RDX: 0000000000101b03 RSI: 00007f27859d4c10 RDI: 00000000ffffff9c [ 757.581514][ T31] RBP: 00007f27859d4c10 R08: 0000000000000000 R09: 0000000000000000 [ 757.595757][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 757.603956][ T31] R13: 0000000000000000 R14: 00007f2787fb6160 R15: 00007ffd569b0408 [ 757.612013][ T31] [ 757.617314][ T31] [ 757.617314][ T31] Showing all locks held in the system: [ 757.625165][ T31] 1 lock held by khungtaskd/31: [ 757.630004][ T31] #0: ffffffff8e5c3a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 757.639890][ T31] 5 locks held by kworker/1:2/1053: [ 757.645460][ T31] #0: ffff8881446e8d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 757.656940][ T31] #1: ffffc9000420fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 757.668359][ T31] #2: ffff8881457f1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 757.677291][ T31] #3: ffff88807696a198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 757.686625][ T31] #4: ffff88802279e160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 757.696204][ T31] 2 locks held by getty/5581: [ 757.700877][ T31] #0: ffff8880365b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 757.710668][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 757.721924][ T31] 1 lock held by syz.5.1875/12523: [ 757.729373][ T31] #0: ffff8881457f1198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x8b0 [ 757.738394][ T31] [ 757.740728][ T31] ============================================= [ 757.740728][ T31] [ 757.750008][ T31] NMI backtrace for cpu 1 [ 757.750022][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 757.750043][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.750053][ T31] Call Trace: [ 757.750059][ T31] [ 757.750066][ T31] dump_stack_lvl+0x116/0x1f0 [ 757.750094][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 757.750120][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 757.750147][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 757.750175][ T31] watchdog+0xf0e/0x1260 [ 757.750199][ T31] ? __pfx_watchdog+0x10/0x10 [ 757.750215][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 757.750235][ T31] ? __kthread_parkme+0x19e/0x250 [ 757.750260][ T31] ? __pfx_watchdog+0x10/0x10 [ 757.750278][ T31] kthread+0x3c2/0x780 [ 757.750295][ T31] ? __pfx_kthread+0x10/0x10 [ 757.750311][ T31] ? rcu_is_watching+0x12/0xc0 [ 757.750332][ T31] ? __pfx_kthread+0x10/0x10 [ 757.750349][ T31] ret_from_fork+0x5d4/0x6f0 [ 757.750364][ T31] ? __pfx_kthread+0x10/0x10 [ 757.750380][ T31] ret_from_fork_asm+0x1a/0x30 [ 757.750411][ T31] [ 757.750433][ T31] Sending NMI from CPU 1 to CPUs 0: [ 757.868620][ C0] NMI backtrace for cpu 0 [ 757.868635][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 757.868652][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.868661][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 757.868680][ C0] Code: cb 66 02 e9 43 0b 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 bc 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 757.868692][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c6 [ 757.868703][ C0] RAX: 0000000002ff6be5 RBX: 0000000000000000 RCX: ffffffff8b8b5c99 [ 757.868712][ C0] RDX: 0000000000000000 RSI: ffffffff8de12f1c RDI: ffffffff8c160b80 [ 757.868721][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086655 [ 757.868730][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 757.868739][ C0] R13: ffffffff8e297780 R14: ffffffff90a7d650 R15: 0000000000000000 [ 757.868748][ C0] FS: 0000000000000000(0000) GS:ffff88812471e000(0000) knlGS:0000000000000000 [ 757.868762][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.868771][ C0] CR2: 0000555572a065c8 CR3: 000000007d2f9000 CR4: 00000000003526f0 [ 757.868780][ C0] Call Trace: [ 757.868785][ C0] [ 757.868791][ C0] default_idle+0x13/0x20 [ 757.868807][ C0] default_idle_call+0x6d/0xb0 [ 757.868823][ C0] do_idle+0x391/0x510 [ 757.868840][ C0] ? __pfx_do_idle+0x10/0x10 [ 757.868856][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 757.868877][ C0] cpu_startup_entry+0x4f/0x60 [ 757.868893][ C0] rest_init+0x16b/0x2b0 [ 757.868909][ C0] ? acpi_subsystem_init+0x133/0x180 [ 757.868924][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 757.868940][ C0] start_kernel+0x3ee/0x4d0 [ 757.868955][ C0] x86_64_start_reservations+0x18/0x30 [ 757.868970][ C0] x86_64_start_kernel+0x130/0x190 [ 757.868984][ C0] common_startup_64+0x13e/0x148 [ 757.869004][ C0] [ 757.869731][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 758.067879][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(full) [ 758.079312][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 758.089360][ T31] Call Trace: [ 758.092618][ T31] [ 758.095529][ T31] dump_stack_lvl+0x3d/0x1f0 [ 758.100106][ T31] panic+0x71c/0x800 [ 758.103999][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 758.109873][ T31] ? __pfx_panic+0x10/0x10 [ 758.114277][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 758.119635][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 758.125600][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 758.130959][ T31] ? watchdog+0xd78/0x1260 [ 758.135356][ T31] ? watchdog+0xd6b/0x1260 [ 758.139755][ T31] watchdog+0xd89/0x1260 [ 758.143997][ T31] ? __pfx_watchdog+0x10/0x10 [ 758.148658][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 758.153839][ T31] ? __kthread_parkme+0x19e/0x250 [ 758.158849][ T31] ? __pfx_watchdog+0x10/0x10 [ 758.163509][ T31] kthread+0x3c2/0x780 [ 758.167569][ T31] ? __pfx_kthread+0x10/0x10 [ 758.172154][ T31] ? rcu_is_watching+0x12/0xc0 [ 758.176901][ T31] ? __pfx_kthread+0x10/0x10 [ 758.181471][ T31] ret_from_fork+0x5d4/0x6f0 [ 758.186040][ T31] ? __pfx_kthread+0x10/0x10 [ 758.190610][ T31] ret_from_fork_asm+0x1a/0x30 [ 758.195364][ T31] [ 758.198569][ T31] Kernel Offset: disabled [ 758.202880][ T31] Rebooting in 86400 seconds..