last executing test programs: 14m55.766943486s ago: executing program 3 (id=523): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}}, 0x4040080) unlink(&(0x7f0000000280)='./file1\x00') 14m55.40122856s ago: executing program 3 (id=528): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95a, 0x9, 0x8, 0x2000081, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x5dd2, 0x3, 0x7, 0x100, 0x7, 0xa, 0x7, 0x3, 0x3c57, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0xd, 0x4, 0x106, 0x0, 0x7, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x0, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12b, 0x8000, 0xe, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x201, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x400, 0x8, 0x2, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x1000, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffff7, 0x6, 0x7, 0x5, 0x0, 0x10007, 0x7, 0x5e0176be, 0x2, 0x7f, 0x9, 0xa, 0x4, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x20ff], [0x5, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0x7fff, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0x400005, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x2, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x6, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x935, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x3, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff8, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0x3, 0xfffb, 0x7, 0x8, 0x100, 0x3, 0xb, 0x2, 0xe36f, 0x6, 0x101, 0x10000, 0x2, 0x9, 0x2b91, 0x6, 0x8, 0x9, 0x1, 0x0, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x81) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000010640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) 14m52.113874829s ago: executing program 3 (id=534): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0xab) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r5, r6, r7], 0x3}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_usb_control_io(r8, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000780)={0x40, 0xa, 0xce, "95b8435550a7d89e7dcc67e50865bf1b36b8d507d2971ff8e0442474fe1d5b16a2872fef3dc4f5c8bcfbff2be5a720530dc07e8f74085e6ab95673d5b80329a00803068697a96765403a5a41852a6604cc4b379e53dca268a267d337b2876ae62e8fc71c3a6eaa7931abb4b4c4609c9f4d64311d69fd1bef7cd7769e471c86668074ffc7b872674b7f83c3df1b0fcd2c2715219c33d47e3d6700e3ac9850e9132ab4c1afc60824d2f589e5319d35c35cf8cdc1f3137cb51a7824a6feecf83306d6f48294c6d4fff8226a9b49d639"}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="20000800000000008000dfffffff73e71cc618a64bf5067f28892a0799148674b70b842b7f96f96ccf8c0466c3731f50bfc83c51626e8b9d17cbebc347182039c0947941"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r8, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r8, 0x81, 0xfe, &(0x7f0000000c40)="b9425b44651dd23241963599000000110000004a16941ff5f46182cdf4b0b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb4706a2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYBLOB="c38a20e79ec2977792e31d8d882902c63caf9bd31e880ec3c96c14ded248ad5a279e14e9dc407c5e1ae385c104a98ea485ced5440fd80f6947d2a353319977ed6b923104083b698bb1c0c6d3be296bd42b78f0c127a07528776b45aabbe2103de550e1fdf26eba26f404301909ddff4f413994cb7a4701f32962b5943b6905", @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r1, @ANYRESOCT=r0, @ANYRESOCT], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r9 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000006c0)={0x7e, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "831d4ec1"}]}}, 0x0}, 0x0) 14m48.6642367s ago: executing program 3 (id=545): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003800c00028005000100840000002c00018014000300"], 0x90}, 0x1, 0x0, 0x0, 0x14}, 0x0) io_submit(0x0, 0x2190, &(0x7f0000000000)) setsockopt$WPAN_WANTLQI(r5, 0x0, 0x3, &(0x7f0000000240), 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x300, 0x0, 0x0) close(r0) 14m47.638099332s ago: executing program 3 (id=547): r0 = gettid() r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r2) sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, &(0x7f0000000000)) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000080), 0x2, 0x2101, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) r8 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8, 0x642) fsetxattr$security_capability(r8, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x7e}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) write$UHID_INPUT(r8, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', 0x5}) 14m47.178415586s ago: executing program 3 (id=551): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() getrlimit(0x4, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) readv(r5, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) 14m32.157525177s ago: executing program 32 (id=551): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() getrlimit(0x4, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000300), 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) readv(r5, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) 12.588159037s ago: executing program 0 (id=4430): syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a2701020301090223000100000000090401"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4a, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_PIT2(r2, 0xaea2, &(0x7f00000004c0)={[{0x15c8, 0xc787, 0x2, 0x6, 0x0, 0xc6, 0x70, 0x1, 0x3, 0x1, 0xda, 0xf8, 0x3}, {0xfffffffc, 0xf3f, 0x0, 0x7d, 0x92, 0x7, 0x9, 0xa, 0x0, 0x85, 0xd, 0x4e, 0x6}, {0x4, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x9, 0xe, 0xfff}]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x180, 0x1}, 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYBLOB="8da75eb287f800f29e3418b1539984909b43b51f124b849bb9bd89c8"], 0xff2e) pselect6(0x40, &(0x7f00000000c0)={0xffff, 0x7, 0xfffffffffffffffb, 0x9, 0x6, 0x9, 0x80, 0x56ea95fa}, &(0x7f0000000100)={0x400, 0x7, 0x7, 0x8, 0x10000, 0x8, 0x4, 0x8}, &(0x7f0000000140)={0x34, 0x100000000, 0x2, 0x70c67e8, 0xc264, 0x5, 0x5, 0x3}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x9]}, 0x8}) read(r3, &(0x7f00000002c0)=""/133, 0x85) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x7) 10.033758397s ago: executing program 4 (id=4443): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) shutdown(r3, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = epoll_create(0xfffffffa) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000008000000dd000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000470000000000000000000000000000000000003fc326a3aeaa0ba57df22739a7dd12cb86c2f70ed1b7cc391a2c4d59a326dc8424d8657dcae3e78a0d038cc49b9f0e05eefb209e28c77f1d7b24aeec1f361c6707e3825857d6925f94e71306582009997ac3b6c3b2640b83eb745de37fe7b144d2cafc707a5439d2e437986d7131a7f8c8570f4b03be301f3022a1aa8ea75ef8ec3db788f0fbeb471cd79d50b44cea3a8ec24eb30bca8a1b61e645ffbbad9c232733f931388eb4f921991946cade608cc67c2e945319f03d4ea64035c0de789ad706d3e49fa387786de2ebcefe376d8ceb16e29f92ae8eb0e726"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="fbabb390d75273eb96591d3d5a8c37987a677010cc4887de9d747a4df1bfb622e1463d9214333583835a2729419216f9837c866e056db22b53e4549dfcf015221e9e", @ANYRESDEC=0x0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000480)=ANY=[@ANYRES8=r6, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x1}, {0xffff, 0xfff3}, {0xf, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x10, 0x2}, {}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 9.765624324s ago: executing program 5 (id=4444): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="010128bd7000ffdbdf251e0000000c00060001000000010000"], 0x1c4}, 0x1, 0x0, 0x0, 0x4028800}, 0x4800) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="db7f1f3ada01571b7f193368b6cf3373932151b5077e8260cacbae846ef51d93d4fb1fcc463e91660c2f7fb2bf82e825a87fb4ed9d20d9a9e6ddc432d65b1ff541a40df1a8056564ee7366f67a9236c33857651d775c164b64391a1dd3ef676dde4248960fed1816e777e60232795daa195354d165299009ffa3", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') fremovexattr(0xffffffffffffffff, &(0x7f0000000380)=@known='system.posix_acl_access\x00') socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0xc, 0xfffffffffffffffc, 0x3}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)) r8 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000005400), 0x0, 0xfff0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x4000000}, 0x40e3) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 8.853762358s ago: executing program 4 (id=4446): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x1b, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x5}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair(0x25, 0x1, 0x0, &(0x7f0000000080)) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x82881, 0x0) ioctl$TCSETSW2(r3, 0x5433, 0x0) 6.813511719s ago: executing program 0 (id=4449): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x869b10a9) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4000000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) timer_create(0x7, &(0x7f00000002c0)={0x0, 0x1e, 0x7, @thr={&(0x7f0000000940)="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", &(0x7f0000000740)="59dcb99b8414b8a72c7286d8604c7c0960b64d22a02e5603fb7927e991c5afbdf67753e74425729f8b2e6817822c80f8508c68c9d0af12136065ca49a666f6312dd0adfd093abfe1157065911931914ef0eed0db08db5ca75391c1e523aef179fb1ff891f482ac8a8560e77d7a2e20817f0138827be2d0c1b35a22f9faad35184e7cf9581584c59fa807d02634db4b070d88b9b6cb799440"}}, &(0x7f0000000340)=0x0) timer_settime(r4, 0x1, &(0x7f0000000500)={{}, {0x0, 0x3938700}}, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@ipv4_newrule={0x4c, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'team_slave_0\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x4c}}, 0x0) (fail_nth: 3) 6.743275691s ago: executing program 5 (id=4451): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) 6.649174737s ago: executing program 1 (id=4452): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x400, 0x4, 0x33424752, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff, 0x5}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$llc_int(r2, 0x10c, 0x3, 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x7}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$I2C_SLAVE(r5, 0x703, 0x26b) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7ff, 0x1, 0xd, 0x1000400, 0x36e]}, &(0x7f0000000400)=0x54) pselect6(0x40, &(0x7f00000001c0)={0x60, 0x149, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08004500007400f5000004019078ac1e0001ac1414aa03019078036100004600000000004000141410ac1414bb44440001000086dd0000dc02ffffffff00000000ac14143200000000000000000000004fe0000002000000007f00000111000e00ac1414aa00000004e000000100000000"], 0x0) 5.752679877s ago: executing program 5 (id=4453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30", @ANYRES32=0x0, @ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES16=r0], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x40408c4) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x40000000015, 0x5, 0x0) mount$nfs(0x0, 0x0, 0x0, 0x201008, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, &(0x7f0000000580)) fchown(r6, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0xc000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1400e94eeaeb150f00000000fbdb9dce879613ccc79b9721000000000000"], 0x14}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r8, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc6a, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.11432055s ago: executing program 0 (id=4454): ioperm(0xa, 0x1, 0xe62) r0 = getpid() read$FUSE(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1805000048ae07b8000000004b64ffec850000007d00000004000021c7000011030095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) getrusage(0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) memfd_create(&(0x7f0000000b00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xe4\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x19\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd\xa65`8\x83\xb1\x90\xc3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.EaR5\xd6aC\x93\xe24\xf8\x88\x10\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb0\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x42}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 3.807067115s ago: executing program 5 (id=4456): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) write$P9_RSTATu(r1, &(0x7f0000000340)={0x230, 0x7d, 0x0, {{0x500, 0xef, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[], 0x9c}}, 0x0) syz_emit_ethernet(0x71, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaa20000000000086dd621c0adf003b210100000000000100000000ffffe0000002fe8000002900000000000000000000aa01000400081009004e204e2104e1907834a43a72065e6a98c72e76f2bfa5ab126751365f0803d9fbcd60ed354a4d00d18f7635414162d88bfab2f1", @ANYBLOB="829f8f1ec3bc158119f3ac0211f6e666afe89081974a89361365f3eddf7b853d72", @ANYRESHEX], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.544000559s ago: executing program 1 (id=4458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x2ffb, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$UHID_INPUT(r6, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)="02", 0x1, 0x4499, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.435536252s ago: executing program 4 (id=4459): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) write$cgroup_int(r0, &(0x7f0000000040)=0x3f, 0x12) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01034000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x200000d4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0xa, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.431466211s ago: executing program 2 (id=4460): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$media(&(0x7f0000000080), 0x80000000, 0x40) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000440)={0x80000000, 0x0, &(0x7f00000000c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f00000002c0)={r4}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08041000000000000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007391bd06b3c70c301", 0x45}, {&(0x7f0000000840)="5c4875c6cad162c8a030dbf75c317dad4320e1bb556d3b3e131b77de8bd885166fc0c25d69226ae9915eccf9551f804eae36cf2327896a817179f04f35d9a7deed88adf4ca13a5a0c36a7496d22b9adf2c0fa13e1572ad237e2677a2797d5dd9307bff0bc01e4fd69c546e17a7118272ace242bc6025d0b60a12b3788fa6a7649045e4af16ba69df4bd43527a3d09bb308ac70", 0x93}], 0x2, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x600, 0x108, 0x410, 0x1d8, 0x0, 0x108, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000900), {[{{@ipv6={@empty, @rand_addr=' \x01\x00', [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'veth0\x00', 'bond0\x00', {0xff}, {0xff}, 0x33, 0x40, 0x1, 0x9}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x2}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x3, 0x1}, {0x1, 0x3}, {0xffffffffffffffff, 0x5, 0x5}, 0xd, 0x5}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'veth1\x00', 'vlan1\x00', {0xff}, {0xff}, 0x8, 0xff, 0x4, 0x2c}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xd3}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'syz_tun\x00', 'vcan0\x00', {}, {0xff}, 0x3b, 0xd8, 0x0, 0x1}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x7}}, @common=@inet=@dccp={{0x30}, {[0x4e22, 0x4e22], [0x4e24, 0x4e20], 0x4, 0x1, 0x5, 0xff}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@remote, 0x38, 0x5, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31, 0x13, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xbf1e0847f47744e7], 'veth1_to_hsr\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x2b, 0xc, 0x7, 0x2d}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@icmp6={{0x28}, {0x4, "c165", 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@delchain={0x24, 0x5f, 0xf31, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x5, 0x2}, {0xfff1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x11, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x1c, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc9cf422}}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0xfffffffe, 0x79, &(0x7f0000000500)=""/121, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0x0, 0x2, 0xffffffa9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)=[{0x0, 0x4, 0x7, 0x6}], 0x10, 0x7}, 0x94) 1.922183664s ago: executing program 4 (id=4461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, 0x0) 1.769879555s ago: executing program 1 (id=4462): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (fail_nth: 8) 1.680925974s ago: executing program 4 (id=4463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0x1, 0x4, 0x6}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000700)={0xf9, 0x1, 0x0, 0x5, 0x7}) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x8014) 1.653315234s ago: executing program 2 (id=4464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fcntl$setlease(r0, 0x400, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x3}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350701437df94f0a338977934d7172d956b141e3f4e87e6ab615ea379a6fe42744c6e7b3ab38f5f36c09090000ecff0000000000f40848cd0300fd5dfad46248d200"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000101d00000800458e002c0064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60100007907800e704000000f06a2a945dd6e9af341b68a1555ba5"], 0x0) 1.537594044s ago: executing program 1 (id=4465): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000480)={@multicast2}, &(0x7f0000000500)=0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f00000007c0)={0x20000008, 0x88}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000140)="94", 0x1}, {0x0}, {&(0x7f00000001c0)="e30064fbb8d0ce851b10e85e7547d2f06ba505d31dce4b008ce324826174384d3b64fc461ed086b231", 0x29}, {&(0x7f0000000340)="1ec21a3d45441f076c71ca933a05d174ebd1e15028a97c45f1c46627988004b72eb4c85faf982a0215d28585236d8b4584ab49d571c4c5596fee0950da59c9d1a8c5b88a21d26d4a549aa79ad065bf3b406ca673b6bfdd761d50e73b247a500f8911097238daaa067eca5f9e9ee59828ba48ce42a59e", 0x76}, {&(0x7f00000005c0)="6ac13947ef2518dc75324f588a583f646c62b891b9ea04d7fb69d69ff6ed45339b859bc026d71d737269db9236cdb051d733536b38861fc457e55aa2534b106fb5f3578815a3c6330c8c0cebe8443c0d3c928f03dab4e459eb52b6b8f93e144b651f3cd0d9a76591dc70618b3b4d9167ff861248bd133bc48e018ba9b1b6795eb22dff1910fbf88288ead591756fc535", 0x90}], 0x5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r4, &(0x7f0000000100)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000000000000a"], 0x50) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.537016687s ago: executing program 0 (id=4466): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYRESOCT=r2], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) r7 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x202) r8 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xc39, 0x80, 0x0, 0x8000021e, 0x0, r7}, &(0x7f0000000080), &(0x7f00000000c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x100010, r9, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000040)=0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write(r9, &(0x7f0000000740)="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", 0xfe) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000080)=0x7) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.353798008s ago: executing program 4 (id=4467): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xd) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0x7f, 0x0, 0x1, 0x100, 0x7, "61821f6f7b00eeec0585a4dfabaa5bcfb5c019"}) read(r1, &(0x7f0000000180)=""/23, 0x17) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a01040000000000000000020000001c0004460380180001800e000100696d6d656469617465000000040002800900010073797a30000000000900020073797a32000000001400000011000100"/112], 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xfffffffffffff380, 0x0) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='g', 0x1}], 0x1}, 0x0) recvmmsg$unix(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10120, 0x0) read$FUSE(r6, 0x0, 0x0) 1.259089676s ago: executing program 2 (id=4468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket(0x2a, 0x2, 0x2) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1d896}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x4000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.049603489s ago: executing program 1 (id=4469): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='erofs_readpage\x00', 0xffffffffffffffff, 0x0, 0x20000000002000}, 0x18) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4000, 0x0, 0x865d, 0xfd, "ffff00"}) syz_open_pts(r1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='coredump_filter\x00') fchdir(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@aname}, {@cache_loose}, {@cache_fscache}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\'!B[&'}}, {@measure}, {@euid_eq}, {@pcr={'pcr', 0x3d, 0x29}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_measure}, {@euid_gt={'euid>', r5}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}}) r6 = eventfd(0x10) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x3e00, 0x0, 0x0, 0x4, r1, &(0x7f0000000400)="005d045035c51cada0ffdd5740490d7ad620364f79f6a8ec98b22f7fbceedec2be2da29b22b2eb74d7bfa9effca8004ff61f149aaffdd97073270ae80e29e7166299074fa45ff952cbbb578dfeff0214e531661a17b5ead7c80d2bf1973191d2d866bf57ce3469e975b4453809d9eef5e0dce458ff158fba71aedd538074ef94db1b777ae184349aeffc7a18ec31ae211694b06ea086246abb9114c964ccedf0e8325f8f4e1ae1001fa8e28553bd343e58c26d5debf7b63676d9e4fa6e846cfe43ff957e65", 0xc5, 0xceaa, 0x0, 0x5, r6}]) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0xb}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c6970"], 0x60}}, 0x0) 554.877364ms ago: executing program 2 (id=4470): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000640)="3bcba026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c0118cef9523680f4d9a0dbdc5479ca82428e902a6b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263eb6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d69174ec573beef7e5cff03f59ebfe97136d7cb400c1d0ed4ee3b83090abb113aa4e9260695700"/177, 0xb1}, {&(0x7f00000005c0)="742f311a83a225186414bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}, {&(0x7f0000000c00)="eaf2fbe1d5e83fb5f59460bac7e1db385adad678e7abb79293d493e44aec0bcf7194ff9c9c9fd079a96919b292cae2c2cfb9fb887e079947b5321777085f312b4f6bea18e16d4e026571270c8e72100e9121f8c1f4825fb1945ba8314924215fdb8869c50814b439241a3fbc06fb51", 0x6f}, {&(0x7f0000000c80)="3eee3c58b09218ff5677852afd4e24522a4ece5b9663be424371bf7d2879169df1f66dad7a8c6349e265f0208519fbada17ac1842c92185dfa8fa457c1cd9f080bd227f9d545e9ba0c1619966f643bc949f86b6de8525a90421ba9a2975e2ceb8e2454df18c062b207dafab128a942b37dc0117b1544c97242990869e999ab26dff63bd938b049d19d85f5ab3c2bf08ba008895d0db620f5cd6300c04dbc32e386ac7b1b782b7bfa62a76ad9515b134d03c9534ba735a574e6dcee5c9a3d3c3727a60634c05e4896afa29d9a58072202bbe8d805d34a9671e7c4428b16c566fcdc93", 0xe2}], 0x4}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000e00)="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", 0x246}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 402.436213ms ago: executing program 1 (id=4471): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000400140000fe000001000000000c001a0001530cd998", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) request_key(&(0x7f0000000400)='.request_key_auth\x00', 0x0, 0x0, 0xfffffffffffffffc) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003d0007010000000000010000047c0000"], 0x18}}, 0xc000) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 360.605316ms ago: executing program 2 (id=4472): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000300)=0xffc, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000036ffffff00"], 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x30, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x12}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000002080)=0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x2b8, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "09f5f9", 0x282, 0x6, 0x1, @mcast1, @loopback, {[@routing={0x89, 0x2, 0x0, 0x7, 0x0, [@private0]}, @srh={0xc, 0xa, 0x4, 0x5, 0xb9, 0x6c, 0x7, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x18}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x89, 0x0, 0x4, 0x0, 0x0, 0xf, 0x68}, @dstopts={0x3a, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x7fff}, @jumbo, @enc_lim={0x4, 0x1, 0xb6}]}, @dstopts={0x32, 0x24, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x401, [0xa8, 0x7ff, 0x2, 0x8d8, 0x4]}}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @mcast2}, @generic={0x2, 0x82, "cb18c05abacde4847754202429d1a3c4ed02117f737394c056796ac43e1ffe2836b7a1dc55109b8f7f2497f1e044af9a5ab1f85689d0998b93533a553aa3cf9c2bde2899d1f40a56925f32d812280724cb1ecb56e5cbcb8e7d327974d4638ac3f2cd254daaaef39426138fb51fe927dc0198a43e307e3dd6f86d252b4b7f9648c73b"}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0xc, 0x8, [0x2, 0x8, 0x1, 0x40000000008c17, 0x2, 0x26]}}]}, @dstopts={0x88, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x400}]}, @fragment={0xff, 0x0, 0x6, 0x0, 0x0, 0x1, 0x66}, @hopopts={0xff, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @routing={0x2f, 0x2, 0x1, 0xe, 0x0, [@private0]}, @hopopts={0x2f, 0x6, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x29}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x4c, [0x2, 0x8b90, 0x0]}}, @enc_lim={0x4, 0x1, 0x65}]}], @payload_named={{{{{0x2a, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x1ff, 0x0, 0x2, 0x8, 0x2, 0x2, 0x6, 0x2, 0x4, 0x4e20, 0x4e21}, 0x0, 0x3}, 0x1, 0x3}}, [0x0, 0x0]}}}}}}, 0x0) 358.68106ms ago: executing program 5 (id=4473): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0xe0900) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0505405, &(0x7f0000000600)={0x1, 0x0, 0x0, 0x3}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r3, 0x400000}}, 0x20) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000100)={0x7000000, "5b5b0c79f2ca4ec7bb2ec2fe767109d9254d5d1525a1222cbc61cc2310eb8324", 0x3, 0x80, 0xffffffff, 0x2, 0x4, 0x2, 0x5, 0x3}) 245.579502ms ago: executing program 5 (id=4474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x305080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x1b0, 0x43, 0xa0, 0x1b0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x190, 0x1b0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz1\x00'}}, @common=@ttl={{0x28}, {0x0, 0xa}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0xaf76, 0x1, '\x00', 'syz0\x00', {0x80000002}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3700000005200000", @ANYRES32, @ANYRES32, @ANYBLOB="244f591da40bccfd4d8ac662eb2f4c402d8270399efa71713e73432c0fe54bc70d4def19ea927d81b886d42d621b1628f1e3670908ad64e16feeaf4775a93fda8e0425c271362699aa089557f0", @ANYRES64=0x0], 0x20) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@cache_fscache}]}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000640)=r6, 0x4) setsockopt$sock_attach_bpf(r7, 0x1, 0x31, &(0x7f0000000000), 0x4) open(0x0, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) close(r1) 217.424753ms ago: executing program 2 (id=4475): unshare(0x6a040000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="5c0000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000079800200300012800e000100697036677265746170"], 0x5c}}, 0x0) (fail_nth: 8) 0s ago: executing program 0 (id=4476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7b4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x42}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) kernel console output (not intermixed with test programs): 8] kalmia 1-1:1.65: probe with driver kalmia failed with error -22 [ 1009.372735][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1009.375941][ T5918] usb 1-1: USB disconnect, device number 79 [ 1009.388215][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3924'. [ 1009.494980][T15984] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1009.656725][T15984] usb 6-1: Using ep0 maxpacket: 32 [ 1009.668191][T15984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1009.690229][T15984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1009.707223][T15984] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1009.716992][T15984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.726185][T15984] usb 6-1: Product: syz [ 1009.730390][T15984] usb 6-1: Manufacturer: syz [ 1009.735606][T15984] usb 6-1: SerialNumber: syz [ 1009.751813][T15984] usb 6-1: config 0 descriptor?? [ 1009.763060][T15984] usb 6-1: no audio or video endpoints found [ 1009.930982][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 1009.930997][ T30] audit: type=1400 audit(1753504945.725:829): avc: denied { setopt } for pid=20140 comm="syz.0.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1009.957099][ C0] vkms_vblank_simulate: vblank timer overrun [ 1010.036346][ T5918] usb 6-1: USB disconnect, device number 70 [ 1010.252916][ T30] audit: type=1400 audit(1753504946.045:830): avc: denied { read write } for pid=16694 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1010.283249][ T30] audit: type=1400 audit(1753504946.045:831): avc: denied { open } for pid=16694 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1010.312277][T20154] FAULT_INJECTION: forcing a failure. [ 1010.312277][T20154] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.332951][T20154] CPU: 1 UID: 0 PID: 20154 Comm: syz.4.3935 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1010.332973][T20154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.332983][T20154] Call Trace: [ 1010.332989][T20154] [ 1010.332995][T20154] dump_stack_lvl+0x16c/0x1f0 [ 1010.333025][T20154] should_fail_ex+0x512/0x640 [ 1010.333055][T20154] should_failslab+0xc2/0x120 [ 1010.333071][T20154] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1010.333097][T20154] ? skb_clone+0x190/0x3f0 [ 1010.333117][T20154] skb_clone+0x190/0x3f0 [ 1010.333134][T20154] netlink_deliver_tap+0xabd/0xd30 [ 1010.333157][T20154] netlink_unicast+0x62f/0x850 [ 1010.333178][T20154] ? __pfx_netlink_unicast+0x10/0x10 [ 1010.333204][T20154] netlink_sendmsg+0x8d1/0xdd0 [ 1010.333225][T20154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.333252][T20154] ____sys_sendmsg+0xa98/0xc70 [ 1010.333273][T20154] ? copy_msghdr_from_user+0x10a/0x160 [ 1010.333289][T20154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1010.333321][T20154] ___sys_sendmsg+0x134/0x1d0 [ 1010.333337][T20154] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.333350][T20154] ? __lock_acquire+0x622/0x1c90 [ 1010.333397][T20154] __sys_sendmsg+0x16d/0x220 [ 1010.333413][T20154] ? __pfx___sys_sendmsg+0x10/0x10 [ 1010.333444][T20154] do_syscall_64+0xcd/0x4c0 [ 1010.333462][T20154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.333477][T20154] RIP: 0033:0x7f2830f8e9a9 [ 1010.333490][T20154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.333509][T20154] RSP: 002b:00007f282edf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.333525][T20154] RAX: ffffffffffffffda RBX: 00007f28311b5fa0 RCX: 00007f2830f8e9a9 [ 1010.333536][T20154] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1010.333546][T20154] RBP: 00007f282edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.333555][T20154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.333564][T20154] R13: 0000000000000000 R14: 00007f28311b5fa0 R15: 00007ffcc3d3abf8 [ 1010.333586][T20154] [ 1010.541524][ T30] audit: type=1400 audit(1753504946.045:832): avc: denied { ioctl } for pid=16694 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1010.592096][T20158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.601794][T20158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.615175][T20160] FAULT_INJECTION: forcing a failure. [ 1010.615175][T20160] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.630398][T20160] CPU: 1 UID: 0 PID: 20160 Comm: syz.4.3937 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1010.630421][T20160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.630431][T20160] Call Trace: [ 1010.630438][T20160] [ 1010.630444][T20160] dump_stack_lvl+0x16c/0x1f0 [ 1010.630476][T20160] should_fail_ex+0x512/0x640 [ 1010.630508][T20160] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1010.630536][T20160] should_failslab+0xc2/0x120 [ 1010.630554][T20160] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1010.630580][T20160] ? __pmd_alloc+0xbf/0x930 [ 1010.630604][T20160] __pmd_alloc+0xbf/0x930 [ 1010.630620][T20160] ? __pud_alloc+0x526/0x750 [ 1010.630642][T20160] __handle_mm_fault+0xaac/0x5490 [ 1010.630672][T20160] ? __pfx___handle_mm_fault+0x10/0x10 [ 1010.630690][T20160] ? __pfx_mt_find+0x10/0x10 [ 1010.630716][T20160] ? find_vma+0xbf/0x140 [ 1010.630728][T20160] ? __pfx_find_vma+0x10/0x10 [ 1010.630744][T20160] handle_mm_fault+0x589/0xd10 [ 1010.630763][T20160] ? __pkru_allows_pkey+0x51/0xb0 [ 1010.630784][T20160] do_user_addr_fault+0x7a6/0x1370 [ 1010.630805][T20160] ? rcu_is_watching+0x12/0xc0 [ 1010.630825][T20160] exc_page_fault+0x5c/0xb0 [ 1010.630845][T20160] asm_exc_page_fault+0x26/0x30 [ 1010.630858][T20160] RIP: 0010:__put_user_4+0xd/0x20 [ 1010.630871][T20160] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1010.630884][T20160] RSP: 0018:ffffc9000bbc7a10 EFLAGS: 00050202 [ 1010.630896][T20160] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000004b80 [ 1010.630904][T20160] RDX: ffff88805d4aa440 RSI: ffffffff8a751ca4 RDI: ffffffff8c1574e0 [ 1010.630913][T20160] RBP: 0000200000004b80 R08: 3b8f596bbd88045d R09: 0000000000000000 [ 1010.630921][T20160] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92001778f43 [ 1010.630929][T20160] R13: ffff88804862a000 R14: ffff88804862a0e8 R15: ffff88804862a100 [ 1010.630944][T20160] ? rose_ioctl+0x174/0x7d0 [ 1010.630960][T20160] rose_ioctl+0x17e/0x7d0 [ 1010.630974][T20160] ? __pfx_rose_ioctl+0x10/0x10 [ 1010.630994][T20160] sock_do_ioctl+0x118/0x280 [ 1010.631012][T20160] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1010.631036][T20160] ? kasan_quarantine_put+0x10a/0x240 [ 1010.631057][T20160] sock_ioctl+0x227/0x6b0 [ 1010.631074][T20160] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.631090][T20160] ? find_held_lock+0x2b/0x80 [ 1010.631107][T20160] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1010.631127][T20160] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1010.631143][T20160] ? __pfx_sock_ioctl+0x10/0x10 [ 1010.631160][T20160] do_vfs_ioctl+0x153f/0x1a60 [ 1010.631178][T20160] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1010.631202][T20160] ? inode_has_perm+0x16f/0x1d0 [ 1010.631219][T20160] ? file_has_perm+0x27d/0x350 [ 1010.631237][T20160] ? __pfx_file_has_perm+0x10/0x10 [ 1010.631253][T20160] ? find_held_lock+0x2b/0x80 [ 1010.631276][T20160] ? selinux_file_ioctl+0xb4/0x270 [ 1010.631293][T20160] __x64_sys_ioctl+0x114/0x210 [ 1010.631311][T20160] do_syscall_64+0xcd/0x4c0 [ 1010.631325][T20160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.631338][T20160] RIP: 0033:0x7f2830f8e9a9 [ 1010.631349][T20160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.631361][T20160] RSP: 002b:00007f282edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.631373][T20160] RAX: ffffffffffffffda RBX: 00007f28311b5fa0 RCX: 00007f2830f8e9a9 [ 1010.631382][T20160] RDX: 0000200000004b80 RSI: 000000000000541b RDI: 0000000000000004 [ 1010.631393][T20160] RBP: 00007f282edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.631401][T20160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.631409][T20160] R13: 0000000000000000 R14: 00007f28311b5fa0 R15: 00007ffcc3d3abf8 [ 1010.631428][T20160] [ 1011.504123][T15984] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1012.028794][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3943'. [ 1012.069581][T20184] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1012.146477][ T30] audit: type=1400 audit(1753504947.945:833): avc: denied { create } for pid=20186 comm="syz.2.3946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1012.687282][T15984] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1012.696255][T15984] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.708968][T15984] usb 6-1: config 0 has no interface number 0 [ 1012.717348][T15984] usb 6-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.735886][T15984] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1012.744804][T15984] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.755773][T15984] usb 6-1: config 0 has no interface number 0 [ 1012.766237][T15984] usb 6-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.227253][T15984] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 1013.237091][T15984] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.249181][T15984] usb 6-1: config 0 has no interface number 0 [ 1013.256084][T15984] usb 6-1: config 0 interface 219 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.271901][T15984] usb 6-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 1013.281713][T15984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.296688][T20198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.326272][T15984] usb 6-1: config 0 descriptor?? [ 1013.345590][T20198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.356481][T15984] usb 6-1: bad CDC descriptors [ 1013.361473][T15984] cdc_acm 6-1:0.219: Zero length descriptor references [ 1013.371170][T15984] cdc_acm 6-1:0.219: probe with driver cdc_acm failed with error -22 [ 1013.450743][T20207] FAULT_INJECTION: forcing a failure. [ 1013.450743][T20207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.479674][T20207] CPU: 1 UID: 0 PID: 20207 Comm: syz.0.3951 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1013.479699][T20207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1013.479709][T20207] Call Trace: [ 1013.479715][T20207] [ 1013.479722][T20207] dump_stack_lvl+0x16c/0x1f0 [ 1013.479754][T20207] should_fail_ex+0x512/0x640 [ 1013.479784][T20207] _copy_to_user+0x32/0xd0 [ 1013.479803][T20207] video_usercopy+0xf3e/0x1720 [ 1013.479822][T20207] ? __pfx___video_do_ioctl+0x10/0x10 [ 1013.479846][T20207] ? selinux_kernel_read_file+0xd0/0x130 [ 1013.479863][T20207] ? __pfx_video_usercopy+0x10/0x10 [ 1013.479894][T20207] v4l2_ioctl+0x1ba/0x250 [ 1013.479918][T20207] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1013.479944][T20207] __x64_sys_ioctl+0x18e/0x210 [ 1013.479970][T20207] do_syscall_64+0xcd/0x4c0 [ 1013.479988][T20207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.480006][T20207] RIP: 0033:0x7f84ad98e9a9 [ 1013.480021][T20207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.480038][T20207] RSP: 002b:00007f84ae80a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.480055][T20207] RAX: ffffffffffffffda RBX: 00007f84adbb5fa0 RCX: 00007f84ad98e9a9 [ 1013.480066][T20207] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1013.480077][T20207] RBP: 00007f84ae80a090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.480087][T20207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.480096][T20207] R13: 0000000000000000 R14: 00007f84adbb5fa0 R15: 00007fff64a8f9c8 [ 1013.480119][T20207] [ 1013.568061][T15984] usb 6-1: USB disconnect, device number 71 [ 1013.873845][ T5919] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1014.043835][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1014.051518][ T5919] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1014.062772][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.070951][ T5919] usb 1-1: Product: syz [ 1014.075478][ T5919] usb 1-1: Manufacturer: syz [ 1014.080078][ T5919] usb 1-1: SerialNumber: syz [ 1014.088731][ T5919] usb 1-1: config 0 descriptor?? [ 1014.099983][ T5919] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1014.463781][ T5918] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1014.504242][T15984] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1014.603309][ T30] audit: type=1400 audit(1753504950.395:834): avc: denied { allowed } for pid=20223 comm="syz.1.3959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1014.655866][ T5918] usb 3-1: config 1 has an invalid interface number: 58 but max is 0 [ 1014.656725][T15984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.673768][ T5918] usb 3-1: config 1 has no interface number 0 [ 1014.678117][T15984] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1014.691280][T15984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.691965][ T5918] usb 3-1: config 1 interface 58 has no altsetting 0 [ 1014.707295][T15984] usb 6-1: config 0 descriptor?? [ 1014.726105][ T5918] usb 3-1: New USB device found, idVendor=0b48, idProduct=3006, bcdDevice=fc.3c [ 1014.745414][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.753451][ T5918] usb 3-1: Product: syz [ 1014.773731][ T5918] usb 3-1: Manufacturer: syz [ 1014.778376][ T5918] usb 3-1: SerialNumber: syz [ 1015.005070][ T5918] dvb-usb: found a 'Technotrend TT-connect S-2400' in warm state. [ 1015.012967][ T5918] dvb-usb: bulk message failed: -22 (4/0) [ 1015.018765][ T5918] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1015.028987][ T5918] dvb-usb: bulk message failed: -22 (5/0) [ 1015.035386][ T5918] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1015.047965][ T5918] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1015.060672][ T5918] dvb-usb: Technotrend TT-connect S-2400 error while loading driver (-19) [ 1015.074110][ T5918] usb 3-1: USB disconnect, device number 84 [ 1015.118161][T15984] keytouch 0003:0926:3333.0039: fixing up Keytouch IEC report descriptor [ 1015.129973][T15984] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0039/input/input66 [ 1015.230615][T15984] keytouch 0003:0926:3333.0039: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1015.850208][T20221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.875520][T20221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.902404][T15984] usb 6-1: USB disconnect, device number 72 [ 1016.023311][ T5919] gspca_stk1135: reg_w 0x2ff err -71 [ 1016.030929][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.038700][ T5919] gspca_stk1135: Sensor write failed [ 1016.044181][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.050513][ T5919] gspca_stk1135: Sensor write failed [ 1016.056202][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.062525][ T5919] gspca_stk1135: Sensor read failed [ 1016.068003][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.074517][ T5919] gspca_stk1135: Sensor read failed [ 1016.079721][ T5919] gspca_stk1135: Detected sensor type unknown (0x0) [ 1016.091546][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.146099][ T5919] gspca_stk1135: Sensor read failed [ 1016.151350][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.158114][ T5919] gspca_stk1135: Sensor read failed [ 1016.163414][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.173657][ T5919] gspca_stk1135: Sensor write failed [ 1016.179192][ T5919] gspca_stk1135: serial bus timeout: status=0x00 [ 1016.188670][ T5919] gspca_stk1135: Sensor write failed [ 1016.194769][ T5919] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1016.214057][ T5919] usb 1-1: USB disconnect, device number 80 [ 1016.224137][ T5890] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1016.284266][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 1017.047260][ T30] audit: type=1400 audit(1753504952.845:835): avc: denied { create } for pid=20241 comm="syz.0.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1017.169823][T20248] vivid-000: ================= START STATUS ================= [ 1017.178100][T20248] vivid-000: Radio HW Seek Mode: Bounded [ 1017.185855][T20248] vivid-000: Radio Programmable HW Seek: false [ 1017.192244][T20248] vivid-000: RDS Rx I/O Mode: Block I/O [ 1017.198407][T20248] vivid-000: Generate RBDS Instead of RDS: false [ 1017.205476][T20248] vivid-000: RDS Reception: true [ 1017.210801][T20248] vivid-000: RDS Program Type: 0 inactive [ 1017.220655][T20248] vivid-000: RDS PS Name: inactive [ 1017.227113][T20248] vivid-000: RDS Radio Text: inactive [ 1017.233359][T20248] vivid-000: RDS Traffic Announcement: false inactive [ 1017.395848][T20248] vivid-000: RDS Traffic Program: false inactive [ 1017.658461][T20248] vivid-000: RDS Music: false inactive [ 1017.698453][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 1017.705511][ T5890] usb 3-1: config 5 has an invalid interface number: 97 but max is 1 [ 1017.713597][ T5890] usb 3-1: config 5 has an invalid descriptor of length 36, skipping remainder of the config [ 1017.728689][ T5890] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 1017.742236][T20248] vivid-000: ================== END STATUS ================== [ 1017.750812][ T5890] usb 3-1: config 5 has no interface number 0 [ 1017.778419][ T5890] usb 3-1: config 5 interface 97 has no altsetting 0 [ 1017.787773][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=55.c7 [ 1017.805259][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.819438][ T5890] usb 3-1: Product: syz [ 1017.830160][ T5890] usb 3-1: Manufacturer: syz [ 1017.894892][ T5890] usb 3-1: SerialNumber: syz [ 1018.017702][T20000] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 1018.026090][T20000] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1018.192828][T20262] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.3969'. [ 1018.213889][T20262] netlink: zone id is out of range [ 1018.231570][T20262] netlink: zone id is out of range [ 1018.290876][T20262] netlink: zone id is out of range [ 1018.290887][T20262] netlink: zone id is out of range [ 1018.290895][T20262] netlink: zone id is out of range [ 1018.290903][T20262] netlink: zone id is out of range [ 1018.290911][T20262] netlink: zone id is out of range [ 1018.290919][T20262] netlink: zone id is out of range [ 1018.290926][T20262] netlink: zone id is out of range [ 1018.290933][T20262] netlink: zone id is out of range [ 1018.599966][T20272] syz.1.3970: attempt to access beyond end of device [ 1018.599966][T20272] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1018.613178][T20272] EXT4-fs (nbd1): unable to read superblock [ 1018.986018][ T5890] usb 3-1: USB disconnect, device number 85 [ 1021.445408][T20311] vivid-002: ================= START STATUS ================= [ 1021.483735][T20311] vivid-002: Radio HW Seek Mode: Bounded [ 1021.491201][T20311] vivid-002: Radio Programmable HW Seek: false [ 1021.533188][T20315] misc userio: Invalid payload size [ 1021.574601][T20311] vivid-002: RDS Rx I/O Mode: Block I/O [ 1021.671276][T20311] vivid-002: Generate RBDS Instead of RDS: false [ 1021.680473][T20311] vivid-002: RDS Reception: true [ 1022.128274][T20319] Unknown options in mask 5 [ 1022.132969][T20000] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1022.142352][T20000] Bluetooth: hci0: Injecting HCI hardware error event [ 1022.150913][ T5832] Bluetooth: hci0: hardware error 0x00 [ 1022.210545][T20311] vivid-002: RDS Program Type: 0 inactive [ 1022.218148][T20311] vivid-002: RDS PS Name: inactive [ 1022.238452][T20311] vivid-002: RDS Radio Text: inactive [ 1022.364353][T20311] vivid-002: RDS Traffic Announcement: false inactive [ 1022.378460][T20311] vivid-002: RDS Traffic Program: false inactive [ 1022.514570][T20311] vivid-002: RDS Music: false inactive [ 1022.523245][T20311] vivid-002: ================== END STATUS ================== [ 1023.252404][T20339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.261478][T20339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.362669][ T30] audit: type=1400 audit(1753504959.105:836): avc: denied { map } for pid=20338 comm="syz.1.3989" path="pipe:[85515]" dev="pipefs" ino=85515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1023.456359][ T30] audit: type=1400 audit(1753504959.105:837): avc: denied { execute } for pid=20338 comm="syz.1.3989" path="pipe:[85515]" dev="pipefs" ino=85515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1024.296253][ T5832] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1024.440606][ T5830] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1024.648504][T20360] vivid-004: ================= START STATUS ================= [ 1024.657963][T20360] vivid-004: Radio HW Seek Mode: Bounded [ 1024.664082][T20360] vivid-004: Radio Programmable HW Seek: false [ 1024.670437][T20360] vivid-004: RDS Rx I/O Mode: Block I/O [ 1024.698117][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 1024.707178][T20360] vivid-004: Generate RBDS Instead of RDS: false [ 1024.709639][T20364] netlink: 'syz.5.3997': attribute type 1 has an invalid length. [ 1024.718659][T20360] vivid-004: RDS Reception: true [ 1024.731054][T20360] vivid-004: RDS Program Type: 0 inactive [ 1024.971161][ T5830] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1024.980300][ T5830] usb 1-1: config 0 has no interface number 0 [ 1024.986777][T20360] vivid-004: RDS PS Name: inactive [ 1024.992504][T20360] vivid-004: RDS Radio Text: inactive [ 1024.999819][ T5830] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1025.012303][T20360] vivid-004: RDS Traffic Announcement: false inactive [ 1025.020969][T20360] vivid-004: RDS Traffic Program: false inactive [ 1025.027835][ T5830] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1025.035395][T20360] vivid-004: RDS Music: false inactive [ 1025.037179][ T5830] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1025.050566][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.059207][T20360] vivid-004: ================== END STATUS ================== [ 1025.070221][ T5830] usb 1-1: Product: syz [ 1025.078181][ T5830] usb 1-1: Manufacturer: syz [ 1025.087128][ T5830] usb 1-1: SerialNumber: syz [ 1025.097356][ T5830] usb 1-1: config 0 descriptor?? [ 1025.476397][T20373] vivid-002: ================= START STATUS ================= [ 1025.484510][T20373] vivid-002: Radio HW Seek Mode: Bounded [ 1025.490194][T20373] vivid-002: Radio Programmable HW Seek: false [ 1025.513793][T20373] vivid-002: RDS Rx I/O Mode: Block I/O [ 1025.537276][T20373] vivid-002: Generate RBDS Instead of RDS: false [ 1025.543626][T20373] vivid-002: RDS Reception: true [ 1025.590547][T20376] vivid-003: ================= START STATUS ================= [ 1025.610338][T20376] vivid-003: Radio HW Seek Mode: Bounded [ 1025.617065][T20376] vivid-003: Radio Programmable HW Seek: false [ 1025.623334][T20376] vivid-003: RDS Rx I/O Mode: Block I/O [ 1025.628894][T20373] vivid-002: RDS Program Type: 0 inactive [ 1025.628924][T20373] vivid-002: RDS PS Name: inactive [ 1025.628947][T20373] vivid-002: RDS Radio Text: inactive [ 1025.628971][T20373] vivid-002: RDS Traffic Announcement: false inactive [ 1025.628996][T20373] vivid-002: RDS Traffic Program: false inactive [ 1025.629019][T20373] vivid-002: RDS Music: false inactive [ 1025.629043][T20373] vivid-002: ================== END STATUS ================== [ 1025.679828][T20376] vivid-003: Generate RBDS Instead of RDS: false [ 1025.687065][T20376] vivid-003: RDS Reception: true [ 1025.698428][T20376] vivid-003: RDS Program Type: 0 inactive [ 1025.726621][T20376] vivid-003: RDS PS Name: inactive [ 1025.732827][T20376] vivid-003: RDS Radio Text: inactive [ 1025.739354][T20376] vivid-003: RDS Traffic Announcement: false inactive [ 1025.746970][T20376] vivid-003: RDS Traffic Program: false inactive [ 1025.754606][T20382] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1025.755279][T20376] vivid-003: RDS Music: false inactive [ 1025.772126][T20376] vivid-003: ================== END STATUS ================== [ 1025.941115][ T5830] appletouch 1-1:0.85: Geyser mode initialized. [ 1025.949841][ T5830] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input67 [ 1026.094509][ T5832] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 1026.103378][ T5832] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 1026.632939][ T5898] usb 1-1: USB disconnect, device number 81 [ 1026.699418][ T5898] appletouch 1-1:0.85: input: appletouch disconnected [ 1026.976629][ T5832] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1027.073298][ T5832] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1027.748654][ T30] audit: type=1326 audit(1753504963.545:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1027.772055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.790882][T20415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1027.806472][T20415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.816576][T20415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.830217][T20415] 9pnet_fd: Insufficient options for proto=fd [ 1027.837078][ T30] audit: type=1326 audit(1753504963.545:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1027.859351][T20421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1027.860418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.861970][ T30] audit: type=1326 audit(1753504963.585:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1027.901545][ T30] audit: type=1326 audit(1753504963.585:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1027.924904][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.953886][ T5890] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1027.968893][ T30] audit: type=1326 audit(1753504963.585:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1027.992245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.000757][ T30] audit: type=1326 audit(1753504963.585:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1028.024023][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.034804][ T30] audit: type=1326 audit(1753504963.585:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1028.058148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.068375][ T30] audit: type=1326 audit(1753504963.585:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20412 comm="syz.1.4011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d92d8e9a9 code=0x7ffc0000 [ 1028.091719][ C0] vkms_vblank_simulate: vblank timer overrun [ 1028.117015][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.128325][ T5890] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1028.137846][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.148616][ T5890] usb 6-1: config 0 descriptor?? [ 1028.798127][ T5890] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 1028.856047][ T5890] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.003A/input/input68 [ 1028.956498][ T5890] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1029.115765][T20441] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1029.344278][T20408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.382469][T20408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.395931][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1029.395944][ T30] audit: type=1400 audit(1753504965.185:898): avc: denied { accept } for pid=20442 comm="syz.4.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1029.421665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1029.510789][T20451] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1029.602733][ T5898] usb 6-1: USB disconnect, device number 73 [ 1029.958579][ T30] audit: type=1400 audit(1753504965.755:899): avc: denied { setopt } for pid=20473 comm="syz.0.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1029.983414][ T5890] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1030.290845][ T5832] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1030.301030][ T5832] Bluetooth: hci3: Injecting HCI hardware error event [ 1030.309633][ T5832] Bluetooth: hci3: hardware error 0x00 [ 1030.521061][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.629398][ T30] audit: type=1400 audit(1753504965.795:900): avc: denied { call } for pid=20473 comm="syz.0.4031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1030.631452][ T5890] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1030.673613][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.808916][ T5890] usb 3-1: config 0 descriptor?? [ 1030.911599][T20480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1031.135062][T20000] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1031.146147][T20000] Bluetooth: hci2: Injecting HCI hardware error event [ 1031.177998][T20000] Bluetooth: hci2: hardware error 0x00 [ 1031.355295][ T5890] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor [ 1031.376605][ T5890] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.003B/input/input69 [ 1031.503990][T15984] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1031.513503][ T5890] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1031.634415][T15984] usb 6-1: device descriptor read/64, error -71 [ 1032.024361][T15984] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1032.034540][T20461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.048195][T20461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.060338][ T5898] usb 3-1: USB disconnect, device number 86 [ 1032.184460][T15984] usb 6-1: device descriptor read/64, error -71 [ 1032.223469][T20502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.236625][T20502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.252161][T20502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.265720][T20502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.294706][T15984] usb usb6-port1: attempt power cycle [ 1032.305508][T20504] bridge_slave_0: left allmulticast mode [ 1032.315396][T20504] bridge_slave_0: left promiscuous mode [ 1032.321116][T20504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.331416][T20504] bridge_slave_1: left allmulticast mode [ 1032.337357][T20504] bridge_slave_1: left promiscuous mode [ 1032.343107][T20504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.354159][T20504] bond0: (slave bond_slave_0): Releasing backup interface [ 1032.366747][T20504] bond0: (slave bond_slave_1): Releasing backup interface [ 1032.389680][T20504] team0: Port device team_slave_0 removed [ 1032.399525][T20504] team0: Port device team_slave_1 removed [ 1032.406742][T20506] netlink: 1440 bytes leftover after parsing attributes in process `syz.0.4041'. [ 1032.419030][T20504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.426659][T20504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.436242][T20504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1032.443618][T20504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.455576][T20504] batman_adv: batadv0: Removing interface: gretap1 [ 1032.462571][T20504] batman_adv: batadv0: Removing interface: vxlan0 [ 1032.472503][ T5918] dummy0 speed is unknown, defaulting to 1000 [ 1032.491628][T20505] team0: Mode changed to "loadbalance" [ 1032.645442][ T5832] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1032.651850][T15984] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 1032.777756][T15984] usb 6-1: device descriptor read/8, error -71 [ 1033.363884][T20000] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1033.446247][T15984] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1033.476613][T15984] usb 6-1: device descriptor read/8, error -71 [ 1034.194644][T15984] usb usb6-port1: unable to enumerate USB device [ 1034.271665][T20524] netlink: 'syz.5.4047': attribute type 1 has an invalid length. [ 1034.651325][T20537] binder: 20535:20537 ioctl c0306201 0 returned -14 [ 1035.016775][T15984] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1035.179048][T15984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.651759][T15984] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1035.682722][T15984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.702364][T15984] usb 1-1: config 0 descriptor?? [ 1035.754947][T20561] netlink: 'syz.2.4058': attribute type 21 has an invalid length. [ 1035.763026][T20561] netlink: 'syz.2.4058': attribute type 2 has an invalid length. [ 1035.857054][T20561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1036.129713][T15984] keytouch 0003:0926:3333.003C: fixing up Keytouch IEC report descriptor [ 1036.171091][T15984] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003C/input/input70 [ 1036.337799][T15984] keytouch 0003:0926:3333.003C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1036.442247][T20569] netlink: 'syz.4.4060': attribute type 10 has an invalid length. [ 1036.565870][T20543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.584503][T20543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.705921][T15984] usb 1-1: USB disconnect, device number 82 [ 1036.997545][T20580] netlink: 'syz.2.4061': attribute type 1 has an invalid length. [ 1037.465792][T20592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4066'. [ 1037.525418][T20594] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1038.226887][T20598] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.247486][T20598] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4065'. [ 1038.270035][T20598] batadv1: entered promiscuous mode [ 1038.887994][T20608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1039.239343][T20612] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 1039.395289][ T5919] IPVS: starting estimator thread 0... [ 1039.451869][T20621] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1039.458414][T20621] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1039.494107][T20621] vhci_hcd vhci_hcd.0: Device attached [ 1039.494607][T20616] IPVS: using max 74 ests per chain, 177600 per kthread [ 1039.526564][T20624] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 1039.533170][T20624] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1039.544883][T20624] vhci_hcd vhci_hcd.0: Device attached [ 1039.595457][T20621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1039.623039][T20628] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1039.629577][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1039.638649][T20621] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 1039.645258][T20621] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1039.655338][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1039.667561][T20628] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 1039.669548][T20621] vhci_hcd vhci_hcd.0: Device attached [ 1039.674158][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1039.697397][ T5919] vhci_hcd: vhci_device speed not set [ 1039.953836][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1039.954336][ T1203] vhci_hcd: vhci_device speed not set [ 1039.974133][T20637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1039.998607][ T5919] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1040.009382][T20624] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 1040.015995][T20624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1040.025416][T20624] vhci_hcd vhci_hcd.0: Device attached [ 1040.046670][ T1203] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1040.747505][T20621] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 1040.754148][T20621] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1040.772958][T20621] vhci_hcd vhci_hcd.0: Device attached [ 1040.788918][T20628] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 1040.795523][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1040.804729][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1040.858735][T20624] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1040.870007][T20628] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 1040.876628][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1040.893592][T20621] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1040.927827][T20621] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(27) [ 1040.934161][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1040.934448][T20621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1041.045632][T20628] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 1041.052278][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1041.070441][T20621] vhci_hcd vhci_hcd.0: Device attached [ 1041.094454][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1041.112401][T20662] team_slave_0: entered promiscuous mode [ 1041.118414][T20662] team_slave_1: entered promiscuous mode [ 1041.127521][T20662] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1041.143599][T20628] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1041.203342][T20637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1041.219959][T20637] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(28) [ 1041.226566][T20637] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1041.264622][T20637] vhci_hcd vhci_hcd.0: Device attached [ 1041.311954][T20631] vhci_hcd: connection closed [ 1041.312213][T20651] vhci_hcd: connection closed [ 1041.322139][T20622] vhci_hcd: connection reset by peer [ 1041.384897][T20645] vhci_hcd: connection closed [ 1041.385072][T20643] vhci_hcd: connection closed [ 1041.390083][T20633] vhci_hcd: connection closed [ 1041.394839][T20629] vhci_hcd: connection reset by peer [ 1041.414557][T20625] vhci_hcd: connection closed [ 1041.414705][T20648] vhci_hcd: connection closed [ 1041.419492][T20656] vhci_hcd: connection closed [ 1041.427647][T20641] vhci_hcd: connection closed [ 1041.436728][ T2926] vhci_hcd: stop threads [ 1041.449290][T20665] vhci_hcd: connection closed [ 1041.449464][ T2926] vhci_hcd: release socket [ 1041.458726][ T2926] vhci_hcd: disconnect device [ 1041.473470][ T2926] vhci_hcd: stop threads [ 1041.563704][ T2926] vhci_hcd: release socket [ 1041.588854][ T2926] vhci_hcd: disconnect device [ 1041.603517][ T2926] vhci_hcd: stop threads [ 1041.614816][ T2926] vhci_hcd: release socket [ 1041.628169][ T2926] vhci_hcd: disconnect device [ 1041.645276][ T2926] vhci_hcd: stop threads [ 1041.649686][ T2926] vhci_hcd: release socket [ 1041.655932][ T2926] vhci_hcd: disconnect device [ 1041.660713][ T2926] vhci_hcd: stop threads [ 1041.665940][ T2926] vhci_hcd: release socket [ 1041.673701][ T2926] vhci_hcd: disconnect device [ 1041.684149][ T2926] vhci_hcd: stop threads [ 1041.688623][ T2926] vhci_hcd: release socket [ 1041.698758][ T2926] vhci_hcd: disconnect device [ 1041.703708][ T2926] vhci_hcd: stop threads [ 1041.707947][ T2926] vhci_hcd: release socket [ 1041.722639][ T2926] vhci_hcd: disconnect device [ 1041.727549][ T2926] vhci_hcd: stop threads [ 1041.732669][ T2926] vhci_hcd: release socket [ 1041.744058][ T2926] vhci_hcd: disconnect device [ 1041.753082][ T2926] vhci_hcd: stop threads [ 1041.765455][ T2926] vhci_hcd: release socket [ 1041.776403][ T2926] vhci_hcd: disconnect device [ 1041.789528][ T2926] vhci_hcd: stop threads [ 1041.795880][ T2926] vhci_hcd: release socket [ 1041.813922][ T2926] vhci_hcd: disconnect device [ 1041.820678][ T2926] vhci_hcd: stop threads [ 1041.826966][ T2926] vhci_hcd: release socket [ 1041.843963][ T2926] vhci_hcd: disconnect device [ 1041.851633][ T2926] vhci_hcd: stop threads [ 1041.857929][ T2926] vhci_hcd: release socket [ 1041.872329][ T2926] vhci_hcd: disconnect device [ 1042.147055][T20686] bridge_slave_0: left allmulticast mode [ 1042.162086][T20686] bridge_slave_0: left promiscuous mode [ 1042.178036][T20683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1042.218834][T20686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.934030][T20686] bridge_slave_1: left allmulticast mode [ 1042.939860][T20686] bridge_slave_1: left promiscuous mode [ 1043.012263][T20697] FAULT_INJECTION: forcing a failure. [ 1043.012263][T20697] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.026223][T20697] CPU: 0 UID: 0 PID: 20697 Comm: syz.2.4088 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1043.026246][T20697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1043.026257][T20697] Call Trace: [ 1043.026263][T20697] [ 1043.026271][T20697] dump_stack_lvl+0x16c/0x1f0 [ 1043.026303][T20697] should_fail_ex+0x512/0x640 [ 1043.026330][T20697] ? __kvmalloc_node_noprof+0x124/0x620 [ 1043.026359][T20697] should_failslab+0xc2/0x120 [ 1043.026376][T20697] __kvmalloc_node_noprof+0x137/0x620 [ 1043.026402][T20697] ? nf_hook_entries_grow+0x285/0x860 [ 1043.026441][T20697] ? nf_hook_entries_grow+0x285/0x860 [ 1043.026467][T20697] nf_hook_entries_grow+0x285/0x860 [ 1043.026492][T20697] ? irqentry_exit+0x3b/0x90 [ 1043.026508][T20697] ? lockdep_hardirqs_on+0x7c/0x110 [ 1043.026541][T20697] __nf_register_net_hook+0x1cd/0x730 [ 1043.026558][T20697] ? nf_register_net_hooks+0x48/0xd0 [ 1043.026578][T20697] nf_register_net_hook+0x109/0x160 [ 1043.026597][T20697] nf_register_net_hooks+0x5d/0xd0 [ 1043.026617][T20697] ip_vs_register_hooks+0xe7/0x150 [ 1043.026640][T20697] ip_vs_add_service+0xd58/0x1550 [ 1043.026667][T20697] ? find_held_lock+0x2b/0x80 [ 1043.026690][T20697] ? do_ip_vs_set_ctl+0xbff/0x11d0 [ 1043.026719][T20697] do_ip_vs_set_ctl+0xee3/0x11d0 [ 1043.026748][T20697] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1043.026766][T20697] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 1043.026794][T20697] ? __pfx___schedule+0x10/0x10 [ 1043.026825][T20697] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 1043.026851][T20697] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1043.026881][T20697] ? nf_sockopt_find.constprop.0+0x16f/0x290 [ 1043.026910][T20697] ? nf_setsockopt+0x8a/0xf0 [ 1043.026929][T20697] nf_setsockopt+0x8a/0xf0 [ 1043.026952][T20697] ip_setsockopt+0xcb/0xf0 [ 1043.026980][T20697] ipv6_setsockopt+0x155/0x170 [ 1043.027005][T20697] tcp_setsockopt+0xa7/0x100 [ 1043.027022][T20697] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1043.027045][T20697] do_sock_setsockopt+0xf0/0x1d0 [ 1043.027069][T20697] __sys_setsockopt+0x1a0/0x230 [ 1043.027099][T20697] __x64_sys_setsockopt+0xbd/0x160 [ 1043.027124][T20697] ? do_syscall_64+0x91/0x4c0 [ 1043.027140][T20697] ? lockdep_hardirqs_on+0x7c/0x110 [ 1043.027164][T20697] do_syscall_64+0xcd/0x4c0 [ 1043.027182][T20697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.027201][T20697] RIP: 0033:0x7fdd22b8e9a9 [ 1043.027215][T20697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1043.027232][T20697] RSP: 002b:00007fdd23a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1043.027249][T20697] RAX: ffffffffffffffda RBX: 00007fdd22db6160 RCX: 00007fdd22b8e9a9 [ 1043.027260][T20697] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000006 [ 1043.027270][T20697] RBP: 00007fdd23a97090 R08: 000000000000002c R09: 0000000000000000 [ 1043.027281][T20697] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.027291][T20697] R13: 0000000000000000 R14: 00007fdd22db6160 R15: 00007ffc00eedc28 [ 1043.027316][T20697] [ 1043.346191][T20686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.365366][T20690] netlink: 1440 bytes leftover after parsing attributes in process `syz.1.4086'. [ 1043.399362][T20686] bond0: (slave bond_slave_0): Releasing backup interface [ 1043.408753][T20686] bond_slave_0: left promiscuous mode [ 1043.418737][T20686] bond0: (slave bond_slave_1): Releasing backup interface [ 1043.431408][T20686] bond_slave_1: left promiscuous mode [ 1043.512750][ T30] audit: type=1326 audit(1753504979.305:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20698 comm="syz.4.4089" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2830f8e9a9 code=0x0 [ 1043.541192][T20686] team0: Port device team_slave_0 removed [ 1043.550719][T20686] team0: Port device team_slave_1 removed [ 1043.572431][T20686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.586302][T20686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.639899][T20686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.648392][T20686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.721471][T20686] batman_adv: batadv0: Removing interface: gretap1 [ 1044.207992][T20715] netlink: 'syz.0.4093': attribute type 10 has an invalid length. [ 1044.284509][T20699] dummy0 speed is unknown, defaulting to 1000 [ 1044.993613][T20732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1045.444429][ T5919] vhci_hcd: vhci_device speed not set [ 1045.877084][ T1203] vhci_hcd: vhci_device speed not set [ 1046.184123][T20750] syz.5.4100: attempt to access beyond end of device [ 1046.184123][T20750] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1046.197356][T20750] EXT4-fs (nbd5): unable to read superblock [ 1046.203645][T17059] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1046.363747][T17059] usb 1-1: Using ep0 maxpacket: 8 [ 1046.577860][T17059] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1046.596690][T17059] usb 1-1: config 0 has no interface number 0 [ 1046.712196][T17059] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1046.723712][T17059] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1046.735390][T17059] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1046.747575][T17059] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1046.829548][T20754] FAULT_INJECTION: forcing a failure. [ 1046.829548][T20754] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.842218][T20754] CPU: 1 UID: 0 PID: 20754 Comm: syz.4.4102 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1046.842242][T20754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1046.842253][T20754] Call Trace: [ 1046.842259][T20754] [ 1046.842266][T20754] dump_stack_lvl+0x16c/0x1f0 [ 1046.842298][T20754] should_fail_ex+0x512/0x640 [ 1046.842324][T20754] ? __kmalloc_noprof+0xbf/0x510 [ 1046.842353][T20754] ? _ib_alloc_device+0x3a/0x800 [ 1046.842373][T20754] should_failslab+0xc2/0x120 [ 1046.842390][T20754] __kmalloc_noprof+0xd2/0x510 [ 1046.842419][T20754] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 1046.842448][T20754] _ib_alloc_device+0x3a/0x800 [ 1046.842470][T20754] siw_newlink+0xeb/0xd70 [ 1046.842490][T20754] ? __pfx_siw_newlink+0x10/0x10 [ 1046.842514][T20754] nldev_newlink+0x3a6/0x680 [ 1046.842533][T20754] ? __pfx_nldev_newlink+0x10/0x10 [ 1046.842619][T20754] ? cred_has_capability.isra.0+0x193/0x2f0 [ 1046.842647][T20754] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 1046.842691][T20754] ? security_capable+0x7e/0x260 [ 1046.842716][T20754] ? ns_capable+0xd7/0x110 [ 1046.842735][T20754] ? __pfx_nldev_newlink+0x10/0x10 [ 1046.842754][T20754] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1046.842773][T20754] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1046.842789][T20754] ? __lock_acquire+0xb8a/0x1c90 [ 1046.842811][T20754] ? __lock_acquire+0x622/0x1c90 [ 1046.842832][T20754] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1046.842855][T20754] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1046.842872][T20754] ? rcu_is_watching+0x12/0xc0 [ 1046.842912][T20754] netlink_unicast+0x58a/0x850 [ 1046.842939][T20754] ? __pfx_netlink_unicast+0x10/0x10 [ 1046.842960][T20754] ? security_netlink_send+0x13/0x210 [ 1046.842989][T20754] netlink_sendmsg+0x8d1/0xdd0 [ 1046.843015][T20754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.843045][T20754] ____sys_sendmsg+0xa98/0xc70 [ 1046.843069][T20754] ? copy_msghdr_from_user+0x10a/0x160 [ 1046.843085][T20754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.843111][T20754] ? __lock_acquire+0xb8a/0x1c90 [ 1046.843134][T20754] ___sys_sendmsg+0x134/0x1d0 [ 1046.843152][T20754] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.843166][T20754] ? __lock_acquire+0x622/0x1c90 [ 1046.843216][T20754] __sys_sendmsg+0x16d/0x220 [ 1046.843233][T20754] ? __pfx___sys_sendmsg+0x10/0x10 [ 1046.843268][T20754] do_syscall_64+0xcd/0x4c0 [ 1046.843287][T20754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.843305][T20754] RIP: 0033:0x7f2830f8e9a9 [ 1046.843320][T20754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.843336][T20754] RSP: 002b:00007f282edb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.843353][T20754] RAX: ffffffffffffffda RBX: 00007f28311b6160 RCX: 00007f2830f8e9a9 [ 1046.843363][T20754] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000c [ 1046.843374][T20754] RBP: 00007f282edb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.843384][T20754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.843393][T20754] R13: 0000000000000000 R14: 00007f28311b6160 R15: 00007ffcc3d3abf8 [ 1046.843422][T20754] [ 1047.155885][T17059] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1047.165243][T17059] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.261972][T17059] usb 1-1: config 0 descriptor?? [ 1047.271852][T17059] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1047.354854][T20756] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1047.732036][ T30] audit: type=1400 audit(1753504983.515:902): avc: denied { unmount } for pid=19502 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1047.748293][T15984] usb usb34-port1: attempt power cycle [ 1047.786559][ T5830] usb 1-1: USB disconnect, device number 83 [ 1047.798009][ T5830] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1047.892042][T20761] vivid-000: ================= START STATUS ================= [ 1047.911697][T20761] vivid-000: Radio HW Seek Mode: Bounded [ 1047.919256][T20761] vivid-000: Radio Programmable HW Seek: false [ 1047.963886][T20763] tipc: Started in network mode [ 1047.968858][T20763] tipc: Node identity 82f4c5f16ccc, cluster identity 4711 [ 1047.976558][T20763] tipc: Enabled bearer , priority 0 [ 1047.996299][T20763] syzkaller0: entered promiscuous mode [ 1048.001826][T20763] syzkaller0: entered allmulticast mode [ 1048.008409][ T5898] usb usb42-port1: attempt power cycle [ 1048.026486][T20761] vivid-000: RDS Rx I/O Mode: Block I/O [ 1048.032084][T20761] vivid-000: Generate RBDS Instead of RDS: false [ 1048.040374][T20761] vivid-000: RDS Reception: true [ 1048.049946][T20761] vivid-000: RDS Program Type: 0 inactive [ 1048.057520][T20761] vivid-000: RDS PS Name: inactive [ 1048.062754][T20761] vivid-000: RDS Radio Text: inactive [ 1048.093194][T20761] vivid-000: RDS Traffic Announcement: false inactive [ 1048.642349][T15984] usb usb34-port1: unable to enumerate USB device [ 1048.658542][T20761] vivid-000: RDS Traffic Program: false inactive [ 1048.738014][ T5898] usb usb42-port1: unable to enumerate USB device [ 1048.900379][T20761] vivid-000: RDS Music: false inactive [ 1048.953831][T20761] vivid-000: ================== END STATUS ================== [ 1048.973792][ T5898] tipc: Node number set to 3996698097 [ 1049.452692][T20777] FAULT_INJECTION: forcing a failure. [ 1049.452692][T20777] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.465412][T20777] CPU: 1 UID: 0 PID: 20777 Comm: syz.2.4109 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1049.465436][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1049.465447][T20777] Call Trace: [ 1049.465453][T20777] [ 1049.465460][T20777] dump_stack_lvl+0x16c/0x1f0 [ 1049.465492][T20777] should_fail_ex+0x512/0x640 [ 1049.465519][T20777] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1049.465548][T20777] should_failslab+0xc2/0x120 [ 1049.465567][T20777] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1049.465593][T20777] ? __alloc_skb+0x2b2/0x380 [ 1049.465624][T20777] __alloc_skb+0x2b2/0x380 [ 1049.465650][T20777] ? __pfx___alloc_skb+0x10/0x10 [ 1049.465679][T20777] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1049.465704][T20777] netlink_alloc_large_skb+0x69/0x130 [ 1049.465726][T20777] netlink_sendmsg+0x6a1/0xdd0 [ 1049.465751][T20777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1049.465781][T20777] sock_write_iter+0x4fc/0x5b0 [ 1049.465803][T20777] ? __pfx_sock_write_iter+0x10/0x10 [ 1049.465835][T20777] ? __pfx_file_has_perm+0x10/0x10 [ 1049.465863][T20777] do_iter_readv_writev+0x654/0x950 [ 1049.465890][T20777] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1049.465913][T20777] ? selinux_file_permission+0x126/0x660 [ 1049.465944][T20777] ? bpf_lsm_file_permission+0x9/0x10 [ 1049.465964][T20777] ? security_file_permission+0x71/0x210 [ 1049.465983][T20777] ? rw_verify_area+0xcf/0x680 [ 1049.466008][T20777] vfs_writev+0x35f/0xde0 [ 1049.466039][T20777] ? __pfx_vfs_writev+0x10/0x10 [ 1049.466080][T20777] ? __fget_files+0x20e/0x3c0 [ 1049.466096][T20777] ? __fget_files+0x190/0x3c0 [ 1049.466118][T20777] ? do_writev+0x28c/0x340 [ 1049.466139][T20777] do_writev+0x28c/0x340 [ 1049.466162][T20777] ? __pfx_do_writev+0x10/0x10 [ 1049.466192][T20777] do_syscall_64+0xcd/0x4c0 [ 1049.466212][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.466230][T20777] RIP: 0033:0x7fdd22b8e9a9 [ 1049.466245][T20777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.466262][T20777] RSP: 002b:00007fdd23ab8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1049.466279][T20777] RAX: ffffffffffffffda RBX: 00007fdd22db6080 RCX: 00007fdd22b8e9a9 [ 1049.466290][T20777] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000009 [ 1049.466301][T20777] RBP: 00007fdd23ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.466312][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.466322][T20777] R13: 0000000000000000 R14: 00007fdd22db6080 R15: 00007ffc00eedc28 [ 1049.466346][T20777] [ 1049.965475][T20779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1050.324179][ T30] audit: type=1400 audit(1753504986.105:903): avc: denied { listen } for pid=20776 comm="syz.0.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1050.351600][ C0] vkms_vblank_simulate: vblank timer overrun [ 1050.360529][T20758] tipc: Resetting bearer [ 1050.408293][T20758] tipc: Disabling bearer [ 1051.109779][T20798] overlayfs: missing 'lowerdir' [ 1051.126732][ T30] audit: type=1400 audit(1753504986.925:904): avc: denied { ioctl } for pid=20802 comm="syz.4.4119" path="/226/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1051.239618][ T30] audit: type=1800 audit(1753504987.035:905): pid=20803 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.4119" name="/" dev="9p" ino=2 res=0 errno=0 [ 1051.485271][T20808] netlink: 'syz.2.4116': attribute type 1 has an invalid length. [ 1051.688279][T20808] netlink: 'syz.2.4116': attribute type 4 has an invalid length. [ 1052.002039][T20810] netlink: 'syz.2.4116': attribute type 1 has an invalid length. [ 1052.013070][ T5830] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1052.635561][T20810] netlink: 'syz.2.4116': attribute type 4 has an invalid length. [ 1052.639479][T20808] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1052.670931][T20810] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4116'. [ 1052.779633][ T5830] usb 6-1: device descriptor read/64, error -71 [ 1052.867297][T20818] vivid-000: ================= START STATUS ================= [ 1052.888610][T20818] vivid-000: Radio HW Seek Mode: Bounded [ 1052.892236][T20822] vivid-002: ================= START STATUS ================= [ 1052.903623][T20818] vivid-000: Radio Programmable HW Seek: false [ 1052.904475][T20822] vivid-002: Radio HW Seek Mode: Bounded [ 1052.910420][T20818] vivid-000: RDS Rx I/O Mode: Block I/O [ 1052.918062][T20822] vivid-002: Radio Programmable HW Seek: false [ 1052.924326][T20818] vivid-000: Generate RBDS Instead of RDS: false [ 1052.934516][T20822] vivid-002: RDS Rx I/O Mode: Block I/O [ 1052.936498][T20818] vivid-000: RDS Reception: [ 1052.941767][T20822] vivid-002: Generate RBDS Instead of RDS: [ 1052.942790][T20818] true [ 1052.979772][T20818] vivid-000: RDS Program Type: 0 inactive [ 1053.035812][ T5830] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1053.040819][T20818] vivid-000: RDS PS Name: inactive [ 1053.051994][T20822] false [ 1053.191931][T20818] vivid-000: RDS Radio Text: inactive [ 1053.196049][T20822] vivid-002: RDS Reception: [ 1053.295273][T20818] vivid-000: RDS Traffic Announcement: [ 1053.303387][T20822] true [ 1053.310031][T20818] false inactive [ 1053.325592][T20818] vivid-000: RDS Traffic Program: false inactive [ 1053.345074][ T5830] usb 6-1: device descriptor read/64, error -71 [ 1053.354510][T20818] vivid-000: RDS Music: false inactive [ 1053.360004][T20818] vivid-000: ================== END STATUS ================== [ 1053.361563][T20822] [ 1053.373260][T20822] vivid-002: RDS Program Type: 0 inactive [ 1053.380772][T20822] vivid-002: RDS PS Name: inactive [ 1053.380797][T20822] vivid-002: RDS Radio Text: inactive [ 1053.380818][T20822] vivid-002: RDS Traffic Announcement: false inactive [ 1053.380839][T20822] vivid-002: RDS Traffic Program: false inactive [ 1053.380861][T20822] vivid-002: RDS Music: false inactive [ 1053.380882][T20822] vivid-002: ================== END STATUS ================== [ 1053.454606][ T5830] usb usb6-port1: attempt power cycle [ 1053.825026][ T5830] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1053.944448][ T5830] usb 6-1: device descriptor read/8, error -71 [ 1053.964757][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.971100][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.219672][T20840] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1054.482202][T20845] RDS: rds_bind could not find a transport for 900:0:2:3358:7527:1b28:6329:d169, load rds_tcp or rds_rdma? [ 1054.525371][T15984] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1054.632295][T20851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1054.637454][T20850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.653408][T20850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.696158][T15984] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.711827][T15984] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1054.721992][T15984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.733584][T15984] usb 1-1: config 0 descriptor?? [ 1054.914478][ T5830] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1054.922322][ T5890] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1054.991026][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 150, changing to 11 [ 1055.004849][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8371, setting to 1024 [ 1055.018745][ T5830] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1055.032115][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.068440][ T5830] usb 6-1: config 0 descriptor?? [ 1055.094724][ T5890] usb 3-1: device descriptor read/64, error -71 [ 1055.364372][ T5890] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1055.494611][ T5890] usb 3-1: device descriptor read/64, error -71 [ 1055.513117][T20865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.521983][T20865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.668388][ T5890] usb usb3-port1: attempt power cycle [ 1055.927960][ T5830] usbhid 6-1:0.0: can't add hid device: -71 [ 1055.939477][ T5830] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1055.961172][ T5830] usb 6-1: USB disconnect, device number 81 [ 1056.014064][ T5890] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1056.034416][ T5890] usb 3-1: device descriptor read/8, error -71 [ 1056.344218][ T5890] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1056.374889][ T5890] usb 3-1: device descriptor read/8, error -71 [ 1056.513579][ T5890] usb usb3-port1: unable to enumerate USB device [ 1057.270032][T15984] usbhid 1-1:0.0: can't add hid device: -71 [ 1057.291738][T15984] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1057.818688][T15984] usb 1-1: USB disconnect, device number 84 [ 1057.858498][T20885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1058.327767][T20895] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1058.377634][T20895] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1058.384188][T20882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.763893][ T5919] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1058.923742][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 1059.095041][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1059.124135][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1059.138209][ T5919] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1059.147397][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.156784][ T5919] usb 6-1: Product: syz [ 1059.161130][ T5919] usb 6-1: Manufacturer: syz [ 1059.166037][ T5919] usb 6-1: SerialNumber: syz [ 1059.173196][ T5919] usb 6-1: config 0 descriptor?? [ 1059.221129][ T5919] usb 6-1: no audio or video endpoints found [ 1059.490694][ T5830] usb 6-1: USB disconnect, device number 82 [ 1060.224359][ T5830] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1060.398156][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.434440][ T5830] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1060.504858][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.540941][ T5830] usb 3-1: config 0 descriptor?? [ 1061.493404][T20940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.507122][T20940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.724753][ T30] audit: type=1400 audit(1753504997.505:906): avc: denied { write } for pid=20941 comm="syz.5.4159" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1062.093161][T17059] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1062.283896][T17059] usb 6-1: Using ep0 maxpacket: 32 [ 1062.315979][T17059] usb 6-1: config 0 has an invalid interface number: 54 but max is 0 [ 1062.354192][T17059] usb 6-1: config 0 has no interface number 0 [ 1062.426384][T17059] usb 6-1: config 0 interface 54 has no altsetting 0 [ 1062.527365][T17059] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 1062.581042][T17059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.600366][T17059] usb 6-1: Product: syz [ 1062.608984][T17059] usb 6-1: Manufacturer: syz [ 1062.621308][T17059] usb 6-1: SerialNumber: syz [ 1062.659084][T17059] usb 6-1: config 0 descriptor?? [ 1062.864342][ T5830] usbhid 3-1:0.0: can't add hid device: -71 [ 1062.870416][ T5830] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1062.906430][ T5830] usb 3-1: USB disconnect, device number 91 [ 1062.989277][T17059] ums_eneub6250 6-1:0.54: USB Mass Storage device detected [ 1063.120472][T20964] netlink: 'syz.2.4163': attribute type 10 has an invalid length. [ 1063.291952][T20964] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1063.310007][T17059] usb 6-1: USB disconnect, device number 83 [ 1063.319070][T20958] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4162'. [ 1063.956873][T20979] vivid-000: ================= START STATUS ================= [ 1063.992998][T20979] vivid-000: Radio HW Seek Mode: Bounded [ 1063.999645][T20979] vivid-000: Radio Programmable HW Seek: false [ 1064.084571][T20979] vivid-000: RDS Rx I/O Mode: Block I/O [ 1064.090215][T20979] vivid-000: Generate RBDS Instead of RDS: false [ 1064.097172][T20979] vivid-000: RDS Reception: true [ 1064.103722][T20979] vivid-000: RDS Program Type: 0 inactive [ 1064.109479][T20979] vivid-000: RDS PS Name: inactive [ 1064.134318][T20979] vivid-000: RDS Radio Text: inactive [ 1064.150021][T20979] vivid-000: RDS Traffic Announcement: false inactive [ 1064.166452][T20979] vivid-000: RDS Traffic Program: false inactive [ 1064.181683][T17059] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1064.200919][T20979] vivid-000: RDS Music: false inactive [ 1064.207382][T20979] vivid-000: ================== END STATUS ================== [ 1064.373812][T17059] usb 6-1: Using ep0 maxpacket: 16 [ 1064.386198][T17059] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.422700][T17059] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.663737][T17059] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1064.770698][T17059] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1064.813967][T17059] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.870801][T17059] usb 6-1: config 0 descriptor?? [ 1064.908200][T20989] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4170'. [ 1065.637428][T17059] usbhid 6-1:0.0: can't add hid device: -71 [ 1065.650694][T17059] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1065.674657][T17059] usb 6-1: USB disconnect, device number 84 [ 1065.890977][T21001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1065.898702][T21001] IPv6: NLM_F_CREATE should be set when creating new route [ 1066.017221][T20880] net_ratelimit: 4053 callbacks suppressed [ 1066.017238][T20880] Set syz1 is full, maxelem 65536 reached [ 1066.038997][T21000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1066.235183][ T30] audit: type=1400 audit(1753505002.015:907): avc: denied { append } for pid=21005 comm="syz.2.4174" name="binder1" dev="binder" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1066.288912][T21013] FAULT_INJECTION: forcing a failure. [ 1066.288912][T21013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.356159][T21013] CPU: 0 UID: 0 PID: 21013 Comm: syz.4.4175 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1066.356184][T21013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1066.356195][T21013] Call Trace: [ 1066.356201][T21013] [ 1066.356208][T21013] dump_stack_lvl+0x16c/0x1f0 [ 1066.356240][T21013] should_fail_ex+0x512/0x640 [ 1066.356269][T21013] _copy_from_user+0x2e/0xd0 [ 1066.356288][T21013] memdup_user+0x6b/0xe0 [ 1066.356314][T21013] strndup_user+0x78/0xe0 [ 1066.356339][T21013] __keyctl_dh_compute+0x287/0x10e0 [ 1066.356366][T21013] ? get_pid_task+0xfc/0x250 [ 1066.356385][T21013] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 1066.356406][T21013] ? __lock_acquire+0xb8a/0x1c90 [ 1066.356448][T21013] keyctl_dh_compute+0xd2/0x140 [ 1066.356467][T21013] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 1066.356490][T21013] ? ksys_write+0x1ac/0x250 [ 1066.356516][T21013] ? __pfx_ksys_write+0x10/0x10 [ 1066.356542][T21013] __do_sys_keyctl+0x4df/0x590 [ 1066.356569][T21013] do_syscall_64+0xcd/0x4c0 [ 1066.356587][T21013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.356605][T21013] RIP: 0033:0x7f2830f8e9a9 [ 1066.356619][T21013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1066.356634][T21013] RSP: 002b:00007f282edf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1066.356651][T21013] RAX: ffffffffffffffda RBX: 00007f28311b5fa0 RCX: 00007f2830f8e9a9 [ 1066.356661][T21013] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 1066.356671][T21013] RBP: 00007f282edf6090 R08: 0000200000000180 R09: 0000000000000000 [ 1066.356682][T21013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1066.356691][T21013] R13: 0000000000000000 R14: 00007f28311b5fa0 R15: 00007ffcc3d3abf8 [ 1066.356714][T21013] [ 1066.882077][T21033] hugetlbfs: syz.4.4182 (21033): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1067.294225][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1067.301850][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1067.848140][T21021] ceph: No mds server is up or the cluster is laggy [ 1067.855450][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1067.893066][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1068.298687][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 1068.306338][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 1068.398560][T21044] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4185'. [ 1069.515483][T21065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.554952][T21065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.581599][ T30] audit: type=1400 audit(1753505005.375:908): avc: denied { name_bind } for pid=21067 comm="syz.2.4193" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1069.673620][T21070] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4194'. [ 1070.080821][T21076] vivid-000: ================= START STATUS ================= [ 1070.091455][T21076] vivid-000: Radio HW Seek Mode: Bounded [ 1070.097753][T21076] vivid-000: Radio Programmable HW Seek: false [ 1070.121269][T21076] vivid-000: RDS Rx I/O Mode: Block I/O [ 1070.139946][T21076] vivid-000: Generate RBDS Instead of RDS: false [ 1070.171442][T21076] vivid-000: RDS Reception: true [ 1070.179772][T21076] vivid-000: RDS Program Type: 0 inactive [ 1070.185948][T21076] vivid-000: RDS PS Name: inactive [ 1070.191493][T21076] vivid-000: RDS Radio Text: inactive [ 1070.199545][T21076] vivid-000: RDS Traffic Announcement: false inactive [ 1070.207779][T21076] vivid-000: RDS Traffic Program: false inactive [ 1070.217734][T21076] vivid-000: RDS Music: false inactive [ 1070.223553][T21076] vivid-000: ================== END STATUS ================== [ 1070.251413][ T30] audit: type=1400 audit(1753505006.045:909): avc: denied { relabelfrom } for pid=21083 comm="syz.0.4200" name="UNIX" dev="sockfs" ino=88069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1070.252216][T21084] SELinux: Context system_u:object_r:tpm_device_t:s0 is not valid (left unmapped). [ 1070.302137][ T30] audit: type=1400 audit(1753505006.095:910): avc: denied { relabelto } for pid=21083 comm="syz.0.4200" name="UNIX" dev="sockfs" ino=88069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:tpm_device_t:s0" [ 1073.415074][T21119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1074.268035][T21132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1075.287547][T21148] vivid-000: ================= START STATUS ================= [ 1075.296445][T21148] vivid-000: Radio HW Seek Mode: Bounded [ 1075.302179][T21148] vivid-000: Radio Programmable HW Seek: false [ 1075.310691][T21148] vivid-000: RDS Rx I/O Mode: Block I/O [ 1075.316883][T21148] vivid-000: Generate RBDS Instead of RDS: false [ 1075.323276][T21148] vivid-000: RDS Reception: true [ 1075.328327][T21148] vivid-000: RDS Program Type: 0 inactive [ 1075.334148][T21148] vivid-000: RDS PS Name: inactive [ 1075.339436][T21148] vivid-000: RDS Radio Text: inactive [ 1075.345417][T21148] vivid-000: RDS Traffic Announcement: false inactive [ 1075.352215][T21148] vivid-000: RDS Traffic Program: false inactive [ 1075.358637][T21148] vivid-000: RDS Music: false inactive [ 1075.373720][T21148] vivid-000: ================== END STATUS ================== [ 1075.781758][T21153] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1076.974316][ T5919] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1077.137742][T21168] netlink: 'syz.0.4223': attribute type 10 has an invalid length. [ 1077.219916][T21168] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1077.272934][T21169] SELinux: failed to load policy [ 1077.397630][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.431929][T21176] vivid-002: ================= START STATUS ================= [ 1077.439650][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.480675][ T5919] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1077.490046][T21176] vivid-002: Radio HW Seek Mode: Bounded [ 1077.498761][T21176] vivid-002: Radio Programmable HW Seek: false [ 1077.512991][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.521204][T21176] vivid-002: RDS Rx I/O Mode: Block I/O [ 1077.535070][ T5919] usb 3-1: config 0 descriptor?? [ 1077.548462][T21176] vivid-002: Generate RBDS Instead of RDS: false [ 1077.561204][T21176] vivid-002: RDS Reception: true [ 1077.568788][T21176] vivid-002: RDS Program Type: 0 inactive [ 1077.577205][T21176] vivid-002: RDS PS Name: inactive [ 1077.582551][T21176] vivid-002: RDS Radio Text: inactive [ 1077.589063][T21176] vivid-002: RDS Traffic Announcement: false inactive [ 1077.596531][T21176] vivid-002: RDS Traffic Program: false inactive [ 1077.602928][T21176] vivid-002: RDS Music: false inactive [ 1077.608996][T21176] vivid-002: ================== END STATUS ================== [ 1077.764760][T15984] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1078.071063][ T5919] sony 0003:054C:0268.003D: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 1078.097565][T15984] usb 6-1: Using ep0 maxpacket: 32 [ 1078.118052][T15984] usb 6-1: config 2 has an invalid interface number: 228 but max is 0 [ 1078.121645][ T5919] sony 0003:054C:0268.003D: failed to claim input [ 1078.160861][T15984] usb 6-1: config 2 has no interface number 0 [ 1078.191226][T15984] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=47.8d [ 1078.216503][T15984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.267692][T15984] usb 6-1: Product: syz [ 1078.271877][T15984] usb 6-1: Manufacturer: syz [ 1078.300686][T15984] usb 6-1: SerialNumber: syz [ 1078.335357][T15984] snd_usb_variax 6-1:2.228: Line 6 Variax Workbench found [ 1078.350884][T21196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.354178][T15984] usb 6-1: selecting invalid altsetting 1 [ 1078.375716][T21196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.384917][T15984] snd_usb_variax 6-1:2.228: set_interface failed [ 1078.391407][T15984] snd_usb_variax 6-1:2.228: Line 6 Variax Workbench now disconnected [ 1078.409817][T15984] snd_usb_variax 6-1:2.228: probe with driver snd_usb_variax failed with error -22 [ 1078.530725][T15984] usb 3-1: USB disconnect, device number 92 [ 1078.607134][T21199] vivid-004: ================= START STATUS ================= [ 1078.616471][T21199] vivid-004: Radio HW Seek Mode: Bounded [ 1078.622753][T21199] vivid-004: Radio Programmable HW Seek: false [ 1078.632564][T21199] vivid-004: RDS Rx I/O Mode: Block I/O [ 1078.639983][T21199] vivid-004: Generate RBDS Instead of RDS: false [ 1078.653809][T21199] vivid-004: RDS Reception: true [ 1078.659491][T21199] vivid-004: RDS Program Type: 0 inactive [ 1078.666572][T21199] vivid-004: RDS PS Name: inactive [ 1078.671898][T21199] vivid-004: RDS Radio Text: inactive [ 1078.677528][T21199] vivid-004: RDS Traffic Announcement: false inactive [ 1078.688047][T21199] vivid-004: RDS Traffic Program: false inactive [ 1078.694239][ T5830] usb 6-1: USB disconnect, device number 85 [ 1078.703046][T21199] vivid-004: RDS Music: false inactive [ 1078.710960][T21199] vivid-004: ================== END STATUS ================== [ 1079.035099][T21211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.109803][T21214] fuse: Unknown parameter '' [ 1079.280635][T21215] netlink: 'syz.1.4235': attribute type 5 has an invalid length. [ 1079.535616][T21217] FAULT_INJECTION: forcing a failure. [ 1079.535616][T21217] name failslab, interval 1, probability 0, space 0, times 0 [ 1079.579168][T21222] i2c i2c-0: Invalid block write size 34 [ 1079.671422][T21217] CPU: 1 UID: 0 PID: 21217 Comm: syz.0.4237 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1079.671446][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1079.671456][T21217] Call Trace: [ 1079.671462][T21217] [ 1079.671469][T21217] dump_stack_lvl+0x16c/0x1f0 [ 1079.671501][T21217] should_fail_ex+0x512/0x640 [ 1079.671526][T21217] ? __kvmalloc_node_noprof+0x124/0x620 [ 1079.671554][T21217] should_failslab+0xc2/0x120 [ 1079.671571][T21217] __kvmalloc_node_noprof+0x137/0x620 [ 1079.671595][T21217] ? video_usercopy+0xa66/0x1720 [ 1079.671617][T21217] ? video_usercopy+0xa66/0x1720 [ 1079.671632][T21217] video_usercopy+0xa66/0x1720 [ 1079.671650][T21217] ? __pfx___video_do_ioctl+0x10/0x10 [ 1079.671675][T21217] ? selinux_kernel_read_file+0xd1/0x130 [ 1079.671692][T21217] ? __pfx_video_usercopy+0x10/0x10 [ 1079.671724][T21217] v4l2_ioctl+0x1ba/0x250 [ 1079.671748][T21217] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1079.671774][T21217] __x64_sys_ioctl+0x18e/0x210 [ 1079.671799][T21217] do_syscall_64+0xcd/0x4c0 [ 1079.671819][T21217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.671836][T21217] RIP: 0033:0x7f84ad98e9a9 [ 1079.671850][T21217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.671866][T21217] RSP: 002b:00007f84ae80a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.671881][T21217] RAX: ffffffffffffffda RBX: 00007f84adbb5fa0 RCX: 00007f84ad98e9a9 [ 1079.671892][T21217] RDX: 0000200000000100 RSI: 00000000c0205648 RDI: 0000000000000004 [ 1079.671902][T21217] RBP: 00007f84ae80a090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.671911][T21217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.671921][T21217] R13: 0000000000000000 R14: 00007f84adbb5fa0 R15: 00007fff64a8f9c8 [ 1079.671955][T21217] [ 1081.257927][ T30] audit: type=1400 audit(1753505016.965:911): avc: denied { kexec_image_load } for pid=21225 comm="syz.2.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1081.364295][T21240] netlink: 'syz.0.4240': attribute type 4 has an invalid length. [ 1081.372156][T21240] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4240'. [ 1081.998282][T21244] syz.4.4243: attempt to access beyond end of device [ 1081.998282][T21244] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1082.011510][T21244] EXT4-fs (nbd4): unable to read superblock [ 1083.040799][T21254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.065141][T21254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.089859][T21254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.107506][T21254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.149145][ T30] audit: type=1326 audit(1753505018.945:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd22b8e9a9 code=0x7ffc0000 [ 1083.203565][ T30] audit: type=1326 audit(1753505018.945:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd22b8e9a9 code=0x7ffc0000 [ 1083.230124][ T30] audit: type=1326 audit(1753505018.975:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd22b8e9a9 code=0x7ffc0000 [ 1083.257191][ T30] audit: type=1326 audit(1753505018.975:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd22b8e9a9 code=0x7ffc0000 [ 1083.281341][ T30] audit: type=1326 audit(1753505018.985:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd22b8e9a9 code=0x7ffc0000 [ 1083.305840][ T30] audit: type=1326 audit(1753505018.985:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd22b8d310 code=0x7ffc0000 [ 1083.329774][ T30] audit: type=1326 audit(1753505018.985:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd22b8e5ab code=0x7ffc0000 [ 1083.357156][ T30] audit: type=1326 audit(1753505018.985:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd22b8e5ab code=0x7ffc0000 [ 1083.382805][ T30] audit: type=1326 audit(1753505018.985:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21259 comm="syz.2.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd22b8e5ab code=0x7ffc0000 [ 1083.463873][ T5919] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1083.979206][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1084.048223][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1084.182136][ T5919] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1084.255687][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.329350][ T5919] usb 3-1: Product: syz [ 1084.386241][ T5919] usb 3-1: Manufacturer: syz [ 1084.396103][ T5919] usb 3-1: SerialNumber: syz [ 1084.450276][ T5919] usb 3-1: config 0 descriptor?? [ 1084.469634][T21278] vivid-000: ================= START STATUS ================= [ 1084.469744][T21260] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1084.479617][T21278] vivid-000: Radio HW Seek Mode: Bounded [ 1084.491016][T21278] vivid-000: Radio Programmable HW Seek: false [ 1084.497955][T21278] vivid-000: RDS Rx I/O Mode: Block I/O [ 1084.503577][T21278] vivid-000: Generate RBDS Instead of RDS: false [ 1084.510652][T21278] vivid-000: RDS Reception: true [ 1084.516286][T21278] vivid-000: RDS Program Type: 0 inactive [ 1084.522034][T21278] vivid-000: RDS PS Name: inactive [ 1084.529185][T21278] vivid-000: RDS Radio Text: inactive [ 1084.536097][T21278] vivid-000: RDS Traffic Announcement: false inactive [ 1084.542940][T21278] vivid-000: RDS Traffic Program: false inactive [ 1084.550024][T21278] vivid-000: RDS Music: false inactive [ 1084.561859][T21260] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1084.571743][T21278] vivid-000: ================== END STATUS ================== [ 1084.667877][T21283] netlink: 'syz.1.4255': attribute type 2 has an invalid length. [ 1085.045002][T21260] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1085.107184][T21283] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1085.128351][T21260] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1085.553502][ T5919] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1086.079879][T21260] Failed to initialize the IGMP autojoin socket (err -2) [ 1086.144014][ T5919] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1086.156456][T21295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4259'. [ 1086.178456][ T5919] usb 3-1: USB disconnect, device number 93 [ 1086.584357][ T5890] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1086.841442][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.178804][ T5890] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1087.192603][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.205641][ T5890] usb 6-1: config 0 descriptor?? [ 1087.317395][T21325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4269'. [ 1087.543852][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1087.543868][ T30] audit: type=1400 audit(1753505023.335:978): avc: denied { set_context_mgr } for pid=21328 comm="syz.4.4271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1088.182133][T21336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.200901][T21336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.087059][ T5890] usbhid 6-1:0.0: can't add hid device: -71 [ 1090.104126][ T5890] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1090.137328][ T5890] usb 6-1: USB disconnect, device number 86 [ 1090.200869][T21365] loop8: detected capacity change from 0 to 1 [ 1090.226276][T21365] Dev loop8: unable to read RDB block 1 [ 1090.831729][T21365] loop8: unable to read partition table [ 1090.949946][T21365] loop8: partition table beyond EOD, truncated [ 1090.956543][T21365] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1091.803311][T21380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1092.498513][T21383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4287'. [ 1092.889801][T21399] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1092.903866][T21399] batman_adv: batadv0: Adding interface: gretap1 [ 1092.910212][T21399] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.935674][T21399] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1093.733642][T21410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1093.903773][ T5898] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1094.037116][T21420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4297'. [ 1094.053045][T21420] netlink: 'syz.4.4297': attribute type 1 has an invalid length. [ 1094.077431][T21420] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4297'. [ 1094.090281][ T30] audit: type=1400 audit(1753505029.885:979): avc: denied { ioctl } for pid=21417 comm="syz.2.4296" path="/249/file0/file0" dev="fuse" ino=0 ioctlcmd=0x545c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1094.276086][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.287289][ T5898] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1094.301719][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.444702][ T5898] usb 1-1: config 0 descriptor?? [ 1094.556500][T21429] lo speed is unknown, defaulting to 1000 [ 1094.562616][T21429] lo speed is unknown, defaulting to 1000 [ 1094.572845][T21429] lo speed is unknown, defaulting to 1000 [ 1094.613755][T21429] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 1094.737742][T21429] lo speed is unknown, defaulting to 1000 [ 1094.750357][T21429] lo speed is unknown, defaulting to 1000 [ 1094.764080][T21429] lo speed is unknown, defaulting to 1000 [ 1094.776085][T21429] lo speed is unknown, defaulting to 1000 [ 1094.790189][T21429] lo speed is unknown, defaulting to 1000 [ 1095.104624][ T5898] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor [ 1095.236302][T21441] FAULT_INJECTION: forcing a failure. [ 1095.236302][T21441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.249908][T21441] CPU: 0 UID: 0 PID: 21441 Comm: syz.5.4302 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1095.249932][T21441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1095.249942][T21441] Call Trace: [ 1095.249948][T21441] [ 1095.249955][T21441] dump_stack_lvl+0x16c/0x1f0 [ 1095.249987][T21441] should_fail_ex+0x512/0x640 [ 1095.250017][T21441] _copy_to_user+0x32/0xd0 [ 1095.250036][T21441] simple_read_from_buffer+0xcb/0x170 [ 1095.250063][T21441] proc_fail_nth_read+0x197/0x270 [ 1095.250096][T21441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.250122][T21441] ? rw_verify_area+0xcf/0x680 [ 1095.250144][T21441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1095.250169][T21441] vfs_read+0x1e1/0xc60 [ 1095.250195][T21441] ? __pfx___mutex_lock+0x10/0x10 [ 1095.250212][T21441] ? __pfx_vfs_read+0x10/0x10 [ 1095.250242][T21441] ? __fget_files+0x20e/0x3c0 [ 1095.250266][T21441] ksys_read+0x12a/0x250 [ 1095.250287][T21441] ? __pfx_ksys_read+0x10/0x10 [ 1095.250318][T21441] do_syscall_64+0xcd/0x4c0 [ 1095.250336][T21441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.250354][T21441] RIP: 0033:0x7f097778d3bc [ 1095.250368][T21441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1095.250384][T21441] RSP: 002b:00007f09785b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1095.250401][T21441] RAX: ffffffffffffffda RBX: 00007f09779b6080 RCX: 00007f097778d3bc [ 1095.250412][T21441] RDX: 000000000000000f RSI: 00007f09785b20a0 RDI: 0000000000000008 [ 1095.250423][T21441] RBP: 00007f09785b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.250434][T21441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.250444][T21441] R13: 0000000000000000 R14: 00007f09779b6080 R15: 00007ffc044a04e8 [ 1095.250468][T21441] [ 1095.630815][ T5830] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1095.643909][ T5898] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003E/input/input71 [ 1095.672232][T21406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.698869][T21406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.774285][ T5830] usb 3-1: device descriptor read/64, error -71 [ 1095.817463][ T5898] keytouch 0003:0926:3333.003E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1096.124324][ T5830] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1096.352827][ T5919] usb 1-1: USB disconnect, device number 85 [ 1096.432360][T21450] fido_id[21450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1096.476680][ T5830] usb 3-1: device descriptor read/64, error -71 [ 1096.594619][ T5830] usb usb3-port1: attempt power cycle [ 1096.924277][ T5919] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1097.077631][T21462] netlink: 'syz.0.4308': attribute type 1 has an invalid length. [ 1097.210950][ T5830] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1097.230932][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.243503][ T5919] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1097.246902][ T5830] usb 3-1: device descriptor read/8, error -71 [ 1097.252974][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.279920][ T5919] usb 6-1: config 0 descriptor?? [ 1097.295613][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 1097.337897][T21464] Failed to initialize the IGMP autojoin socket (err -2) [ 1097.719249][ T5830] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1097.766704][ T5830] usb 3-1: device descriptor read/8, error -71 [ 1097.798020][ T30] audit: type=1326 audit(1753505033.595:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21463 comm="syz.0.4309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84ad98e9a9 code=0x0 [ 1097.874573][ T5830] usb usb3-port1: unable to enumerate USB device [ 1097.941809][ T5919] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1098.028322][ T5919] pwc: recv_control_msg error -32 req 02 val 2700 [ 1098.036698][ T5919] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1098.045485][ T5919] pwc: recv_control_msg error -32 req 04 val 1000 [ 1098.054428][ T5919] pwc: recv_control_msg error -32 req 04 val 1300 [ 1098.062298][ T5919] pwc: recv_control_msg error -32 req 04 val 1400 [ 1098.082728][ T5919] pwc: recv_control_msg error -32 req 02 val 2000 [ 1098.119787][ T5919] pwc: recv_control_msg error -32 req 02 val 2100 [ 1098.132564][ T5919] pwc: recv_control_msg error -32 req 04 val 1500 [ 1098.141748][ T5919] pwc: recv_control_msg error -32 req 02 val 2500 [ 1098.353160][ T5919] pwc: recv_control_msg error -71 req 02 val 2600 [ 1098.359967][ T5919] pwc: recv_control_msg error -71 req 02 val 2900 [ 1098.378964][ T5919] pwc: recv_control_msg error -71 req 02 val 2800 [ 1098.410455][ T5919] pwc: recv_control_msg error -71 req 04 val 1100 [ 1098.437201][ T5919] pwc: recv_control_msg error -71 req 04 val 1200 [ 1098.479273][ T5919] pwc: Registered as video103. [ 1098.496377][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72 [ 1098.549023][ T5919] usb 6-1: USB disconnect, device number 87 [ 1098.762475][T21486] netlink: 'syz.1.4316': attribute type 1 has an invalid length. [ 1099.735721][T21499] ALSA: mixer_oss: invalid OSS volume '' [ 1099.805811][T21502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1099.821569][ T30] audit: type=1400 audit(1753505035.615:981): avc: denied { append } for pid=21503 comm="syz.5.4322" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1099.907967][T21502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.920060][T21502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.976989][T21508] loop6: detected capacity change from 0 to 7 [ 1099.988564][T21510] vivid-004: ================= START STATUS ================= [ 1099.988573][T20839] Dev loop6: unable to read RDB block 7 [ 1100.000800][T21510] vivid-004: Radio HW Seek Mode: Bounded [ 1100.006493][T20839] loop6: unable to read partition table [ 1100.012235][T21510] vivid-004: Radio Programmable HW Seek: false [ 1100.021687][T21510] vivid-004: RDS Rx I/O Mode: Block I/O [ 1100.024494][T20839] loop6: partition table beyond EOD, truncated [ 1100.028365][T21510] vivid-004: Generate RBDS Instead of RDS: [ 1100.036873][T21508] Dev loop6: unable to read RDB block 7 [ 1100.049456][T21510] false [ 1100.052301][T21510] vivid-004: RDS Reception: true [ 1100.053794][T21508] loop6: unable to read partition table [ 1100.058101][T21510] vivid-004: RDS Program Type: [ 1100.062969][T21508] loop6: partition table beyond EOD, [ 1100.063026][T21510] 0 [ 1100.067995][T21508] truncated [ 1100.076379][T21510] inactive [ 1100.078888][T21508] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1100.078920][T21510] [ 1100.097560][T21510] vivid-004: RDS PS Name: inactive [ 1100.103521][T21510] vivid-004: RDS Radio Text: inactive [ 1100.110315][T21510] vivid-004: RDS Traffic Announcement: false inactive [ 1100.117728][T21510] vivid-004: RDS Traffic Program: false inactive [ 1100.124785][T21510] vivid-004: RDS Music: false inactive [ 1100.130276][T21510] vivid-004: ================== END STATUS ================== [ 1101.453039][T21530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.878572][T21541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4334'. [ 1102.088430][T21545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1102.119572][T21545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1102.448924][T21559] cifs: Unknown parameter 'cachi' [ 1102.957001][T21562] input: syz1 as /devices/virtual/input/input73 [ 1103.222936][T21566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1103.260092][T21568] FAULT_INJECTION: forcing a failure. [ 1103.260092][T21568] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1103.296626][T21568] CPU: 1 UID: 0 PID: 21568 Comm: syz.1.4343 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1103.296649][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1103.296660][T21568] Call Trace: [ 1103.296666][T21568] [ 1103.296673][T21568] dump_stack_lvl+0x16c/0x1f0 [ 1103.296706][T21568] should_fail_ex+0x512/0x640 [ 1103.296737][T21568] should_fail_alloc_page+0xe7/0x130 [ 1103.296756][T21568] prepare_alloc_pages+0x3c2/0x610 [ 1103.296782][T21568] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1103.296820][T21568] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1103.296863][T21568] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1103.296884][T21568] ? policy_nodemask+0xea/0x4e0 [ 1103.296904][T21568] alloc_pages_mpol+0x1fb/0x550 [ 1103.296921][T21568] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1103.296947][T21568] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1103.296969][T21568] vma_alloc_folio_noprof+0xed/0x1e0 [ 1103.296988][T21568] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1103.297052][T21568] ? rcu_read_unlock+0x2d/0xb0 [ 1103.297085][T21568] do_wp_page+0x1136/0x4f20 [ 1103.297112][T21568] ? __pfx_do_wp_page+0x10/0x10 [ 1103.297134][T21568] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1103.297160][T21568] __handle_mm_fault+0x2223/0x5490 [ 1103.297189][T21568] ? __pfx___handle_mm_fault+0x10/0x10 [ 1103.297211][T21568] ? __pte_offset_map_lock+0x174/0x310 [ 1103.297228][T21568] ? vm_normal_page+0x152/0x2e0 [ 1103.297245][T21568] ? find_held_lock+0x2b/0x80 [ 1103.297270][T21568] ? find_held_lock+0x2b/0x80 [ 1103.297297][T21568] ? follow_page_pte+0x3af/0x14c0 [ 1103.297324][T21568] handle_mm_fault+0x589/0xd10 [ 1103.297352][T21568] __get_user_pages+0x589/0x3b80 [ 1103.297383][T21568] ? __pfx___get_user_pages+0x10/0x10 [ 1103.297403][T21568] ? __pfx_down_read_killable+0x10/0x10 [ 1103.297426][T21568] ? __lock_acquire+0x622/0x1c90 [ 1103.297445][T21568] __gup_longterm_locked+0x20d/0x1840 [ 1103.297471][T21568] ? try_get_folio+0x1d2/0x730 [ 1103.297489][T21568] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1103.297511][T21568] ? try_get_folio+0x255/0x730 [ 1103.297530][T21568] ? sanity_check_pinned_pages+0x3bf/0x1200 [ 1103.297554][T21568] gup_fast_fallback+0x1ab3/0x29e0 [ 1103.297593][T21568] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1103.297617][T21568] ? is_bpf_text_address+0x8a/0x1a0 [ 1103.297637][T21568] ? bpf_ksym_find+0x127/0x1c0 [ 1103.297660][T21568] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1103.297685][T21568] ? is_bpf_text_address+0x94/0x1a0 [ 1103.297708][T21568] pin_user_pages_fast+0xa7/0xf0 [ 1103.297728][T21568] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 1103.297749][T21568] ? iov_iter_advance+0x1e3/0x6c0 [ 1103.297770][T21568] iov_iter_extract_pages+0x3a2/0x1ed0 [ 1103.297791][T21568] ? __pfx_stack_trace_save+0x10/0x10 [ 1103.297812][T21568] ? stack_depot_save_flags+0x28/0xa40 [ 1103.297840][T21568] ? find_held_lock+0x2b/0x80 [ 1103.297860][T21568] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 1103.297878][T21568] ? sock_kmalloc+0x111/0x170 [ 1103.297898][T21568] ? kasan_save_stack+0x42/0x60 [ 1103.297921][T21568] ? kasan_save_stack+0x33/0x60 [ 1103.297943][T21568] ? kasan_save_track+0x14/0x30 [ 1103.297966][T21568] ? __kasan_kmalloc+0xaa/0xb0 [ 1103.297988][T21568] ? __kmalloc_noprof+0x223/0x510 [ 1103.298026][T21568] ? sock_kmalloc+0x111/0x170 [ 1103.298042][T21568] ? af_alg_alloc_areq+0xbc/0x2e0 [ 1103.298068][T21568] ? skcipher_recvmsg+0x32b/0x1030 [ 1103.298085][T21568] ? sock_recvmsg+0x1f6/0x250 [ 1103.298103][T21568] ? ____sys_recvmsg+0x218/0x6b0 [ 1103.298122][T21568] ? ___sys_recvmsg+0x114/0x1a0 [ 1103.298136][T21568] ? __sys_recvmsg+0x16a/0x220 [ 1103.298150][T21568] ? do_syscall_64+0xcd/0x4c0 [ 1103.298166][T21568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.298192][T21568] extract_iter_to_sg+0xf6e/0x20c0 [ 1103.298226][T21568] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 1103.298267][T21568] af_alg_get_rsgl+0x2b8/0x7f0 [ 1103.298295][T21568] skcipher_recvmsg+0x38c/0x1030 [ 1103.298323][T21568] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1103.298350][T21568] sock_recvmsg+0x1f6/0x250 [ 1103.298372][T21568] ____sys_recvmsg+0x218/0x6b0 [ 1103.298398][T21568] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1103.298430][T21568] ? __lock_acquire+0x622/0x1c90 [ 1103.298450][T21568] ___sys_recvmsg+0x114/0x1a0 [ 1103.298468][T21568] ? __pfx____sys_recvmsg+0x10/0x10 [ 1103.298509][T21568] __sys_recvmsg+0x16a/0x220 [ 1103.298526][T21568] ? __pfx___sys_recvmsg+0x10/0x10 [ 1103.298562][T21568] do_syscall_64+0xcd/0x4c0 [ 1103.298582][T21568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.298600][T21568] RIP: 0033:0x7f5d92d8e9a9 [ 1103.298615][T21568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.298633][T21568] RSP: 002b:00007f5d93c3c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1103.298650][T21568] RAX: ffffffffffffffda RBX: 00007f5d92fb5fa0 RCX: 00007f5d92d8e9a9 [ 1103.298662][T21568] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1103.298672][T21568] RBP: 00007f5d93c3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.298682][T21568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.298692][T21568] R13: 0000000000000000 R14: 00007f5d92fb5fa0 R15: 00007fffc47b8638 [ 1103.298717][T21568] [ 1104.041984][ T5830] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1104.200446][T21581] FAULT_INJECTION: forcing a failure. [ 1104.200446][T21581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1104.235685][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.247278][ T5830] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1104.253626][T21581] CPU: 1 UID: 0 PID: 21581 Comm: syz.4.4346 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1104.253651][T21581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1104.253660][T21581] Call Trace: [ 1104.253665][T21581] [ 1104.253671][T21581] dump_stack_lvl+0x16c/0x1f0 [ 1104.253700][T21581] should_fail_ex+0x512/0x640 [ 1104.253727][T21581] _copy_from_user+0x2e/0xd0 [ 1104.253743][T21581] kstrtouint_from_user+0xd6/0x1d0 [ 1104.253763][T21581] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1104.253781][T21581] ? __lock_acquire+0xb8a/0x1c90 [ 1104.253808][T21581] proc_fail_nth_write+0x83/0x250 [ 1104.253829][T21581] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1104.253858][T21581] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1104.253877][T21581] vfs_write+0x2a0/0x1150 [ 1104.253902][T21581] ? __pfx___mutex_lock+0x10/0x10 [ 1104.253917][T21581] ? __pfx_vfs_write+0x10/0x10 [ 1104.253946][T21581] ? __fget_files+0x20e/0x3c0 [ 1104.253968][T21581] ksys_write+0x12a/0x250 [ 1104.253989][T21581] ? __pfx_ksys_write+0x10/0x10 [ 1104.254018][T21581] do_syscall_64+0xcd/0x4c0 [ 1104.254034][T21581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.254049][T21581] RIP: 0033:0x7f2830f8d45f [ 1104.254062][T21581] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1104.254076][T21581] RSP: 002b:00007f282edf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1104.254091][T21581] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2830f8d45f [ 1104.254101][T21581] RDX: 0000000000000001 RSI: 00007f282edf60a0 RDI: 0000000000000003 [ 1104.254110][T21581] RBP: 00007f282edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.254119][T21581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1104.254128][T21581] R13: 0000000000000000 R14: 00007f28311b5fa0 R15: 00007ffcc3d3abf8 [ 1104.254149][T21581] [ 1104.449560][T21593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.501365][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.530430][T21593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.558981][T21593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.570833][ T5830] usb 1-1: config 0 descriptor?? [ 1104.586213][T21593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.786000][T20857] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1104.877650][T21599] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1104.888619][T21599] batman_adv: batadv0: Adding interface: gretap1 [ 1104.895009][T21599] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.920937][T21599] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1104.975174][T21601] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1104.988298][T21601] batman_adv: batadv0: Adding interface: gretap1 [ 1104.994682][T21601] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.020069][T21601] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1105.819698][T21570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.824171][ T5830] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 1105.843536][T21604] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4355'. [ 1105.867809][T21570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.929564][T20857] usb 6-1: Using ep0 maxpacket: 32 [ 1105.944986][ T5830] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.003F/input/input74 [ 1106.108956][T20857] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1106.120030][T20857] usb 6-1: config 0 has no interface number 0 [ 1106.126810][T20857] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1106.141429][T20857] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1106.154717][ T30] audit: type=1400 audit(1753505041.955:982): avc: denied { unmount } for pid=16694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1106.316900][T20857] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1106.332534][ T5830] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1106.596728][T20857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.622201][T20857] usb 6-1: Product: syz [ 1106.627710][ T5830] usb 1-1: USB disconnect, device number 86 [ 1106.640482][T20857] usb 6-1: Manufacturer: syz [ 1106.656661][T20857] usb 6-1: SerialNumber: syz [ 1106.670119][T20857] usb 6-1: config 0 descriptor?? [ 1106.885544][T20857] radio-si470x 6-1:0.35: this is not a si470x device. [ 1106.918472][T20857] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1106.922301][T21615] fido_id[21615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1107.119507][T21591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.139154][T21591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.316501][T21627] program syz.1.4360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.331928][T21627] program syz.1.4360 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.355314][T21627] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1107.441562][T20857] usb 6-1: USB disconnect, device number 88 [ 1108.013180][T21635] Failed to initialize the IGMP autojoin socket (err -2) [ 1108.074798][T21636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.103317][T21636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.183904][ T30] audit: type=1326 audit(1753505043.975:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21634 comm="syz.5.4365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f097778e9a9 code=0x0 [ 1109.230534][T21655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4366'. [ 1109.293391][T21655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4366'. [ 1110.232503][T21689] IPv6: Can't replace route, no match found [ 1110.303711][T21690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4376'. [ 1110.646577][T21693] Failed to initialize the IGMP autojoin socket (err -2) [ 1110.835945][ T30] audit: type=1326 audit(1753505046.635:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21692 comm="syz.4.4377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2830f8e9a9 code=0x0 [ 1111.080155][T21699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.780073][T21706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1112.216018][T21712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1112.253379][ T30] audit: type=1400 audit(1753505048.045:985): avc: denied { setopt } for pid=21716 comm="syz.1.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1112.793815][ T30] audit: type=1400 audit(1753505048.585:986): avc: denied { read } for pid=21724 comm="syz.0.4385" path="socket:[91289]" dev="sockfs" ino=91289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1112.901006][ T30] audit: type=1400 audit(1753505048.695:987): avc: denied { module_load } for pid=21724 comm="syz.0.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1113.330244][T21739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.217701][T21760] binder: BINDER_SET_CONTEXT_MGR already set [ 1114.225035][T21760] binder: 21759:21760 ioctl 4018620d 200000000040 returned -16 [ 1114.602487][T21761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.101685][ T30] audit: type=1400 audit(1753505050.895:988): avc: denied { connect } for pid=21775 comm="syz.1.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1115.172751][ T30] audit: type=1400 audit(1753505050.965:989): avc: denied { bind } for pid=21775 comm="syz.1.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1115.228445][ T30] audit: type=1400 audit(1753505050.965:990): avc: denied { listen } for pid=21775 comm="syz.1.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1115.367908][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.384247][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.891168][ T30] audit: type=1400 audit(1753505052.685:991): avc: denied { getopt } for pid=21799 comm="syz.2.4403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1117.361176][T21809] dlm: no locking on control device [ 1117.372793][T21809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.384263][T21809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.464997][T21820] tmpfs: Cannot change global quota limit on remount [ 1118.743727][ T5919] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1119.663805][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 1119.670627][ T5919] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1119.693738][ T5919] usb 3-1: config 0 has no interface number 0 [ 1119.722946][ T5919] usb 3-1: too many endpoints for config 0 interface 1 altsetting 201: 101, using maximum allowed: 30 [ 1119.754145][ T5919] usb 3-1: config 0 interface 1 altsetting 201 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 1119.787724][ T5919] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1119.820396][ T5919] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1119.839707][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.863738][ T5919] usb 3-1: Product: syz [ 1119.867920][ T5919] usb 3-1: Manufacturer: syz [ 1119.882708][ T5919] usb 3-1: SerialNumber: syz [ 1119.889799][ T5919] usb 3-1: config 0 descriptor?? [ 1119.933484][T21831] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.939560][T21831] binder: 21830:21831 ioctl 4018620d 200000000040 returned -16 [ 1120.074994][T21836] mkiss: ax0: crc mode is auto. [ 1120.110878][ T5919] hub 3-1:0.1: bad descriptor, ignoring hub [ 1120.132563][ T5919] hub 3-1:0.1: probe with driver hub failed with error -5 [ 1120.159022][ T5919] usb 3-1: selecting invalid altsetting 1 [ 1120.175446][ T5919] snd-usb-us122l 3-1:0.1: usb_set_interface error [ 1120.193757][ T5919] snd-usb-us122l 3-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 1120.238058][ T5919] usb 3-1: USB disconnect, device number 98 [ 1120.502715][T21843] tipc: Enabled bearer , priority 0 [ 1122.331599][T21861] vivid-003: ================= START STATUS ================= [ 1122.354339][T21861] vivid-003: Radio HW Seek Mode: Bounded [ 1122.360014][T21861] vivid-003: Radio Programmable HW Seek: false [ 1122.393806][T21861] vivid-003: RDS Rx I/O Mode: Block I/O [ 1122.399382][T21861] vivid-003: Generate RBDS Instead of RDS: false [ 1122.447667][ T5898] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1122.465581][T21861] vivid-003: RDS Reception: true [ 1122.471643][T21861] vivid-003: RDS Program Type: 0 inactive [ 1122.579767][T21861] vivid-003: RDS PS Name: inactive [ 1122.586026][T21861] vivid-003: RDS Radio Text: inactive [ 1122.656069][T21861] vivid-003: RDS Traffic Announcement: false inactive [ 1122.662851][T21861] vivid-003: RDS Traffic Program: false inactive [ 1122.671254][T21861] vivid-003: RDS Music: false inactive [ 1122.679027][T21861] vivid-003: ================== END STATUS ================== [ 1122.683942][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 1122.697910][ T5898] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 1122.710775][ T5898] usb 1-1: config 127 has no interface number 1 [ 1122.724322][ T5898] usb 1-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1122.736216][ T5898] usb 1-1: config 127 interface 0 altsetting 10 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1122.780147][ T5898] usb 1-1: config 127 interface 0 altsetting 10 bulk endpoint 0x4 has invalid maxpacket 0 [ 1122.790392][ T5898] usb 1-1: config 127 interface 171 has no altsetting 0 [ 1122.800901][ T5898] usb 1-1: config 127 interface 0 has no altsetting 0 [ 1122.811062][ T5898] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1122.821714][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.830138][ T5898] usb 1-1: Product: syz [ 1122.835946][ T5898] usb 1-1: Manufacturer: syz [ 1122.840580][ T5898] usb 1-1: SerialNumber: syz [ 1123.062746][ T5898] xr_serial 1-1:127.171: xr_serial converter detected [ 1123.195423][ T5898] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1123.201908][ T5898] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1123.308512][T21872] syz.1.4425: attempt to access beyond end of device [ 1123.308512][T21872] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1123.321788][T21872] EXT4-fs (nbd1): unable to read superblock [ 1123.732050][ T5898] usb 1-1: USB disconnect, device number 87 [ 1123.785415][ T5898] xr_serial 1-1:127.171: device disconnected [ 1126.443134][T20857] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1126.645435][T20857] usb 6-1: device descriptor read/64, error -71 [ 1126.757826][T21883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1126.804220][T21883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4428'. [ 1126.820783][ T5919] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1126.994308][T20857] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1127.113744][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 1127.121007][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1127.146931][ T5919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.175605][ T5919] usb 1-1: config 0 has no interface number 0 [ 1127.189063][ T5919] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1127.205941][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.221394][ T5919] usb 1-1: Product: syz [ 1127.229970][ T5919] usb 1-1: Manufacturer: syz [ 1127.241823][ T5919] usb 1-1: SerialNumber: syz [ 1127.257177][ T5919] usb 1-1: config 0 descriptor?? [ 1127.269312][ T5919] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1127.278972][ T5919] cx231xx 1-1:0.1: Not found matching IAD interface [ 1127.346536][T20857] usb 6-1: device descriptor read/64, error -71 [ 1127.464637][T20857] usb usb6-port1: attempt power cycle [ 1127.614042][T21889] kvm: user requested TSC rate below hardware speed [ 1127.904330][T20857] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1127.939512][T20857] usb 6-1: Using ep0 maxpacket: 8 [ 1128.051803][T20857] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.100892][T20857] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1128.206877][T20857] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1128.260926][T20857] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1128.323348][ T30] audit: type=1400 audit(1753505064.115:992): avc: denied { call } for pid=21963 comm="syz.1.4440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1128.349960][T20857] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1128.392043][T20857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.420903][T21967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1128.427423][T21967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1128.443885][T21967] vhci_hcd vhci_hcd.0: Device attached [ 1128.444182][T20857] usb 6-1: Product: syz [ 1128.453564][T20857] usb 6-1: Manufacturer: syz [ 1128.468530][T20857] usb 6-1: SerialNumber: syz [ 1128.496857][T20857] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1128.509785][T20857] usbtest 6-1:1.0: Linux user mode ISO test driver [ 1128.523175][T20857] usbtest 6-1:1.0: high-speed {control bulk-out iso-in} tests (+alt) [ 1128.683759][ T5919] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1128.710633][T20857] usb 6-1: USB disconnect, device number 91 [ 1129.298558][ T5830] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1130.168697][ T5830] usb 3-1: device descriptor read/64, error -71 [ 1130.812137][T20857] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1131.858956][T21970] vhci_hcd: connection reset by peer [ 1131.920103][T21947] vhci_hcd: stop threads [ 1131.983161][T21947] vhci_hcd: release socket [ 1132.049140][T21947] vhci_hcd: disconnect device [ 1132.197626][ T5918] usb 1-1: USB disconnect, device number 88 [ 1132.267037][T20857] usb 6-1: device descriptor read/64, error -71 [ 1132.334660][T21999] bridge0: entered allmulticast mode [ 1133.496618][T22008] Failed to initialize the IGMP autojoin socket (err -2) [ 1134.093762][ T5919] vhci_hcd: vhci_device speed not set [ 1135.063488][ T30] audit: type=1400 audit(1753505070.845:993): avc: denied { setattr } for pid=22016 comm="syz.5.4453" name="RDS" dev="sockfs" ino=91939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1135.625955][T22037] kernel profiling enabled (shift: 63) [ 1135.657303][T22037] profiling shift: 63 too large [ 1136.147706][T22046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4460'. [ 1137.370027][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1137.851158][ T30] audit: type=1400 audit(1753505073.645:994): avc: denied { connect } for pid=22059 comm="syz.1.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1138.570554][T22069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4467'. [ 1138.601776][T22069] input: syz0 as /devices/virtual/input/input75 [ 1139.116605][T22091] FAULT_INJECTION: forcing a failure. [ 1139.116605][T22091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.117847][T22090] Failed to initialize the IGMP autojoin socket (err -2) [ 1139.118316][T22091] [ 1139.118321][T22091] ====================================================== [ 1139.118327][T22091] WARNING: possible circular locking dependency detected [ 1139.118332][T22091] 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 Not tainted [ 1139.118340][T22091] ------------------------------------------------------ [ 1139.118344][T22091] syz.2.4475/22091 is trying to acquire lock: [ 1139.118352][T22091] ffffffff8e4d2380 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1139.118389][T22091] [ 1139.118389][T22091] but task is already holding lock: [ 1139.118392][T22091] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1139.118422][T22091] [ 1139.118422][T22091] which lock already depends on the new lock. [ 1139.118422][T22091] [ 1139.118426][T22091] [ 1139.118426][T22091] the existing dependency chain (in reverse order) is: [ 1139.118431][T22091] [ 1139.118431][T22091] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1139.118446][T22091] _raw_spin_lock_nested+0x31/0x40 [ 1139.118465][T22091] raw_spin_rq_lock_nested+0x29/0x130 [ 1139.118480][T22091] task_rq_lock+0xcf/0x490 [ 1139.118494][T22091] cgroup_move_task+0x81/0x2a0 [ 1139.118511][T22091] css_set_move_task+0x288/0x5f0 [ 1139.118523][T22091] cgroup_post_fork+0x201/0x9e0 [ 1139.118537][T22091] copy_process+0x5c82/0x7650 [ 1139.118553][T22091] kernel_clone+0xfc/0x960 [ 1139.118568][T22091] user_mode_thread+0xc7/0x110 [ 1139.118583][T22091] rest_init+0x23/0x2b0 [ 1139.118596][T22091] start_kernel+0x3ee/0x4d0 [ 1139.118608][T22091] x86_64_start_reservations+0x18/0x30 [ 1139.118627][T22091] x86_64_start_kernel+0x130/0x190 [ 1139.118638][T22091] common_startup_64+0x13e/0x148 [ 1139.118649][T22091] [ 1139.118649][T22091] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1139.118664][T22091] _raw_spin_lock_irqsave+0x3a/0x60 [ 1139.118680][T22091] try_to_wake_up+0xb2/0x1680 [ 1139.118694][T22091] __wake_up_common+0x132/0x1f0 [ 1139.118705][T22091] __wake_up+0x31/0x60 [ 1139.118720][T22091] tty_port_default_wakeup+0x2a/0x40 [ 1139.118734][T22091] serial8250_tx_chars+0x68e/0x860 [ 1139.118747][T22091] serial8250_handle_irq+0x761/0xcb0 [ 1139.118761][T22091] serial8250_default_handle_irq+0x9a/0x210 [ 1139.118776][T22091] serial8250_interrupt+0x106/0x210 [ 1139.118791][T22091] __handle_irq_event_percpu+0x22c/0x7d0 [ 1139.118806][T22091] handle_irq_event+0xab/0x1e0 [ 1139.118820][T22091] handle_edge_irq+0x28e/0xab0 [ 1139.118833][T22091] __common_interrupt+0xdf/0x250 [ 1139.118849][T22091] common_interrupt+0x61/0xe0 [ 1139.118863][T22091] asm_common_interrupt+0x26/0x40 [ 1139.118875][T22091] lock_acquire+0x62/0x350 [ 1139.118885][T22091] unwind_next_frame+0xd1/0x20a0 [ 1139.118897][T22091] arch_stack_walk+0x94/0x100 [ 1139.118908][T22091] stack_trace_save+0x8e/0xc0 [ 1139.118925][T22091] kasan_save_stack+0x33/0x60 [ 1139.118943][T22091] kasan_save_track+0x14/0x30 [ 1139.118960][T22091] kasan_save_free_info+0x3b/0x60 [ 1139.118975][T22091] __kasan_slab_free+0x51/0x70 [ 1139.118992][T22091] kmem_cache_free+0x2d1/0x4d0 [ 1139.119009][T22091] rcu_core+0x79c/0x14e0 [ 1139.119022][T22091] handle_softirqs+0x219/0x8e0 [ 1139.119037][T22091] __irq_exit_rcu+0x109/0x170 [ 1139.119051][T22091] irq_exit_rcu+0x9/0x30 [ 1139.119064][T22091] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1139.119082][T22091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1139.119095][T22091] pv_native_safe_halt+0xf/0x20 [ 1139.119112][T22091] default_idle+0x13/0x20 [ 1139.119124][T22091] default_idle_call+0x6d/0xb0 [ 1139.119136][T22091] do_idle+0x391/0x510 [ 1139.119150][T22091] cpu_startup_entry+0x4f/0x60 [ 1139.119165][T22091] start_secondary+0x21d/0x2b0 [ 1139.119181][T22091] common_startup_64+0x13e/0x148 [ 1139.119192][T22091] [ 1139.119192][T22091] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1139.119212][T22091] _raw_spin_lock_irqsave+0x3a/0x60 [ 1139.119228][T22091] __wake_up+0x1c/0x60 [ 1139.119243][T22091] tty_port_default_wakeup+0x2a/0x40 [ 1139.119256][T22091] serial8250_tx_chars+0x68e/0x860 [ 1139.119269][T22091] serial8250_handle_irq+0x761/0xcb0 [ 1139.119282][T22091] serial8250_default_handle_irq+0x9a/0x210 [ 1139.119297][T22091] serial8250_interrupt+0x106/0x210 [ 1139.119312][T22091] __handle_irq_event_percpu+0x22c/0x7d0 [ 1139.119327][T22091] handle_irq_event+0xab/0x1e0 [ 1139.119341][T22091] handle_edge_irq+0x28e/0xab0 [ 1139.119353][T22091] __common_interrupt+0xdf/0x250 [ 1139.119368][T22091] common_interrupt+0x61/0xe0 [ 1139.119381][T22091] asm_common_interrupt+0x26/0x40 [ 1139.119392][T22091] lock_acquire+0x62/0x350 [ 1139.119402][T22091] unwind_next_frame+0xd1/0x20a0 [ 1139.119412][T22091] arch_stack_walk+0x94/0x100 [ 1139.119423][T22091] stack_trace_save+0x8e/0xc0 [ 1139.119438][T22091] kasan_save_stack+0x33/0x60 [ 1139.119455][T22091] kasan_save_track+0x14/0x30 [ 1139.119472][T22091] kasan_save_free_info+0x3b/0x60 [ 1139.119486][T22091] __kasan_slab_free+0x51/0x70 [ 1139.119503][T22091] kmem_cache_free+0x2d1/0x4d0 [ 1139.119519][T22091] rcu_core+0x79c/0x14e0 [ 1139.119531][T22091] handle_softirqs+0x219/0x8e0 [ 1139.119545][T22091] __irq_exit_rcu+0x109/0x170 [ 1139.119559][T22091] irq_exit_rcu+0x9/0x30 [ 1139.119572][T22091] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1139.119589][T22091] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1139.119601][T22091] pv_native_safe_halt+0xf/0x20 [ 1139.119618][T22091] default_idle+0x13/0x20 [ 1139.119630][T22091] default_idle_call+0x6d/0xb0 [ 1139.119642][T22091] do_idle+0x391/0x510 [ 1139.119656][T22091] cpu_startup_entry+0x4f/0x60 [ 1139.119671][T22091] start_secondary+0x21d/0x2b0 [ 1139.119686][T22091] common_startup_64+0x13e/0x148 [ 1139.119697][T22091] [ 1139.119697][T22091] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1139.119712][T22091] _raw_spin_lock_irqsave+0x3a/0x60 [ 1139.119728][T22091] serial8250_console_write+0x181/0x1890 [ 1139.119743][T22091] console_flush_all+0x801/0xc60 [ 1139.119757][T22091] console_unlock+0xd8/0x210 [ 1139.119770][T22091] vprintk_emit+0x418/0x6d0 [ 1139.119784][T22091] _printk+0xc7/0x100 [ 1139.119794][T22091] register_console+0xc2d/0x11b0 [ 1139.119809][T22091] univ8250_console_init+0x5f/0x90 [ 1139.119821][T22091] console_init+0x14f/0x680 [ 1139.119831][T22091] start_kernel+0x29f/0x4d0 [ 1139.119840][T22091] x86_64_start_reservations+0x18/0x30 [ 1139.119859][T22091] x86_64_start_kernel+0x130/0x190 [ 1139.119869][T22091] common_startup_64+0x13e/0x148 [ 1139.119880][T22091] [ 1139.119880][T22091] -> #0 (console_owner){-.-.}-{0:0}: [ 1139.119895][T22091] __lock_acquire+0x126f/0x1c90 [ 1139.119904][T22091] lock_acquire+0x179/0x350 [ 1139.119914][T22091] console_lock_spinning_enable+0xb0/0xd0 [ 1139.119928][T22091] console_flush_all+0x7aa/0xc60 [ 1139.119942][T22091] console_unlock+0xd8/0x210 [ 1139.119955][T22091] vprintk_emit+0x418/0x6d0 [ 1139.119969][T22091] _printk+0xc7/0x100 [ 1139.119979][T22091] should_fail_ex+0x4e7/0x640 [ 1139.119998][T22091] strncpy_from_user+0x3b/0x2e0 [ 1139.120014][T22091] strncpy_from_user_nofault+0x7f/0x180 [ 1139.120026][T22091] bpf_bprintf_prepare+0xede/0x14b0 [ 1139.120045][T22091] bpf_trace_printk+0xda/0x190 [ 1139.120063][T22091] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1139.120072][T22091] bpf_trace_run2+0x233/0x590 [ 1139.120083][T22091] __bpf_trace_contention_begin+0xc9/0x110 [ 1139.120095][T22091] trace_contention_begin.constprop.0+0xde/0x160 [ 1139.120109][T22091] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1139.120128][T22091] do_raw_spin_lock+0x20e/0x2b0 [ 1139.120140][T22091] raw_spin_rq_lock_nested+0x7e/0x130 [ 1139.120155][T22091] __schedule+0x301/0x5dd0 [ 1139.120171][T22091] preempt_schedule_irq+0x51/0x90 [ 1139.120188][T22091] irqentry_exit+0x36/0x90 [ 1139.120198][T22091] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.120214][T22091] its_return_thunk+0x0/0x10 [ 1139.120228][T22091] unwind_next_frame+0x2ec/0x20a0 [ 1139.120239][T22091] arch_stack_walk+0x94/0x100 [ 1139.120250][T22091] stack_trace_save+0x8e/0xc0 [ 1139.120265][T22091] kasan_save_stack+0x33/0x60 [ 1139.120282][T22091] kasan_save_track+0x14/0x30 [ 1139.120298][T22091] __kasan_slab_alloc+0x89/0x90 [ 1139.120316][T22091] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.120334][T22091] __alloc_skb+0x2b2/0x380 [ 1139.120353][T22091] netlink_alloc_large_skb+0x69/0x130 [ 1139.120367][T22091] netlink_sendmsg+0x6a1/0xdd0 [ 1139.120380][T22091] ____sys_sendmsg+0xa98/0xc70 [ 1139.120394][T22091] ___sys_sendmsg+0x134/0x1d0 [ 1139.120404][T22091] __sys_sendmsg+0x16d/0x220 [ 1139.120414][T22091] do_syscall_64+0xcd/0x4c0 [ 1139.120425][T22091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.120436][T22091] [ 1139.120436][T22091] other info that might help us debug this: [ 1139.120436][T22091] [ 1139.120440][T22091] Chain exists of: [ 1139.120440][T22091] console_owner --> &p->pi_lock --> &rq->__lock [ 1139.120440][T22091] [ 1139.120457][T22091] Possible unsafe locking scenario: [ 1139.120457][T22091] [ 1139.120461][T22091] CPU0 CPU1 [ 1139.120464][T22091] ---- ---- [ 1139.120468][T22091] lock(&rq->__lock); [ 1139.120475][T22091] lock(&p->pi_lock); [ 1139.120483][T22091] lock(&rq->__lock); [ 1139.120491][T22091] lock(console_owner); [ 1139.120499][T22091] [ 1139.120499][T22091] *** DEADLOCK *** [ 1139.120499][T22091] [ 1139.120502][T22091] 5 locks held by syz.2.4475/22091: [ 1139.120509][T22091] #0: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 1139.120536][T22091] #1: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1139.120570][T22091] #2: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1b6/0x590 [ 1139.120597][T22091] #3: ffffffff8e5b27c0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1139.120623][T22091] #4: ffffffff8e5b2830 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1139.120652][T22091] [ 1139.120652][T22091] stack backtrace: [ 1139.120658][T22091] CPU: 0 UID: 0 PID: 22091 Comm: syz.2.4475 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1139.120674][T22091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1139.120682][T22091] Call Trace: [ 1139.120686][T22091] [ 1139.120691][T22091] dump_stack_lvl+0x116/0x1f0 [ 1139.120712][T22091] print_circular_bug+0x275/0x350 [ 1139.120731][T22091] check_noncircular+0x14c/0x170 [ 1139.120752][T22091] __lock_acquire+0x126f/0x1c90 [ 1139.120765][T22091] lock_acquire+0x179/0x350 [ 1139.120776][T22091] ? console_lock_spinning_enable+0x9f/0xd0 [ 1139.120791][T22091] ? console_lock_spinning_enable+0x88/0xd0 [ 1139.120808][T22091] console_lock_spinning_enable+0xb0/0xd0 [ 1139.120822][T22091] ? console_lock_spinning_enable+0x9f/0xd0 [ 1139.120837][T22091] console_flush_all+0x7aa/0xc60 [ 1139.120853][T22091] ? __pfx_console_flush_all+0x10/0x10 [ 1139.120870][T22091] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1139.120888][T22091] console_unlock+0xd8/0x210 [ 1139.120903][T22091] ? __pfx_console_unlock+0x10/0x10 [ 1139.120917][T22091] ? do_raw_spin_unlock+0xd0/0x230 [ 1139.120931][T22091] ? _printk+0xc7/0x100 [ 1139.120942][T22091] ? __down_trylock_console_sem+0xb0/0x140 [ 1139.120956][T22091] vprintk_emit+0x418/0x6d0 [ 1139.120972][T22091] ? __pfx_vprintk_emit+0x10/0x10 [ 1139.120990][T22091] _printk+0xc7/0x100 [ 1139.121000][T22091] ? __pfx__printk+0x10/0x10 [ 1139.121013][T22091] ? __pfx____ratelimit+0x10/0x10 [ 1139.121033][T22091] should_fail_ex+0x4e7/0x640 [ 1139.121052][T22091] strncpy_from_user+0x3b/0x2e0 [ 1139.121070][T22091] strncpy_from_user_nofault+0x7f/0x180 [ 1139.121083][T22091] bpf_bprintf_prepare+0xede/0x14b0 [ 1139.121104][T22091] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1139.121125][T22091] ? bpf_trace_run2+0x3db/0x590 [ 1139.121137][T22091] bpf_trace_printk+0xda/0x190 [ 1139.121156][T22091] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1139.121176][T22091] ? bpf_trace_run2+0x3db/0x590 [ 1139.121191][T22091] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1139.121204][T22091] bpf_trace_run2+0x233/0x590 [ 1139.121217][T22091] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1139.121229][T22091] ? ring_buffer_lock_reserve+0x6ca/0x11b0 [ 1139.121249][T22091] ? __bpf_trace_contention_begin+0xc9/0x110 [ 1139.121262][T22091] __bpf_trace_contention_begin+0xc9/0x110 [ 1139.121275][T22091] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1139.121288][T22091] ? rcu_is_watching+0x12/0xc0 [ 1139.121306][T22091] trace_contention_begin.constprop.0+0xde/0x160 [ 1139.121321][T22091] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1139.121342][T22091] ? __lock_acquire+0xb8a/0x1c90 [ 1139.121353][T22091] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1139.121375][T22091] ? do_raw_spin_lock+0x12c/0x2b0 [ 1139.121390][T22091] do_raw_spin_lock+0x20e/0x2b0 [ 1139.121403][T22091] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1139.121417][T22091] ? rcu_qs+0x2b/0xe0 [ 1139.121431][T22091] ? rcu_note_context_switch+0x192/0x1e00 [ 1139.121447][T22091] raw_spin_rq_lock_nested+0x7e/0x130 [ 1139.121463][T22091] ? preempt_schedule_irq+0x51/0x90 [ 1139.121481][T22091] ? preempt_schedule_irq+0x51/0x90 [ 1139.121499][T22091] __schedule+0x301/0x5dd0 [ 1139.121518][T22091] ? find_held_lock+0x2b/0x80 [ 1139.121533][T22091] ? __lock_acquire+0xb8a/0x1c90 [ 1139.121545][T22091] ? __pfx___schedule+0x10/0x10 [ 1139.121565][T22091] ? __lock_acquire+0x622/0x1c90 [ 1139.121577][T22091] preempt_schedule_irq+0x51/0x90 [ 1139.121596][T22091] irqentry_exit+0x36/0x90 [ 1139.121606][T22091] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.121619][T22091] RIP: 0010:its_return_thunk+0x0/0x10 [ 1139.121635][T22091] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 5b 8c a2 f5 cc [ 1139.121647][T22091] RSP: 0018:ffffc9000c83f4b0 EFLAGS: 00000292 [ 1139.121657][T22091] RAX: ffffffff914bf1b2 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1139.121665][T22091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90c35c18 [ 1139.121674][T22091] RBP: ffffc9000c83f570 R08: ffffffff914bf1c4 R09: 0000000000000000 [ 1139.121682][T22091] R10: 0000000000000000 R11: 000000000001168d R12: ffffc9000c83f578 [ 1139.121690][T22091] R13: ffffc9000c83f528 R14: ffffc9000c83f55d R15: ffffffff82168d64 [ 1139.121699][T22091] ? kmem_cache_alloc_node_noprof+0x1d4/0x3b0 [ 1139.121721][T22091] unwind_next_frame+0x2ec/0x20a0 [ 1139.121733][T22091] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.121752][T22091] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1139.121773][T22091] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1139.121791][T22091] arch_stack_walk+0x94/0x100 [ 1139.121805][T22091] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.121825][T22091] stack_trace_save+0x8e/0xc0 [ 1139.121841][T22091] ? __pfx_stack_trace_save+0x10/0x10 [ 1139.121859][T22091] ? register_lock_class+0x41/0x4c0 [ 1139.121871][T22091] ? register_lock_class+0x41/0x4c0 [ 1139.121882][T22091] kasan_save_stack+0x33/0x60 [ 1139.121900][T22091] ? kasan_save_stack+0x33/0x60 [ 1139.121917][T22091] ? kasan_save_track+0x14/0x30 [ 1139.121934][T22091] ? __kasan_slab_alloc+0x89/0x90 [ 1139.121953][T22091] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.121983][T22091] kasan_save_track+0x14/0x30 [ 1139.122000][T22091] __kasan_slab_alloc+0x89/0x90 [ 1139.122019][T22091] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.122038][T22091] ? __alloc_skb+0x2b2/0x380 [ 1139.122057][T22091] __alloc_skb+0x2b2/0x380 [ 1139.122075][T22091] ? __pfx___alloc_skb+0x10/0x10 [ 1139.122095][T22091] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1139.122110][T22091] netlink_alloc_large_skb+0x69/0x130 [ 1139.122125][T22091] netlink_sendmsg+0x6a1/0xdd0 [ 1139.122140][T22091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.122156][T22091] ? ____sys_sendmsg+0x871/0xc70 [ 1139.122171][T22091] ____sys_sendmsg+0xa98/0xc70 [ 1139.122186][T22091] ? copy_msghdr_from_user+0x10a/0x160 [ 1139.122198][T22091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.122220][T22091] ___sys_sendmsg+0x134/0x1d0 [ 1139.122232][T22091] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.122242][T22091] ? __lock_acquire+0x622/0x1c90 [ 1139.122262][T22091] __sys_sendmsg+0x16d/0x220 [ 1139.122274][T22091] ? __pfx___sys_sendmsg+0x10/0x10 [ 1139.122290][T22091] do_syscall_64+0xcd/0x4c0 [ 1139.122302][T22091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.122314][T22091] RIP: 0033:0x7fdd22b8e9a9 [ 1139.122324][T22091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.122337][T22091] RSP: 002b:00007fdd23ab8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.122348][T22091] RAX: ffffffffffffffda RBX: 00007fdd22db6080 RCX: 00007fdd22b8e9a9 [ 1139.122356][T22091] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1139.122363][T22091] RBP: 00007fdd23ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.122371][T22091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.122379][T22091] R13: 0000000000000000 R14: 00007fdd22db6080 R15: 00007ffc00eedc28 [ 1139.122390][T22091] [ 1139.135399][T22091] CPU: 0 UID: 0 PID: 22091 Comm: syz.2.4475 Not tainted 6.16.0-rc7-syzkaller-00114-g327579671a9b #0 PREEMPT(full) [ 1139.135417][T22091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1139.135425][T22091] Call Trace: [ 1139.135430][T22091] [ 1139.135435][T22091] dump_stack_lvl+0x116/0x1f0 [ 1139.135458][T22091] should_fail_ex+0x512/0x640 [ 1139.135481][T22091] strncpy_from_user+0x3b/0x2e0 [ 1139.135502][T22091] strncpy_from_user_nofault+0x7f/0x180 [ 1139.135517][T22091] bpf_bprintf_prepare+0xede/0x14b0 [ 1139.135542][T22091] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1139.135568][T22091] ? bpf_trace_run2+0x3db/0x590 [ 1139.135584][T22091] bpf_trace_printk+0xda/0x190 [ 1139.135607][T22091] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1139.135634][T22091] ? bpf_trace_run2+0x3db/0x590 [ 1139.135652][T22091] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1139.135663][T22091] bpf_trace_run2+0x233/0x590 [ 1139.135677][T22091] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1139.135692][T22091] ? ring_buffer_lock_reserve+0x6ca/0x11b0 [ 1139.135714][T22091] ? __bpf_trace_contention_begin+0xc9/0x110 [ 1139.135729][T22091] __bpf_trace_contention_begin+0xc9/0x110 [ 1139.135743][T22091] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1139.135758][T22091] ? rcu_is_watching+0x12/0xc0 [ 1139.135777][T22091] trace_contention_begin.constprop.0+0xde/0x160 [ 1139.135793][T22091] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1139.135817][T22091] ? __lock_acquire+0xb8a/0x1c90 [ 1139.135829][T22091] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1139.135853][T22091] ? do_raw_spin_lock+0x12c/0x2b0 [ 1139.135869][T22091] do_raw_spin_lock+0x20e/0x2b0 [ 1139.135885][T22091] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1139.135899][T22091] ? rcu_qs+0x2b/0xe0 [ 1139.135915][T22091] ? rcu_note_context_switch+0x192/0x1e00 [ 1139.135933][T22091] raw_spin_rq_lock_nested+0x7e/0x130 [ 1139.135951][T22091] ? preempt_schedule_irq+0x51/0x90 [ 1139.135971][T22091] ? preempt_schedule_irq+0x51/0x90 [ 1139.135991][T22091] __schedule+0x301/0x5dd0 [ 1139.136011][T22091] ? find_held_lock+0x2b/0x80 [ 1139.136029][T22091] ? __lock_acquire+0xb8a/0x1c90 [ 1139.136043][T22091] ? __pfx___schedule+0x10/0x10 [ 1139.136064][T22091] ? __lock_acquire+0x622/0x1c90 [ 1139.136078][T22091] preempt_schedule_irq+0x51/0x90 [ 1139.136099][T22091] irqentry_exit+0x36/0x90 [ 1139.136111][T22091] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1139.136126][T22091] RIP: 0010:its_return_thunk+0x0/0x10 [ 1139.136144][T22091] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 5b 8c a2 f5 cc [ 1139.136158][T22091] RSP: 0018:ffffc9000c83f4b0 EFLAGS: 00000292 [ 1139.136169][T22091] RAX: ffffffff914bf1b2 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1139.136179][T22091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff90c35c18 [ 1139.136187][T22091] RBP: ffffc9000c83f570 R08: ffffffff914bf1c4 R09: 0000000000000000 [ 1139.136196][T22091] R10: 0000000000000000 R11: 000000000001168d R12: ffffc9000c83f578 [ 1139.136213][T22091] R13: ffffc9000c83f528 R14: ffffc9000c83f55d R15: ffffffff82168d64 [ 1139.136223][T22091] ? kmem_cache_alloc_node_noprof+0x1d4/0x3b0 [ 1139.136247][T22091] unwind_next_frame+0x2ec/0x20a0 [ 1139.136261][T22091] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.136282][T22091] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1139.136305][T22091] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1139.136324][T22091] arch_stack_walk+0x94/0x100 [ 1139.136340][T22091] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.136362][T22091] stack_trace_save+0x8e/0xc0 [ 1139.136380][T22091] ? __pfx_stack_trace_save+0x10/0x10 [ 1139.136400][T22091] ? register_lock_class+0x41/0x4c0 [ 1139.136414][T22091] ? register_lock_class+0x41/0x4c0 [ 1139.136428][T22091] kasan_save_stack+0x33/0x60 [ 1139.136447][T22091] ? kasan_save_stack+0x33/0x60 [ 1139.136466][T22091] ? kasan_save_track+0x14/0x30 [ 1139.136486][T22091] ? __kasan_slab_alloc+0x89/0x90 [ 1139.136506][T22091] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.136538][T22091] kasan_save_track+0x14/0x30 [ 1139.136557][T22091] __kasan_slab_alloc+0x89/0x90 [ 1139.136578][T22091] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1139.136599][T22091] ? __alloc_skb+0x2b2/0x380 [ 1139.136620][T22091] __alloc_skb+0x2b2/0x380 [ 1139.136640][T22091] ? __pfx___alloc_skb+0x10/0x10 [ 1139.136661][T22091] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1139.136679][T22091] netlink_alloc_large_skb+0x69/0x130 [ 1139.136696][T22091] netlink_sendmsg+0x6a1/0xdd0 [ 1139.136713][T22091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1139.136730][T22091] ? ____sys_sendmsg+0x871/0xc70 [ 1139.136748][T22091] ____sys_sendmsg+0xa98/0xc70 [ 1139.136765][T22091] ? copy_msghdr_from_user+0x10a/0x160 [ 1139.136778][T22091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1139.136799][T22091] ___sys_sendmsg+0x134/0x1d0 [ 1139.136812][T22091] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.136825][T22091] ? __lock_acquire+0x622/0x1c90 [ 1139.136846][T22091] __sys_sendmsg+0x16d/0x220 [ 1139.136860][T22091] ? __pfx___sys_sendmsg+0x10/0x10 [ 1139.136878][T22091] do_syscall_64+0xcd/0x4c0 [ 1139.136892][T22091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.136906][T22091] RIP: 0033:0x7fdd22b8e9a9 [ 1139.136916][T22091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.136929][T22091] RSP: 002b:00007fdd23ab8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1139.136942][T22091] RAX: ffffffffffffffda RBX: 00007fdd22db6080 RCX: 00007fdd22b8e9a9 [ 1139.136952][T22091] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1139.136960][T22091] RBP: 00007fdd23ab8090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.136969][T22091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.136978][T22091] R13: 0000000000000000 R14: 00007fdd22db6080 R15: 00007ffc00eedc28 [ 1139.136991][T22091] [ 1139.147900][T22091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4475'. [ 1141.733831][T22091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4475'.