last executing test programs: 7m15.038754413s ago: executing program 2 (id=324): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x40042, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getdents(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x40040) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) syz_open_procfs(0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10, 0x8000000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x110, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x7882, 0x100, 0x0, 0x2ae}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca59288d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a7182860f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c417b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc60700", 0x1000}}, 0x1006) 7m12.877037008s ago: executing program 2 (id=326): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180c0000000000000000000000000094fffffffff3000000"], &(0x7f0000000040)='GPL\x00'}, 0x80) r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0xffffffffffffff90, &(0x7f00000005c0)={&(0x7f0000000300)=@newqdisc={0x114, 0x10, 0x1, 0x71bd2d, 0x0, {0x10, 0x0, 0x4c, 0x0, {0x0, 0x8}, {0xd, 0xc}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x82, 0x5, 0x9, 0x8000, 0x1, 0x0, 0x5, 0x8}}, {0x14, 0x2, [0x7, 0xd2, 0x9, 0xb34, 0x3, 0x5, 0x7f, 0x3fc]}}, {{0x1c, 0x1, {0x7f, 0x6, 0x2, 0x40, 0x0, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x3, 0x8, 0x6, 0x2]}}, {{0x1c, 0x1, {0x5, 0x1, 0x0, 0x9, 0x1, 0x9, 0x2000000, 0x7}}, {0x12, 0x2, [0x0, 0x4, 0x0, 0x8001, 0x400, 0xf6, 0x9]}}, {{0x1c, 0x1, {0xfb, 0x5, 0x0, 0x6, 0x0, 0x2, 0x4, 0x8}}, {0x14, 0x2, [0x4, 0x6, 0x1, 0x6, 0x2, 0x200, 0x200, 0x4]}}, {{0x1c, 0x1, {0xd, 0x1, 0x6, 0x5, 0x1, 0x7a473f91, 0x1d4, 0x5}}, {0xe, 0x2, [0xff, 0xe, 0xbf, 0x7, 0x401]}}]}]}, 0x114}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r4, 0x11, 0x0, r5}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7m11.917289153s ago: executing program 2 (id=327): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r2, 0x0, 0x0) 7m11.115722675s ago: executing program 2 (id=331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f907, 0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000480)={0x6, 0x0, 0x1}) 7m10.621208931s ago: executing program 2 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="18c44975a308f7", &(0x7f0000000180), 0x3dbc4689, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r2}, 0x38) (fail_nth: 7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 7m9.086798805s ago: executing program 2 (id=337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) close_range(r0, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) r3 = socket(0x28, 0x5, 0x0) shutdown(r3, 0x2000000) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x70602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@delchain={0x54, 0x65, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0xffe0, 0xfff9}, {0x8, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x40, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1, 0x200000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 6m52.517529227s ago: executing program 32 (id=337): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) close_range(r0, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) r3 = socket(0x28, 0x5, 0x0) shutdown(r3, 0x2000000) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x70602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@delchain={0x54, 0x65, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0xffe0, 0xfff9}, {0x8, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_POLICE={0x4}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x40, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1, 0x200000}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 27.731118647s ago: executing program 3 (id=1237): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200000) r1 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x80008000, 0x9, 0x2, 0x2f, 0x0, 0x1, 0xd, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0x40a00000, 0x3, 0x4, 0x10000, 0x100, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x5, 0x4, 0x28045]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 22.478300796s ago: executing program 3 (id=1240): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @ldst={0x0, 0x3, 0x0, 0x8, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8081, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4501, 0x0) bind$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x1, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x5c, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19.969636033s ago: executing program 3 (id=1245): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) pipe2(0x0, 0x80000) r4 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="668a00000000000061114c000040000085000021890000ff95376c431b8d0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001240)={{}, "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"}) socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8800) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0xbeef, 0x3ff, 0x2, 0xcdb9, 0xfffffff1}}, {0x4}}]}]}, 0x54}}, 0x0) 18.736911873s ago: executing program 5 (id=1249): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=ANY=[@ANYRES64, @ANYBLOB="c7e7e9dac8381eb7b9a88c149101049156622918955270cf0db0e40c4ec5d7ff4afdba7dc389ca4f92b337b58ec9a7259691d3ed0db6906ebfc6357ad3675afe76f5cf079d4be57cf40467292fddd3b679597c", @ANYBLOB="4a0f1d361f22fe116078c9fee8dc2cc61c15a79dc74ca768e482e46a695e921fb4d526f8493dd07ffb2b42afcb628b1a53b38f5acefa1c25bac73539e4baa67a8a7d9dc18e30cf18a6b9be2ba20d7366ff8aac7cabc2d2fc483466d5c47fe0c708da09d6d1197ae8b2dd733cc29a9da68068d234c6488158eb965e002a3a54cd328b78f86c1e7e6967b448bfb691c9efcd784162a0b704424836cd368beded3432655f2b1d85da2cfea2e19a74b93254ff2cf2d052799423b0da70a38e62af6692fe7a174c86", @ANYRES64=0x0], 0x7c}}, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000340)=@nl, &(0x7f0000000500)=0x80, 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000080)=0x12, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000016c0)={0xa, 0x0, [{0x0, 0x8, 0x2, 0x8, 0x1000, 0xffff, 0x914}, {0x0, 0x6, 0x1, 0x7162, 0x4, 0x6, 0x4}, {0x40000000, 0x9, 0x7, 0x5, 0x6, 0x200, 0x4}, {0x80000019, 0xdbd, 0x2, 0x1, 0x10, 0x9, 0x95}, {0x6, 0x2, 0x0, 0x1, 0x5, 0x40, 0x23a2ff67}, {0x6, 0x6, 0x3, 0x5, 0x4, 0xd, 0x2}, {0x2, 0x800, 0x0, 0x2, 0x3, 0x0, 0x10}, {0x80000008, 0x4, 0x4, 0xcfd7, 0xffff, 0x9, 0x340}, {0x80000007, 0x57f, 0x1, 0x8, 0xffffffff, 0x2, 0x2}, {0xb, 0x2, 0x7, 0x4, 0x7, 0x0, 0xa51}]}) 17.517262428s ago: executing program 5 (id=1253): syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061199c000000e7ff9400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x7e, 0x0, 0x34324152, 0x4, 0x0, [{0x0, 0xf}, {0x20010}, {}, {0x1000000}, {0x3}, {0x2fe}, {0x0, 0x7ff}], 0xf, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x1, 0x1, 0x93}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'sit0\x00', 0x0}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 14.565615189s ago: executing program 5 (id=1256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4006, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket(0x2, 0x80805, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_script(r6, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) 9.975460527s ago: executing program 5 (id=1261): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) setuid(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde']}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 9.899723488s ago: executing program 4 (id=1263): setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)=ANY=[@ANYRES64, @ANYBLOB="c7e7e9dac8381eb7b9a88c149101049156622918955270cf0db0e40c4ec5d7ff4afdba7dc389ca4f92b337b58ec9a7259691d3ed0db6906ebfc6357ad3675afe76f5cf079d4be57cf40467292fddd3b679597c", @ANYBLOB="4a0f1d361f22fe116078c9fee8dc2cc61c15a79dc74ca768e482e46a695e921fb4d526f8493dd07ffb2b42afcb628b1a53b38f5acefa1c25bac73539e4baa67a8a7d9dc18e30cf18a6b9be2ba20d7366ff8aac7cabc2d2fc483466d5c47fe0c708da09d6d1197ae8b2dd733cc29a9da68068d234c6488158eb965e002a3a54cd328b78f86c1e7e6967b448bfb691c9efcd784162a0b704424836cd368beded3432655f2b1d85da2cfea2e19a74b93254ff2cf2d052799423b0da70a38e62af6692fe7a174c86", @ANYRES64=0x0], 0x7c}}, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000340)=@nl, &(0x7f0000000500)=0x80, 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000080)=0x12, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000016c0)={0xa, 0x0, [{0x0, 0x8, 0x2, 0x8, 0x1000, 0xffff, 0x914}, {0x0, 0x6, 0x1, 0x7162, 0x4, 0x6, 0x4}, {0x40000000, 0x9, 0x7, 0x5, 0x6, 0x200, 0x4}, {0x80000019, 0xdbd, 0x2, 0x1, 0x10, 0x9, 0x95}, {0x6, 0x2, 0x0, 0x1, 0x5, 0x40, 0x23a2ff67}, {0x6, 0x6, 0x3, 0x5, 0x4, 0xd, 0x2}, {0x2, 0x800, 0x0, 0x2, 0x3, 0x0, 0x10}, {0x80000008, 0x4, 0x4, 0xcfd7, 0xffff, 0x9, 0x340}, {0x80000007, 0x57f, 0x1, 0x8, 0xffffffff, 0x2, 0x2}, {0xb, 0x2, 0x7, 0x4, 0x7, 0x0, 0xa51}]}) 8.028114904s ago: executing program 3 (id=1264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0xffffffffffffffdf) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r5}, 0x38) unshare(0x8000600) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2024) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000000000010000000000000200010001"], 0x70}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) 7.190852719s ago: executing program 1 (id=1265): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 7.116488442s ago: executing program 5 (id=1267): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100073582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='dax\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.69957264s ago: executing program 3 (id=1269): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x8, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x8}, @ldst={0x0, 0x3, 0x0, 0x8, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x8081, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x4501, 0x0) bind$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x1, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x5c, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.629168598s ago: executing program 1 (id=1270): r0 = socket(0x2, 0x3, 0xff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000600)=0x1, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f0000000000080003"], 0x7c}}, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (rerun: 64) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) (async, rerun: 64) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, 0x0, 0x0) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0xfffd, 0x101, 0x2, 0x6}, 'syz1\x00', 0x10}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES16=r10, @ANYRESDEC=r7], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x1) sendmmsg$sock(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1}}], 0x2, 0x40448c0) 5.59660897s ago: executing program 4 (id=1271): unshare(0x6000800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) (fail_nth: 8) 5.47565584s ago: executing program 0 (id=1272): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x9b, 0x200, 0x4d, &(0x7f00000003c0)="4e8ac507481ed7964f3dce4e44eeb894837e6c2dc3e67f8c3e37e6230c92cfc261a15d172c93d6dbbdf236283970221f075eac78679a8a9b4f030d7e96c75fb79cf3da5c5b48cc337d049fb326"}, {0x9b, 0x11, 0x0, 0x0}], 0x2}) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000000)='attr/current\x00') sched_setscheduler(r1, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') write$UHID_CREATE2(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/254], 0x15f) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r3, &(0x7f0000000100)=""/78, 0x4e, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x10, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 4.816482313s ago: executing program 5 (id=1273): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x36e) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000003c0)={0x1}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000003777000002004000ae49311109c9f967d11c85709f06ad4724666ac34f01a05be4c839e05c0f15be3b5e78332fe5f2abe143253c94af6bfadb281ec962896111f12a8a65f0c7547d810716e79b014fe2ab0376c27bb125"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f60873d00005f3a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd, 0x4002810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) keyctl$session_to_parent(0x12) 4.773158135s ago: executing program 3 (id=1274): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1, 0x5, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1e, 0x0, @empty, 0x9d77}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0xe6) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000010", 0x8, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x2, 0x0, 0x8}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x0, 0x0, 0x8}]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f00000000c0), 0x0, r1}) 4.723248588s ago: executing program 1 (id=1275): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0xfffffffffffffffe, 0x2, 0x7, 0xffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x1e8, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffff8c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e20, @local}}, 0x7ff, 0xffffffff, 0x5fb, 0x10, 0x5010}, &(0x7f0000000940)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000980)={r5, 0x8}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048005) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtaction={0x1c4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1b0, 0x1, [@m_csum={0x74, 0x8, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xe8}}}]}, {0x2c, 0x6, "e6b6a6bf222b2d6fde3773b3834c1bc20d5211da1e049059604f2d8755e3afefba93c0f126abf02e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x10c, 0x16, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1010000, 0x3, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2963}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0xb7, 0x6, "32bda74c1a26d7ffffbf6db7dac03e8cd6c73300702dab3ab12fa9064c76f97d5a95712820d3098840202f38ebb37c60cf8b211ca8254b56b302afdb1aeb708ada3f34d9c8898a079a2a97310b927d613399f66072cf0fe985d8864cc4f48922aa8e1237ebe558c6e018a0a84dd897c6b2bca0f86451718684393ea115984b967b3ca9f0d4dc486658abbb26e7904dbdc352bbd732d7ecdf7201a51115cd69a3bea896de3ef702b4b183cb95d496705aca7977"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x1c4}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000009c0)={r5, 0x2}, 0x8) timer_create(0x9, 0x0, &(0x7f0000000400)) 4.667327468s ago: executing program 4 (id=1276): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x1e8, 0x2f8, 0x3e0, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xffffffffffffff8c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e20, @local}}, 0x7ff, 0xffffffff, 0x5fb, 0x10, 0x5010}, &(0x7f0000000940)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000980)={r5, 0x8}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x4c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1b}, {0x0, 0xd}, {0x6, 0x1}}, [{0x8, 0xb, 0xf}, {0x8, 0xb, 0x71}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x4048005) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtaction={0x1c4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1b0, 0x1, [@m_csum={0x74, 0x8, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xe8}}}]}, {0x2c, 0x6, "e6b6a6bf222b2d6fde3773b3834c1bc20d5211da1e049059604f2d8755e3afefba93c0f126abf02e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x10c, 0x16, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x1010000, 0x3, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2963}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0xb7, 0x6, "32bda74c1a26d7ffffbf6db7dac03e8cd6c73300702dab3ab12fa9064c76f97d5a95712820d3098840202f38ebb37c60cf8b211ca8254b56b302afdb1aeb708ada3f34d9c8898a079a2a97310b927d613399f66072cf0fe985d8864cc4f48922aa8e1237ebe558c6e018a0a84dd897c6b2bca0f86451718684393ea115984b967b3ca9f0d4dc486658abbb26e7904dbdc352bbd732d7ecdf7201a51115cd69a3bea896de3ef702b4b183cb95d496705aca7977"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x1c4}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f00000009c0)={r5, 0x2}, 0x8) 3.587249528s ago: executing program 1 (id=1277): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) setuid(0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde']}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 3.467577948s ago: executing program 0 (id=1278): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x9, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r1}, 0x18) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'llr\xf0'}, {0x20, 'xx\xe8\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x111) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_ts_info}) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x40000002}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x23}], 0x1}, 0x0) 3.399735385s ago: executing program 4 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000001c80)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0xffffffffffffffdf) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r5}, 0x38) unshare(0x8000600) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000000000010000000000000200010001"], 0x70}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) 1.237697695s ago: executing program 0 (id=1280): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x0, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x4, 0x8000000, 0x5]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 628.430076ms ago: executing program 0 (id=1281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001) 606.889605ms ago: executing program 1 (id=1282): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)}, 0x7}], 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) 459.619996ms ago: executing program 1 (id=1283): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syncfs(r1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0xa, 0x12e4f8, 0x334e8d}) 206.498651ms ago: executing program 4 (id=1284): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 187.603894ms ago: executing program 0 (id=1285): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x68c400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002f000000180001"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 70.073098ms ago: executing program 4 (id=1286): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x4f27, 0x0, 0x8, 0x6, 0x5, 0x5, 0x9, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x8401, 0x6, 0x5da31c5d, 0x6, 0x101, 0x0, 0x892, 0xa418, 0x40000001, 0x5, 0xcaa3, 0x8, 0x20001e5b, 0x0, 0xe66, 0x4, 0x8, 0x5, 0x0, 0xfffffff8]}) syz_pidfd_open(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) (fail_nth: 1) 0s ago: executing program 0 (id=1287): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x9, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r1}, 0x18) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'llr\xf0'}, {0x20, 'xx\xe8\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x111) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_ts_info}) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x40000002}) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x23}], 0x1}, 0x0) kernel console output (not intermixed with test programs): rocess `syz.1.495'. [ 336.536789][ T7928] 0·: renamed from hsr0 (while UP) [ 336.932670][ T7944] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 336.939438][ T7944] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 336.946381][ T7944] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 336.954561][ T7944] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 336.962063][ T7944] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 336.968819][ T7944] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 336.976015][ T7944] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 339.031516][ T7928] 0·: entered allmulticast mode [ 339.036479][ T7928] hsr_slave_0: entered allmulticast mode [ 339.042112][ T7928] hsr_slave_1: entered allmulticast mode [ 339.048249][ T7928] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 339.388096][ T7950] netlink: 5 bytes leftover after parsing attributes in process `syz.4.503'. [ 339.431065][ T7950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.575678][ T7956] FAULT_INJECTION: forcing a failure. [ 339.575678][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 339.588759][ T7956] CPU: 1 UID: 0 PID: 7956 Comm: syz.5.502 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 339.588788][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.588802][ T7956] Call Trace: [ 339.588810][ T7956] [ 339.588820][ T7956] dump_stack_lvl+0x189/0x250 [ 339.588850][ T7956] ? __pfx____ratelimit+0x10/0x10 [ 339.588874][ T7956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.588899][ T7956] ? __pfx__printk+0x10/0x10 [ 339.588944][ T7956] should_fail_ex+0x414/0x560 [ 339.588974][ T7956] should_failslab+0xa8/0x100 [ 339.589001][ T7956] __kmalloc_cache_noprof+0x70/0x3d0 [ 339.589023][ T7956] ? sctp_add_bind_addr+0x8c/0x370 [ 339.589056][ T7956] sctp_add_bind_addr+0x8c/0x370 [ 339.589087][ T7956] sctp_copy_local_addr_list+0x30b/0x4e0 [ 339.589119][ T7956] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 339.589146][ T7956] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 339.589175][ T7956] ? sctp_v6_is_any+0x64/0x80 [ 339.589206][ T7956] ? sctp_copy_one_addr+0x93/0x360 [ 339.589237][ T7956] sctp_bind_addr_copy+0xb3/0x3c0 [ 339.589265][ T7956] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 339.589293][ T7956] sctp_connect_new_asoc+0x2e0/0x690 [ 339.589331][ T7956] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 339.589366][ T7956] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 339.589399][ T7956] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 339.589430][ T7956] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 339.589465][ T7956] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 339.589510][ T7956] __sctp_connect+0x5ba/0xd50 [ 339.589556][ T7956] ? __pfx___sctp_connect+0x10/0x10 [ 339.589601][ T7956] sctp_inet_connect+0x12e/0x1e0 [ 339.589635][ T7956] __sys_connect+0x316/0x440 [ 339.589666][ T7956] ? __pfx___schedule+0x10/0x10 [ 339.589688][ T7956] ? __pfx___sys_connect+0x10/0x10 [ 339.589746][ T7956] __x64_sys_connect+0x7a/0x90 [ 339.589779][ T7956] do_syscall_64+0xfa/0x3b0 [ 339.589805][ T7956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.589827][ T7956] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 339.589848][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 339.589876][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.589898][ T7956] RIP: 0033:0x7fbd0c18ebe9 [ 339.589917][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.589937][ T7956] RSP: 002b:00007fbd0d073038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 339.589960][ T7956] RAX: ffffffffffffffda RBX: 00007fbd0c3b6090 RCX: 00007fbd0c18ebe9 [ 339.589976][ T7956] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 339.589991][ T7956] RBP: 00007fbd0d073090 R08: 0000000000000000 R09: 0000000000000000 [ 339.590005][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.590018][ T7956] R13: 00007fbd0c3b6128 R14: 00007fbd0c3b6090 R15: 00007ffcffce7b58 [ 339.590053][ T7956] [ 341.818005][ T7971] fuse: Unknown parameter '.' [ 342.236961][ T7983] gtp0: entered promiscuous mode [ 342.452375][ T5947] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 343.323185][ T30] audit: type=1326 audit(1755591889.837:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7994 comm="syz.3.515" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd95a38ebe9 code=0x0 [ 343.404959][ T5947] usb 2-1: config 252 has an invalid interface number: 191 but max is 0 [ 343.418203][ T5947] usb 2-1: config 252 has no interface number 0 [ 343.452291][ T5947] usb 2-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f [ 343.695538][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.934769][ T5947] usb 2-1: Product: syz [ 343.934790][ T5947] usb 2-1: Manufacturer: syz [ 343.934803][ T5947] usb 2-1: SerialNumber: syz [ 344.103888][ T5947] usb-storage 2-1:252.191: USB Mass Storage device detected [ 344.131364][ T5947] usb-storage 2-1:252.191: Quirks match for vid 054c pid 0069: 1 [ 344.151768][ T8008] Set syz0 is full, maxelem 0 reached [ 344.608210][ T8015] affs: No valid root block on device nullb0 [ 344.726132][ T8022] affs: No valid root block on device nullb0 [ 346.406224][ T8032] cgroup: release_agent respecified [ 347.892265][ T9] usb 2-1: USB disconnect, device number 5 [ 348.210407][ T8044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.526'. [ 350.934269][ T8076] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 350.943663][ T8076] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 350.951447][ T8076] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 350.958556][ T8076] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 350.966323][ T8076] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 350.973026][ T8076] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 350.980866][ T8076] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 351.319416][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 352.151109][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 352.215699][ T24] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 352.229964][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.885877][ T24] usb 1-1: config 0 descriptor?? [ 353.064970][ T8095] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 353.619568][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 353.662684][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 353.761559][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.539'. [ 353.763337][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 353.815498][ T24] usb 1-1: media controller created [ 354.049791][ T8104] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 354.057034][ T8104] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 354.064184][ T8104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 354.071111][ T8104] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 354.079135][ T8104] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 354.086500][ T8104] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 354.093473][ T8104] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 355.343532][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.624671][ T8114] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 355.631240][ T8114] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 355.637767][ T8114] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 355.644331][ T8114] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 355.651465][ T8114] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 355.657932][ T8114] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 355.664769][ T8114] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 355.770491][ T30] audit: type=1804 audit(1755591902.269:5): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.545" name="/newroot/139/file0" dev="tmpfs" ino=813 res=1 errno=0 [ 355.961727][ T8124] overlay: Unknown parameter 'measure' [ 356.452564][ T8080] delete_channel: no stack [ 356.459635][ T24] az6027: usb out operation failed. (-71) [ 356.466081][ T24] az6027: usb out operation failed. (-71) [ 356.472008][ T24] stb0899_attach: Driver disabled by Kconfig [ 356.507091][ T24] az6027: no front-end attached [ 356.507091][ T24] [ 356.529083][ T24] az6027: usb out operation failed. (-71) [ 356.546583][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 356.550732][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 356.580270][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 356.758855][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 356.765933][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 356.792311][ T24] usb 1-1: USB disconnect, device number 6 [ 357.045293][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 357.473135][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 357.588710][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 357.644061][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.694286][ T8137] FAULT_INJECTION: forcing a failure. [ 357.694286][ T8137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.715886][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.725924][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.734396][ T8137] CPU: 0 UID: 0 PID: 8137 Comm: syz.4.549 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 357.734421][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.734433][ T8137] Call Trace: [ 357.734441][ T8137] [ 357.734449][ T8137] dump_stack_lvl+0x189/0x250 [ 357.734478][ T8137] ? __pfx____ratelimit+0x10/0x10 [ 357.734500][ T8137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.734522][ T8137] ? __pfx__printk+0x10/0x10 [ 357.734559][ T8137] should_fail_ex+0x414/0x560 [ 357.734584][ T8137] _copy_to_user+0x31/0xb0 [ 357.734614][ T8137] simple_read_from_buffer+0xe1/0x170 [ 357.734640][ T8137] proc_fail_nth_read+0x1df/0x250 [ 357.734668][ T8137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.734694][ T8137] ? rw_verify_area+0x258/0x650 [ 357.734724][ T8137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.734749][ T8137] vfs_read+0x200/0x980 [ 357.734784][ T8137] ? __pfx___mutex_lock+0x10/0x10 [ 357.734824][ T8137] ? __pfx_vfs_read+0x10/0x10 [ 357.734874][ T8137] ? __fget_files+0x2a/0x420 [ 357.734900][ T8137] ? __fget_files+0x3a0/0x420 [ 357.734920][ T8137] ? __fget_files+0x2a/0x420 [ 357.734950][ T8137] ksys_read+0x145/0x250 [ 357.734970][ T8137] ? __pfx_ksys_read+0x10/0x10 [ 357.734992][ T8137] ? do_syscall_64+0xbe/0x3b0 [ 357.735017][ T8137] do_syscall_64+0xfa/0x3b0 [ 357.735053][ T8137] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.735074][ T8137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.735094][ T8137] ? clear_bhb_loop+0x60/0xb0 [ 357.735118][ T8137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.735137][ T8137] RIP: 0033:0x7fc3f018d5fc [ 357.735155][ T8137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 357.735172][ T8137] RSP: 002b:00007fc3f0ff2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.735193][ T8137] RAX: ffffffffffffffda RBX: 00007fc3f03b5fa0 RCX: 00007fc3f018d5fc [ 357.735208][ T8137] RDX: 000000000000000f RSI: 00007fc3f0ff20a0 RDI: 0000000000000006 [ 357.735220][ T8137] RBP: 00007fc3f0ff2090 R08: 0000000000000000 R09: 0000000000000000 [ 357.735233][ T8137] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 357.735244][ T8137] R13: 00007fc3f03b6038 R14: 00007fc3f03b5fa0 R15: 00007ffc0a254438 [ 357.735276][ T8137] [ 357.993619][ T9] usb 6-1: config 0 descriptor?? [ 357.993807][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 358.038303][ T8122] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 358.941193][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 358.947300][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 359.019000][ T9] usb 6-1: USB disconnect, device number 3 [ 360.114926][ T8153] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 360.210396][ T8153] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 360.216969][ T8153] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 360.247749][ T8156] netlink: 'syz.3.556': attribute type 39 has an invalid length. [ 360.324656][ T8153] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 361.230387][ T8167] loop9: detected capacity change from 0 to 7 [ 361.248763][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.257827][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.266204][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.274520][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.283629][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.294076][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.334070][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.343174][ T8167] ldm_validate_partition_table(): Disk read failed. [ 361.352545][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.369065][ T6749] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 361.496121][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.513068][ T8167] Buffer I/O error on dev loop9, logical block 0, async page read [ 361.524496][ T8167] Dev loop9: unable to read RDB block 0 [ 361.532127][ T8167] loop9: unable to read partition table [ 361.538055][ T8167] loop9: partition table beyond EOD, truncated [ 361.544397][ T8167] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 361.544397][ T8167] ) failed (rc=-5) [ 361.682143][ T8172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.972772][ T8153] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 363.280837][ T6749] usb 4-1: Using ep0 maxpacket: 8 [ 363.282176][ T8153] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 363.356006][ T8153] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 364.899859][ T978] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 366.109435][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 366.121656][ T978] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 366.130102][ T978] usb 5-1: config 0 has no interface number 0 [ 366.136695][ T978] usb 5-1: config 0 interface 89 has no altsetting 0 [ 367.122836][ T978] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 367.148849][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.350378][ T978] usb 5-1: Product: syz [ 367.355095][ T978] usb 5-1: Manufacturer: syz [ 367.361134][ T978] usb 5-1: SerialNumber: syz [ 367.371701][ T978] usb 5-1: config 0 descriptor?? [ 367.398816][ T978] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 367.418370][ T978] em28xx 5-1:0.89: Video interface 89 found: bulk [ 367.600601][ T6749] usb 4-1: device descriptor read/all, error -71 [ 367.725144][ T8187] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 367.732313][ T8187] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 367.739544][ T8187] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 367.746670][ T8187] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 367.754485][ T8187] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 367.761294][ T8187] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 368.119713][ T8187] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 368.390628][ T978] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 368.550792][ T978] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 368.574374][ T8193] netlink: 'syz.1.569': attribute type 39 has an invalid length. [ 368.592503][ T978] em28xx 5-1:0.89: board has no eeprom [ 368.699351][ T978] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 368.738203][ T978] em28xx 5-1:0.89: analog set to bulk mode. [ 368.760118][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 368.968496][ T8207] trusted_key: encrypted_key: insufficient parameters specified [ 368.982995][ T5925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 369.043806][ T5947] em28xx 5-1:0.89: Registering V4L2 extension [ 369.055018][ T8200] warning: `syz.5.570' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 369.249405][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 369.254410][ T978] usb 5-1: USB disconnect, device number 9 [ 369.277460][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 369.320428][ T5925] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 369.344829][ T978] em28xx 5-1:0.89: Disconnecting em28xx [ 369.803638][ T5947] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 369.811482][ T5925] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 369.833987][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.857768][ T5925] usb 2-1: Product: syz [ 369.914425][ T5947] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 369.915432][ T5925] usb 2-1: Manufacturer: syz [ 369.927599][ T5947] em28xx 5-1:0.89: No AC97 audio processor [ 370.041481][ T5925] usb 2-1: SerialNumber: syz [ 370.065513][ T5947] usb 5-1: Decoder not found [ 370.089501][ T5925] usb 2-1: config 0 descriptor?? [ 370.101241][ T5947] em28xx 5-1:0.89: failed to create media graph [ 370.145972][ T5947] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 370.897893][ T8219] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.913717][ T5947] em28xx 5-1:0.89: Registering snapshot button... [ 370.965459][ T8219] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 371.024022][ T5947] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input9 [ 371.047938][ T8219] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 371.096073][ T8219] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 371.137464][ T5947] em28xx 5-1:0.89: Remote control support is not available for this card. [ 371.147402][ T8219] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 371.200832][ T978] em28xx 5-1:0.89: Closing input extension [ 371.276627][ T978] em28xx 5-1:0.89: Deregistering snapshot button [ 371.284342][ T8219] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 371.353019][ T8219] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 371.446917][ T978] em28xx 5-1:0.89: Freeing device [ 371.457919][ T5925] usb 2-1: USB disconnect, device number 6 [ 371.738957][ T5973] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 372.079698][ T8228] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 372.086257][ T8228] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 372.092883][ T8228] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 372.102222][ T8228] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 372.109434][ T8228] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 372.115913][ T8228] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 372.122685][ T8228] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 372.268751][ T5973] usb 6-1: Using ep0 maxpacket: 32 [ 372.275873][ T5973] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.288283][ T5973] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 372.298655][ T5973] usb 6-1: config 1 has no interface number 1 [ 372.322204][ T5973] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.333443][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.342146][ T5973] usb 6-1: Product: syz [ 372.346473][ T5973] usb 6-1: Manufacturer: syz [ 372.351957][ T5973] usb 6-1: SerialNumber: syz [ 372.437159][ T8230] netlink: 'syz.1.576': attribute type 39 has an invalid length. [ 372.684511][ T5973] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 372.694496][ T5973] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 372.703193][ T5973] usb 6-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 372.710589][ T5973] usb 6-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 372.835521][ T5925] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 373.371048][ T978] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.506716][ T5973] usb 6-1: USB disconnect, device number 4 [ 373.560218][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.598217][ T6607] udevd[6607]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.651502][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.698696][ T978] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 373.823736][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.838635][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 373.849650][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 373.862504][ T5925] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 374.562041][ T978] usb 1-1: config 0 descriptor?? [ 374.630012][ T5925] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 374.712618][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.746917][ T5925] usb 2-1: Product: syz [ 374.756090][ T5925] usb 2-1: Manufacturer: syz [ 374.757780][ T8249] netlink: 'syz.5.581': attribute type 10 has an invalid length. [ 374.764557][ T5925] usb 2-1: SerialNumber: syz [ 374.807498][ T5925] usb 2-1: config 0 descriptor?? [ 374.842376][ T8249] veth0_vlan: left promiscuous mode [ 374.949960][ T8249] veth0_vlan: entered promiscuous mode [ 375.011713][ T978] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 6/7 [ 375.028087][ T978] arvo 0003:1E7D:30D4.0003: parse failed [ 375.036554][ T978] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 375.062263][ T8249] team0: Device veth0_vlan failed to register rx_handler [ 375.157643][ T8249] syz.5.581 (8249) used greatest stack depth: 19288 bytes left [ 375.175581][ T5925] usb 2-1: USB disconnect, device number 7 [ 375.821971][ T8257] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 375.868625][ T8257] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 375.926162][ T8257] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 375.957892][ T8257] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 375.987352][ T8257] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 376.160670][ T8257] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 376.174783][ T8257] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 378.599196][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.605922][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.704500][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.586'. [ 378.760445][ T978] usb 1-1: USB disconnect, device number 7 [ 379.170971][ T8275] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 379.177951][ T8275] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 379.184972][ T8275] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 379.192062][ T8275] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 379.199369][ T8275] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 379.206004][ T8275] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 379.213194][ T8275] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 380.947956][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 380.955093][ T8284] qnx4: no qnx4 filesystem (no root dir). [ 381.177952][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 381.199874][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.342379][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 381.518302][ T24] usb 4-1: config 1 has no interface number 1 [ 381.531826][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.574916][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.605050][ T24] usb 4-1: Product: syz [ 381.629472][ T24] usb 4-1: Manufacturer: syz [ 381.655672][ T8291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 381.849895][ T24] usb 4-1: SerialNumber: syz [ 382.649238][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 382.657130][ T24] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 382.766762][ T24] usb 4-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 382.801735][ T24] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 383.356574][ T8312] loop9: detected capacity change from 0 to 7 [ 383.371346][ T8312] buffer_io_error: 9 callbacks suppressed [ 383.377233][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.386894][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.396765][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.405970][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.415376][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.424724][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.433723][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.442928][ T8312] ldm_validate_partition_table(): Disk read failed. [ 383.450202][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.459794][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.469721][ T8312] Buffer I/O error on dev loop9, logical block 0, async page read [ 383.479637][ T8312] Dev loop9: unable to read RDB block 0 [ 383.488667][ T8312] loop9: unable to read partition table [ 383.496758][ T8312] loop9: partition table beyond EOD, truncated [ 383.503173][ T8312] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 383.503173][ T8312] ) failed (rc=-5) [ 383.887347][ T8306] netlink: 'syz.0.595': attribute type 39 has an invalid length. [ 383.989157][ T24] usb 4-1: USB disconnect, device number 10 [ 384.218667][ T978] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 384.335768][ T6607] udevd[6607]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.507627][ T978] usb 1-1: Using ep0 maxpacket: 8 [ 384.675962][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 384.960360][ T978] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 385.016214][ T978] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 385.101981][ T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.177943][ T978] usb 1-1: Product: syz [ 385.182264][ T978] usb 1-1: Manufacturer: syz [ 385.212864][ T978] usb 1-1: SerialNumber: syz [ 385.229663][ T978] usb 1-1: config 0 descriptor?? [ 385.617639][ T978] usb 1-1: USB disconnect, device number 8 [ 385.650951][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 386.508989][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 386.515205][ T10] usb 4-1: too many configurations: 60, using maximum allowed: 8 [ 386.696988][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 386.804129][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 386.828359][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 386.854231][ T10] usb 4-1: Product: syz [ 386.868275][ T10] usb 4-1: Manufacturer: syz [ 386.883674][ T10] usb 4-1: SerialNumber: syz [ 386.933042][ T10] usb 4-1: config 0 descriptor?? [ 386.966340][ T10] pwc: Philips SPC 880NC USB webcam detected. [ 387.106882][ C0] hrtimer: interrupt took 55209 ns [ 387.691206][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 387.725968][ T8335] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 387.780167][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.816062][ T8335] CIFS mount error: No usable UNC path provided in device string! [ 387.816062][ T8335] [ 387.841451][ T5925] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 387.842783][ T8335] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 387.875824][ T5925] usb 2-1: config 1 has no interface number 1 [ 387.892748][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.010055][ T8375] pvfs2: Unknown parameter 'Šmb3' [ 388.012362][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.025334][ T5925] usb 2-1: Product: syz [ 388.034486][ T5925] usb 2-1: Manufacturer: syz [ 388.039368][ T5925] usb 2-1: SerialNumber: syz [ 388.196248][ T8377] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 388.321566][ T8374] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 388.329746][ T8374] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 388.337546][ T8374] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 388.345060][ T8374] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 388.352995][ T8374] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 388.360013][ T8374] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 388.527963][ T8374] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 388.931708][ T10] pwc: Warning: more than 1 configuration available. [ 389.392049][ T10] pwc: Failed to set LED on/off time (-71) [ 389.398952][ T10] pwc: send_video_command error -71 [ 389.405720][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 389.427773][ T10] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 389.595396][ T5925] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 389.646032][ T10] usb 4-1: USB disconnect, device number 11 [ 389.663434][ T5925] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 389.735000][ T5925] usb 2-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 389.782110][ T5925] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 389.885599][ T5925] usb 2-1: USB disconnect, device number 8 [ 389.959373][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.427004][ T8396] IPv6: NLM_F_REPLACE set, but no existing node found! [ 391.731583][ T8409] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 391.773374][ T8409] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 391.793943][ T8409] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 391.829353][ T8409] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 391.871836][ T8409] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 391.897622][ T8409] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 391.979929][ T8409] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 393.037779][ T8422] Cannot find add_set index 0 as target [ 393.192809][ T30] audit: type=1326 audit(1755591939.703:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8421 comm="syz.0.624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbf8d8ebe9 code=0x0 [ 393.295666][ T8428] FAULT_INJECTION: forcing a failure. [ 393.295666][ T8428] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.312453][ T8428] CPU: 1 UID: 0 PID: 8428 Comm: syz.0.624 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 393.312495][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.312507][ T8428] Call Trace: [ 393.312514][ T8428] [ 393.312523][ T8428] dump_stack_lvl+0x189/0x250 [ 393.312552][ T8428] ? __pfx____ratelimit+0x10/0x10 [ 393.312574][ T8428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.312596][ T8428] ? __pfx__printk+0x10/0x10 [ 393.312631][ T8428] ? fs_reclaim_acquire+0x7d/0x100 [ 393.312664][ T8428] should_fail_ex+0x414/0x560 [ 393.312690][ T8428] prepare_alloc_pages+0x213/0x610 [ 393.312724][ T8428] __alloc_frozen_pages_noprof+0x123/0x370 [ 393.312757][ T8428] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.312790][ T8428] ? policy_nodemask+0x27c/0x720 [ 393.312809][ T8428] ? llc_ui_sendmsg+0xa82/0xdd0 [ 393.312840][ T8428] ? ____sys_sendmsg+0x52d/0x830 [ 393.312871][ T8428] ? ___sys_sendmsg+0x21f/0x2a0 [ 393.312905][ T8428] alloc_pages_mpol+0x232/0x4a0 [ 393.312935][ T8428] vma_alloc_folio_noprof+0xe4/0x200 [ 393.312962][ T8428] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 393.313000][ T8428] folio_prealloc+0x30/0x180 [ 393.313026][ T8428] do_wp_page+0x1231/0x5800 [ 393.313080][ T8428] ? __pfx_do_wp_page+0x10/0x10 [ 393.313109][ T8428] ? do_raw_spin_lock+0x121/0x290 [ 393.313146][ T8428] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 393.313185][ T8428] __handle_mm_fault+0x1144/0x5620 [ 393.313240][ T8428] ? __pfx___handle_mm_fault+0x10/0x10 [ 393.313295][ T8428] ? find_vma+0xe7/0x160 [ 393.313315][ T8428] ? __pfx_find_vma+0x10/0x10 [ 393.313338][ T8428] handle_mm_fault+0x2d5/0x7f0 [ 393.313382][ T8428] do_user_addr_fault+0x764/0x1390 [ 393.313433][ T8428] exc_page_fault+0x76/0xf0 [ 393.313459][ T8428] asm_exc_page_fault+0x26/0x30 [ 393.313480][ T8428] RIP: 0010:__put_user_4+0xd/0x20 [ 393.313503][ T8428] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 393.313522][ T8428] RSP: 0018:ffffc90003a3fc98 EFLAGS: 00050206 [ 393.313541][ T8428] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000013b8 [ 393.313555][ T8428] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 393.313569][ T8428] RBP: ffffc90003a3feb0 R08: 0000000000000000 R09: ffffffff8208a560 [ 393.313583][ T8428] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 0000200000001380 [ 393.313598][ T8428] R13: 0000000000040000 R14: 0000200000001380 R15: 0000000000000000 [ 393.313628][ T8428] ? __might_fault+0xb0/0x130 [ 393.313657][ T8428] __sys_sendmmsg+0x25f/0x430 [ 393.313697][ T8428] ? __pfx___sys_sendmmsg+0x10/0x10 [ 393.313728][ T8428] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 393.313782][ T8428] ? ksys_write+0x22a/0x250 [ 393.313806][ T8428] ? __pfx_ksys_write+0x10/0x10 [ 393.313823][ T8428] ? rcu_is_watching+0x15/0xb0 [ 393.313853][ T8428] __x64_sys_sendmmsg+0xa0/0xc0 [ 393.313888][ T8428] do_syscall_64+0xfa/0x3b0 [ 393.313911][ T8428] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.313931][ T8428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.313952][ T8428] ? clear_bhb_loop+0x60/0xb0 [ 393.313978][ T8428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.313998][ T8428] RIP: 0033:0x7fbbf8d8ebe9 [ 393.314016][ T8428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.314034][ T8428] RSP: 002b:00007fbbf9c14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 393.314055][ T8428] RAX: ffffffffffffffda RBX: 00007fbbf8fb6180 RCX: 00007fbbf8d8ebe9 [ 393.314069][ T8428] RDX: 03fffffffffffeed RSI: 0000200000001380 RDI: 0000000000000004 [ 393.314084][ T8428] RBP: 00007fbbf9c14090 R08: 0000000000000000 R09: 0000000000000000 [ 393.314097][ T8428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.314109][ T8428] R13: 00007fbbf8fb6218 R14: 00007fbbf8fb6180 R15: 00007ffea6bb0c28 [ 393.314143][ T8428] [ 394.357398][ T978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 394.616027][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 394.627870][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.668442][ T978] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 394.812056][ T978] usb 2-1: config 1 has no interface number 1 [ 394.838979][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.853701][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.894970][ T978] usb 2-1: Product: syz [ 394.933524][ T978] usb 2-1: Manufacturer: syz [ 394.966193][ T978] usb 2-1: SerialNumber: syz [ 395.665779][ T978] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 395.691757][ T978] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 395.754695][ T978] usb 2-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 395.797070][ T978] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 395.924125][ T978] usb 2-1: USB disconnect, device number 9 [ 396.057960][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.460190][ T8459] netlink: 56 bytes leftover after parsing attributes in process `syz.0.634'. [ 398.712268][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.636'. [ 398.849551][ T8467] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 398.856436][ T8467] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 398.863558][ T8467] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 398.870770][ T8467] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 398.878206][ T8467] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 398.885147][ T8467] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 398.895731][ T8467] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 401.118561][ T8471] xt_TPROXY: Can be used only with -p tcp or -p udp [ 403.045438][ T8497] Cannot find add_set index 0 as target [ 403.948146][ T8506] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 405.495182][ T8515] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 405.565884][ T8516] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 407.344521][ T5925] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 407.454495][ T925] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 407.595817][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 407.606634][ T5925] usb 2-1: device descriptor read/all, error -71 [ 407.676557][ T925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 407.688362][ T925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 407.725762][ T925] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 407.747187][ T925] usb 4-1: config 1 interface 0 has no altsetting 1 [ 407.760824][ T925] usb 4-1: string descriptor 0 read error: -71 [ 407.770748][ T925] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 407.781074][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.870710][ T925] usb 4-1: can't set config #1, error -71 [ 407.893668][ T925] usb 4-1: USB disconnect, device number 12 [ 407.968956][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 408.002032][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.655'. [ 408.048988][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'. [ 408.688452][ T8540] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 410.668381][ T8556] syz.3.661 uses obsolete (PF_INET,SOCK_PACKET) [ 410.722891][ T8560] CIFS: VFS: Malformed UNC in devname [ 412.867302][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 412.902907][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 413.601005][ T8592] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 414.133186][ T8596] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 417.522955][ T8588] syz.0.670 (8588): drop_caches: 2 [ 418.279153][ T8612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 418.853328][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 420.094421][ T24] usb 2-1: device descriptor read/64, error -71 [ 420.173184][ T978] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 420.353099][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 420.424439][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 420.503365][ T978] usb 6-1: unable to get BOS descriptor or descriptor too short [ 420.574623][ T978] usb 6-1: config 4 has an invalid interface number: 146 but max is 0 [ 420.606685][ T978] usb 6-1: config 4 has no interface number 0 [ 420.627432][ T24] usb 2-1: device descriptor read/64, error -71 [ 420.634480][ T978] usb 6-1: config 4 interface 146 has no altsetting 0 [ 420.637735][ T978] usb 6-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=af.79 [ 420.874090][ T24] usb usb2-port1: attempt power cycle [ 421.209735][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.252726][ T978] usb 6-1: Product: syz [ 421.269266][ T978] usb 6-1: Manufacturer: syz [ 421.277376][ T978] usb 6-1: SerialNumber: syz [ 421.305842][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 421.559198][ T978] comedi comedi5: could not set alternate setting 3 in high speed [ 421.600698][ T978] usbduxsigma 6-1:4.146: driver 'usbduxsigma' failed to auto-configure device. [ 421.654692][ T978] usbduxsigma 6-1:4.146: probe with driver usbduxsigma failed with error -71 [ 421.888690][ T978] usb 6-1: USB disconnect, device number 5 [ 423.129699][ T8651] 9pnet_fd: Insufficient options for proto=fd [ 423.423883][ T8650] mkiss: ax0: crc mode is auto. [ 423.556248][ T8658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.518506][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 427.403004][ T5925] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 427.926178][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 428.610822][ T5925] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.626273][ T5925] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 428.662337][ T5925] usb 6-1: config 1 has no interface number 1 [ 428.774625][ T5925] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.989531][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.088084][ T5925] usb 6-1: Product: syz [ 429.092949][ T5925] usb 6-1: Manufacturer: syz [ 429.097665][ T5925] usb 6-1: SerialNumber: syz [ 429.374653][ T5925] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 429.422480][ T5925] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 429.475894][ T5925] usb 6-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 429.508374][ T5925] usb 6-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 429.760489][ T5925] usb 6-1: USB disconnect, device number 6 [ 429.912928][ T8730] cgroup: release_agent respecified [ 430.677832][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.755974][ T8735] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 437.541192][ T6749] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 438.113293][ T5925] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 438.202592][ T6749] usb 1-1: config 0 interface 0 altsetting 227 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.250144][ T6749] usb 1-1: config 0 interface 0 altsetting 227 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 438.270849][ T925] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 438.283461][ T6749] usb 1-1: config 0 interface 0 has no altsetting 0 [ 438.291219][ T6749] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 438.300495][ T6749] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.310601][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.327591][ T5925] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 438.361675][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.380333][ T6749] usb 1-1: config 0 descriptor?? [ 438.404225][ T8772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 438.440826][ T925] usb 4-1: Using ep0 maxpacket: 32 [ 438.451547][ T5925] usb 5-1: config 0 descriptor?? [ 438.473854][ T925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.491199][ T6749] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 438.506462][ T925] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 438.531424][ T925] usb 4-1: config 1 has no interface number 1 [ 438.553760][ T925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.565848][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.586132][ T925] usb 4-1: Product: syz [ 438.596397][ T925] usb 4-1: Manufacturer: syz [ 438.602293][ T925] usb 4-1: SerialNumber: syz [ 438.637451][ T5191] bcm5974 1-1:0.0: could not read from device [ 438.708716][ T5191] bcm5974 1-1:0.0: could not read from device [ 438.715924][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.769374][ T5191] bcm5974 1-1:0.0: could not read from device [ 438.779260][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.789193][ T6749] usb 1-1: USB disconnect, device number 9 [ 438.965524][ T925] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 438.988515][ T925] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 438.997336][ T925] usb 4-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 439.004703][ T925] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 439.177037][ T925] usb 4-1: USB disconnect, device number 13 [ 439.243151][ T5925] itetech 0003:258A:6A88.0004: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 439.350526][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.412612][ T978] usb 5-1: USB disconnect, device number 10 [ 439.595502][ T8779] fido_id[8779]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 439.615787][ T8785] netlink: 264 bytes leftover after parsing attributes in process `syz.5.718'. [ 440.049374][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.061115][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.865836][ T5156] Bluetooth: hci5: command 0x0405 tx timeout [ 442.491044][ T8863] Cannot find add_set index 0 as target [ 443.150819][ T925] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 443.540747][ T978] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 443.750212][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 443.757462][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.775872][ T978] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 443.868220][ T978] usb 4-1: config 1 has no interface number 1 [ 443.887511][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.909685][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.266176][ T978] usb 4-1: Product: syz [ 444.276172][ T978] usb 4-1: Manufacturer: syz [ 444.290762][ T978] usb 4-1: SerialNumber: syz [ 444.334242][ T925] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 444.356252][ T925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.408771][ T925] usb 5-1: config 0 descriptor?? [ 444.431535][ T925] cp210x 5-1:0.0: cp210x converter detected [ 444.534140][ T978] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 444.546725][ T978] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 444.622990][ T978] usb 4-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 444.636478][ T925] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 444.651794][ T925] cp210x 5-1:0.0: querying part number failed [ 444.667041][ T978] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 444.714185][ T925] usb 5-1: cp210x converter now attached to ttyUSB0 [ 444.783223][ T30] audit: type=1326 audit(1755591991.299:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 444.791625][ T978] usb 4-1: USB disconnect, device number 14 [ 444.856819][ T5828] usb 5-1: USB disconnect, device number 11 [ 444.884124][ T30] audit: type=1326 audit(1755591991.299:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 444.961429][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 444.998237][ T30] audit: type=1326 audit(1755591991.299:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 445.020318][ T5828] cp210x 5-1:0.0: device disconnected [ 445.106457][ T30] audit: type=1326 audit(1755591991.299:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 445.179103][ T30] audit: type=1326 audit(1755591991.299:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 445.268023][ T30] audit: type=1326 audit(1755591991.299:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 445.311731][ T30] audit: type=1326 audit(1755591991.339:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 445.343914][ T30] audit: type=1326 audit(1755591991.339:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 445.536927][ T30] audit: type=1326 audit(1755591991.389:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 445.617167][ T30] audit: type=1326 audit(1755591991.389:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8882 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf8d8ebe9 code=0x7ffc0000 [ 450.020514][ T6749] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 450.028559][ T925] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 450.283819][ T6749] usb 2-1: Using ep0 maxpacket: 32 [ 450.296610][ T925] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.306098][ T6749] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.336759][ T925] usb 5-1: config 0 has no interface number 0 [ 450.623506][ T925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 450.635511][ T6749] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 450.688870][ T6749] usb 2-1: config 1 has no interface number 1 [ 450.695198][ T925] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 450.726928][ T925] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.779439][ T6749] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 450.788591][ T6749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.802232][ T925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.851107][ T6749] usb 2-1: Product: syz [ 450.860757][ T925] usb 5-1: config 0 descriptor?? [ 450.868630][ T8925] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 450.879434][ T6749] usb 2-1: Manufacturer: syz [ 450.884124][ T6749] usb 2-1: SerialNumber: syz [ 450.926630][ T925] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 451.169692][ T6749] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 451.177562][ T6749] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 451.230798][ T10] usb 5-1: USB disconnect, device number 12 [ 451.239297][ T6749] usb 2-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 452.565113][ T6749] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 452.658559][ T6749] usb 2-1: USB disconnect, device number 15 [ 452.741855][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.220613][ T8953] comedi comedi4: bad chanlist[1]=0x00000008 chan=8 range length=2 [ 453.414690][ T8958] FAULT_INJECTION: forcing a failure. [ 453.414690][ T8958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.449568][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: syz.3.751 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 453.449603][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.449617][ T8958] Call Trace: [ 453.449625][ T8958] [ 453.449635][ T8958] dump_stack_lvl+0x189/0x250 [ 453.449664][ T8958] ? __pfx____ratelimit+0x10/0x10 [ 453.449688][ T8958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.449711][ T8958] ? __pfx__printk+0x10/0x10 [ 453.449739][ T8958] ? __might_fault+0xb0/0x130 [ 453.449773][ T8958] should_fail_ex+0x414/0x560 [ 453.449800][ T8958] _copy_from_user+0x2d/0xb0 [ 453.449831][ T8958] __sys_bpf+0x1ed/0x860 [ 453.449865][ T8958] ? __pfx___sys_bpf+0x10/0x10 [ 453.449909][ T8958] ? ksys_write+0x22a/0x250 [ 453.449932][ T8958] ? __pfx_ksys_write+0x10/0x10 [ 453.449949][ T8958] ? rcu_is_watching+0x15/0xb0 [ 453.449997][ T8958] __x64_sys_bpf+0x7c/0x90 [ 453.450027][ T8958] do_syscall_64+0xfa/0x3b0 [ 453.450049][ T8958] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.450071][ T8958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.450093][ T8958] ? clear_bhb_loop+0x60/0xb0 [ 453.450118][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.450138][ T8958] RIP: 0033:0x7fd95a38ebe9 [ 453.450158][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.450176][ T8958] RSP: 002b:00007fd95b270038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 453.450198][ T8958] RAX: ffffffffffffffda RBX: 00007fd95a5b5fa0 RCX: 00007fd95a38ebe9 [ 453.450214][ T8958] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000003 [ 453.450227][ T8958] RBP: 00007fd95b270090 R08: 0000000000000000 R09: 0000000000000000 [ 453.450241][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.450262][ T8958] R13: 00007fd95a5b6038 R14: 00007fd95a5b5fa0 R15: 00007ffc4f672d88 [ 453.450291][ T8958] [ 453.681360][ T8956] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 453.688034][ T8956] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 453.694846][ T8956] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 453.702458][ T8956] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 453.709801][ T8956] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 453.716455][ T8956] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 453.723632][ T8956] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 454.710143][ T8964] netlink: 'syz.1.752': attribute type 23 has an invalid length. [ 455.087659][ T8968] --map-set only usable from mangle table [ 457.009982][ T8978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.756'. [ 457.398687][ T978] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 457.608659][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 457.626139][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.648589][ T978] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 457.685531][ T978] usb 5-1: config 1 has no interface number 1 [ 457.701997][ T978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.711560][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.866361][ T978] usb 5-1: Product: syz [ 457.871495][ T978] usb 5-1: Manufacturer: syz [ 457.876533][ T978] usb 5-1: SerialNumber: syz [ 458.893312][ T978] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 458.912682][ T978] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 458.924709][ T978] usb 5-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 458.942572][ T978] usb 5-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 459.048769][ T978] usb 5-1: USB disconnect, device number 13 [ 459.348056][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.825133][ T9008] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 460.831928][ T9008] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 460.838855][ T9008] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 460.846296][ T9008] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 460.854199][ T9008] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 460.861195][ T9008] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 460.869018][ T9008] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 463.806305][ T9020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.867901][ T978] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 464.044871][ T978] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.065922][ T978] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 464.083327][ T978] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.094479][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.109599][ T9017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.127263][ T978] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.321440][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.960432][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.160117][ T5828] usb 6-1: USB disconnect, device number 7 [ 465.295879][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 465.295898][ T30] audit: type=1326 audit(1755592011.812:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9030 comm="syz.0.772" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbf8d8ebe9 code=0x0 [ 465.407911][ T978] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 465.568039][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 465.585763][ T978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.605420][ T978] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 465.617129][ T978] usb 5-1: config 1 has no interface number 1 [ 465.631520][ T978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.644240][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.661169][ T978] usb 5-1: Product: syz [ 465.665609][ T978] usb 5-1: Manufacturer: syz [ 465.672608][ T978] usb 5-1: SerialNumber: syz [ 466.078028][ T9054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.087979][ T978] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 466.096599][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 466.105847][ T978] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 466.114511][ T978] usb 5-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 466.122238][ T978] usb 5-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 466.163692][ T978] usb 5-1: USB disconnect, device number 14 [ 466.414931][ T9061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.107139][ T9081] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.265314][ T9080] netlink: 'syz.5.784': attribute type 1 has an invalid length. [ 468.273541][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.784'. [ 469.481638][ T9078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.785'. [ 469.491263][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.785'. [ 469.501713][ T9078] netlink: 48 bytes leftover after parsing attributes in process `syz.1.785'. [ 469.894121][ T9088] trusted_key: encrypted_key: insufficient parameters specified [ 470.247078][ T6749] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 470.612829][ T6749] usb 4-1: Using ep0 maxpacket: 32 [ 470.836335][ T6749] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 470.875398][ T6749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.005861][ T6749] usb 4-1: config 0 has no interface number 0 [ 471.026678][ T6749] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 471.042571][ T6749] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 471.119963][ T6749] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 471.146044][ T6749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.165536][ T9097] netlink: 'syz.1.788': attribute type 36 has an invalid length. [ 471.174203][ T6749] usb 4-1: Product: syz [ 471.190829][ T6749] usb 4-1: Manufacturer: syz [ 471.195493][ T6749] usb 4-1: SerialNumber: syz [ 471.245061][ T6749] usb 4-1: config 0 descriptor?? [ 471.287377][ T9086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 471.297991][ T6749] usb-storage 4-1:0.231: USB Mass Storage device detected [ 471.757329][ T5828] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 472.126874][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 472.138311][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.161390][ T5828] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 472.174999][ T5828] usb 2-1: config 1 has no interface number 1 [ 473.036646][ T978] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 473.050275][ T5828] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.096793][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.104948][ T5828] usb 2-1: Product: syz [ 473.168577][ T5828] usb 2-1: Manufacturer: syz [ 473.192768][ T5828] usb 2-1: SerialNumber: syz [ 473.200918][ T10] usb 4-1: USB disconnect, device number 15 [ 473.216793][ T978] usb 1-1: Using ep0 maxpacket: 32 [ 473.275709][ T978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.352861][ T978] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 473.419439][ T978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.593323][ T9127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 473.693463][ T978] usb 1-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 473.703395][ T5828] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 473.712307][ T978] usb 1-1: Product: syz [ 473.716569][ T5828] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 473.725269][ T978] usb 1-1: Manufacturer: syz [ 473.730042][ T978] usb 1-1: SerialNumber: syz [ 473.736043][ T5828] usb 2-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 473.745167][ T5828] usb 2-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 473.842775][ T6749] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 474.196818][ T6749] usb 6-1: Using ep0 maxpacket: 32 [ 474.331323][ T6749] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.373170][ T6749] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 474.415660][ T6749] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.437434][ T6749] usb 6-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 474.454683][ T9111] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 474.489751][ T6749] usb 6-1: Product: syz [ 474.494322][ T6749] usb 6-1: Manufacturer: syz [ 474.521594][ T6749] usb 6-1: SerialNumber: syz [ 474.527769][ T5828] usb 2-1: USB disconnect, device number 16 [ 474.649255][ T9134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.684715][ T9111] capability: warning: `syz.0.792' uses 32-bit capabilities (legacy support in use) [ 474.943273][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.971910][ T9125] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 475.157896][ T978] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 475.164344][ T978] cdc_ncm 1-1:1.0: bind() failure [ 475.195272][ T978] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 475.230191][ T978] cdc_ncm 1-1:1.1: bind() failure [ 475.441350][ T6749] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 475.447995][ T6749] cdc_ncm 6-1:1.0: bind() failure [ 475.453291][ T6749] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 475.458038][ T6749] cdc_ncm 6-1:1.1: bind() failure [ 476.332983][ T978] usb 1-1: USB disconnect, device number 10 [ 476.515776][ T9153] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 476.522477][ T9153] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 476.529485][ T9153] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 476.537245][ T9153] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 476.545694][ T9153] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 476.552479][ T9153] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 476.559599][ T9153] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 478.466294][ T925] usb 6-1: USB disconnect, device number 8 [ 479.410895][ T9161] 9pnet_fd: Insufficient options for proto=fd [ 479.797514][ T978] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 480.175964][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 480.189733][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.201887][ T978] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 480.241055][ T978] usb 4-1: config 1 has no interface number 1 [ 480.278884][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.322796][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.354286][ T978] usb 4-1: Product: syz [ 480.366979][ T978] usb 4-1: Manufacturer: syz [ 480.385908][ T978] usb 4-1: SerialNumber: syz [ 480.454281][ T9179] netlink: 'syz.0.813': attribute type 39 has an invalid length. [ 480.771602][ T978] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 480.793840][ T978] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 480.846854][ T978] usb 4-1: 2:1 : sample bitwidth 71 in over sample bytes 5 [ 480.874847][ T978] usb 4-1: 2:1 : unsupported sample bitwidth 71 in 5 bytes [ 481.200462][ T978] usb 4-1: USB disconnect, device number 16 [ 481.236777][ T9187] netlink: 'syz.4.816': attribute type 23 has an invalid length. [ 481.919843][ T8331] udevd[8331]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.102726][ T9219] comedi comedi0: Minor -2147450880 is invalid! [ 493.573063][ T9264] comedi comedi0: Minor -2147450880 is invalid! [ 494.085145][ T9270] netlink: 28 bytes leftover after parsing attributes in process `syz.5.836'. [ 494.094445][ T9270] netlink: 28 bytes leftover after parsing attributes in process `syz.5.836'. [ 494.975820][ T9274] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 494.982525][ T9274] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 494.991389][ T9274] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 494.998317][ T9274] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 495.005839][ T9274] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 495.012653][ T9274] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 495.020037][ T9274] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 495.980387][ T9277] cgroup: release_agent respecified [ 497.185967][ T9301] netlink: 'syz.3.849': attribute type 39 has an invalid length. [ 497.310199][ T5156] block nbd0: Receive control failed (result -107) [ 497.374120][ T9303] nbd0: detected capacity change from 0 to 63 [ 497.391921][ T9263] block nbd0: Dead connection, failed to find a fallback [ 497.446390][ T9263] block nbd0: shutting down sockets [ 497.456903][ T9263] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 497.500829][ T9263] buffer_io_error: 9 callbacks suppressed [ 497.500871][ T9263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 498.773256][ T9263] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 498.788326][ T9263] Buffer I/O error on dev nbd0, logical block 1, async page read [ 498.797068][ T9263] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 498.806981][ T9263] Buffer I/O error on dev nbd0, logical block 2, async page read [ 498.874869][ T9263] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 499.829519][ T9263] Buffer I/O error on dev nbd0, logical block 3, async page read [ 500.056999][ T9263] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.108414][ T9263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 500.130653][ T9263] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.142338][ T9263] Buffer I/O error on dev nbd0, logical block 1, async page read [ 500.152929][ T9263] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.164063][ T9263] Buffer I/O error on dev nbd0, logical block 2, async page read [ 500.174792][ T9263] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.184962][ T9263] Buffer I/O error on dev nbd0, logical block 3, async page read [ 500.195788][ T9263] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.206130][ T9263] Buffer I/O error on dev nbd0, logical block 0, async page read [ 500.216581][ T9263] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.226872][ T9263] Buffer I/O error on dev nbd0, logical block 1, async page read [ 500.266516][ T9263] ldm_validate_partition_table(): Disk read failed. [ 500.300059][ T9263] Dev nbd0: unable to read RDB block 0 [ 500.426547][ T9263] nbd0: unable to read partition table [ 500.495129][ T9263] ldm_validate_partition_table(): Disk read failed. [ 500.547133][ T9263] Dev nbd0: unable to read RDB block 0 [ 500.576407][ T9263] nbd0: unable to read partition table [ 500.617048][ T9324] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 500.623728][ T9324] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 500.630191][ T9324] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 500.636771][ T9324] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 500.643837][ T9324] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 500.650292][ T9324] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 500.656963][ T9324] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 501.474031][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.480394][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.648579][ T9353] xt_TPROXY: Can be used only with -p tcp or -p udp [ 504.071255][ T9352] netlink: 'syz.3.863': attribute type 39 has an invalid length. [ 504.338909][ T9351] nvme_fabrics: missing parameter 'transport=%s' [ 504.380128][ T9351] nvme_fabrics: missing parameter 'nqn=%s' [ 506.118936][ T9387] 9pnet_fd: Insufficient options for proto=fd [ 507.241302][ T9400] xt_TPROXY: Can be used only with -p tcp or -p udp [ 509.848948][ T9422] FAULT_INJECTION: forcing a failure. [ 509.848948][ T9422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.862212][ T9422] CPU: 1 UID: 0 PID: 9422 Comm: syz.5.881 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 509.862241][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.862255][ T9422] Call Trace: [ 509.862266][ T9422] [ 509.862276][ T9422] dump_stack_lvl+0x189/0x250 [ 509.862307][ T9422] ? __pfx____ratelimit+0x10/0x10 [ 509.862331][ T9422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 509.862356][ T9422] ? __pfx__printk+0x10/0x10 [ 509.862389][ T9422] ? __might_fault+0xb0/0x130 [ 509.862422][ T9422] should_fail_ex+0x414/0x560 [ 509.862449][ T9422] _copy_from_user+0x2d/0xb0 [ 509.862480][ T9422] ___sys_sendmsg+0x158/0x2a0 [ 509.862519][ T9422] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.862604][ T9422] ? __fget_files+0x2a/0x420 [ 509.862627][ T9422] ? __fget_files+0x3a0/0x420 [ 509.862662][ T9422] __x64_sys_sendmsg+0x19b/0x260 [ 509.862698][ T9422] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.862758][ T9422] do_syscall_64+0xfa/0x3b0 [ 509.862783][ T9422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.862804][ T9422] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 509.862825][ T9422] ? clear_bhb_loop+0x60/0xb0 [ 509.862850][ T9422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.862878][ T9422] RIP: 0033:0x7fbd0c18ebe9 [ 509.862897][ T9422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.862916][ T9422] RSP: 002b:00007fbd0d052038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.862939][ T9422] RAX: ffffffffffffffda RBX: 00007fbd0c3b6180 RCX: 00007fbd0c18ebe9 [ 509.862955][ T9422] RDX: 000000000000c800 RSI: 00002000000001c0 RDI: 0000000000000008 [ 509.862969][ T9422] RBP: 00007fbd0d052090 R08: 0000000000000000 R09: 0000000000000000 [ 509.862982][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.862995][ T9422] R13: 00007fbd0c3b6218 R14: 00007fbd0c3b6180 R15: 00007ffcffce7b58 [ 509.863028][ T9422] [ 512.487484][ T9451] netlink: 'syz.3.889': attribute type 23 has an invalid length. [ 512.532318][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 513.470055][ T9452] sctp: [Deprecated]: syz.0.888 (pid 9452) Use of int in maxseg socket option. [ 513.470055][ T9452] Use struct sctp_assoc_value instead [ 513.696179][ T10] IPVS: starting estimator thread 0... [ 513.713352][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.757230][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 513.800989][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 513.962333][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 513.977571][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 513.998701][ T9460] IPVS: using max 27 ests per chain, 64800 per kthread [ 514.002186][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 514.025988][ T9] usb 6-1: Manufacturer: syz [ 514.034500][ T9] usb 6-1: config 0 descriptor?? [ 514.816988][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 515.045824][ T9] rc_core: IR keymap rc-hauppauge not found [ 515.060389][ T9] Registered IR keymap rc-empty [ 515.078930][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 515.132030][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 515.383979][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 516.065056][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11 [ 516.201258][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 516.362182][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.097303][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.156014][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.181777][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.201961][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.221895][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.222773][ T9496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.241696][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.321664][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.343126][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 517.499231][ T8829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.554868][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 518.776685][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 518.931177][ T9] usb 6-1: USB disconnect, device number 9 [ 519.536919][ T9512] --map-set only usable from mangle table [ 519.870424][ T9518] netlink: 'syz.4.906': attribute type 39 has an invalid length. [ 520.455707][ T9528] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.465745][ T9528] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.475285][ T9528] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.484103][ T9528] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.571931][ T9532] netlink: 'syz.3.910': attribute type 39 has an invalid length. [ 520.911702][ T9539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.174233][ T9550] xt_TPROXY: Can be used only with -p tcp or -p udp [ 523.596106][ T9] Process accounting resumed [ 523.619850][ T9564] Process accounting resumed [ 524.428650][ T9579] Cannot find add_set index 0 as target [ 524.488793][ T8848] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 524.565146][ T9573] cgroup: release_agent respecified [ 525.688923][ T9587] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 525.771530][ T9587] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 527.075699][ T9587] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 527.123008][ T9587] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 527.130290][ T9587] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 527.145564][ T9587] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 527.153859][ T9587] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 527.573234][ T9600] netlink: 'syz.3.928': attribute type 23 has an invalid length. [ 529.193296][ T9622] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 529.338870][ T8835] Bluetooth: hci3: Frame reassembly failed (-84) [ 531.169057][ T8829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.470104][ T5156] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 531.476711][ T9623] Bluetooth: hci3: command 0x1003 tx timeout [ 531.657261][ T9626] serio: Serial port ptm1 [ 531.920219][ T925] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 532.174734][ T925] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 532.193504][ T925] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 532.225683][ T925] usb 6-1: config 220 interface 0 has no altsetting 0 [ 532.254390][ T925] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 532.275936][ T925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.303261][ T925] usb 6-1: Product: syz [ 532.322100][ T925] usb 6-1: Manufacturer: syz [ 532.339891][ T925] usb 6-1: SerialNumber: syz [ 536.292040][ T9671] FAULT_INJECTION: forcing a failure. [ 536.292040][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.305732][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.0.946 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 536.305756][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.305768][ T9671] Call Trace: [ 536.305777][ T9671] [ 536.305786][ T9671] dump_stack_lvl+0x189/0x250 [ 536.305809][ T9671] ? __pfx____ratelimit+0x10/0x10 [ 536.305824][ T9671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.305843][ T9671] ? __pfx__printk+0x10/0x10 [ 536.305870][ T9671] ? __might_fault+0xb0/0x130 [ 536.305900][ T9671] should_fail_ex+0x414/0x560 [ 536.305923][ T9671] _copy_from_user+0x2d/0xb0 [ 536.305947][ T9671] memdup_user+0x5e/0xd0 [ 536.305965][ T9671] strndup_user+0x68/0xd0 [ 536.305984][ T9671] __se_sys_mount+0x9c/0x410 [ 536.306006][ T9671] ? ksys_write+0x22a/0x250 [ 536.306028][ T9671] ? __pfx___se_sys_mount+0x10/0x10 [ 536.306054][ T9671] ? do_syscall_64+0xbe/0x3b0 [ 536.306073][ T9671] ? __x64_sys_mount+0x20/0xc0 [ 536.306095][ T9671] do_syscall_64+0xfa/0x3b0 [ 536.306111][ T9671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.306124][ T9671] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 536.306139][ T9671] ? clear_bhb_loop+0x60/0xb0 [ 536.306164][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.306193][ T9671] RIP: 0033:0x7fbbf8d8ebe9 [ 536.306209][ T9671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.306224][ T9671] RSP: 002b:00007fbbf9c56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 536.306245][ T9671] RAX: ffffffffffffffda RBX: 00007fbbf8fb5fa0 RCX: 00007fbbf8d8ebe9 [ 536.306255][ T9671] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 536.306263][ T9671] RBP: 00007fbbf9c56090 R08: 0000200000000280 R09: 0000000000000000 [ 536.306272][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.306279][ T9671] R13: 00007fbbf8fb6038 R14: 00007fbbf8fb5fa0 R15: 00007ffea6bb0c28 [ 536.306304][ T9671] [ 536.641870][ T6510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.895201][ T925] usb 6-1: USB disconnect, device number 10 [ 537.583308][ T9263] udevd[9263]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory [ 537.849710][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 540.694281][ T9711] tipc: Started in network mode [ 540.705009][ T9713] Cannot find add_set index 0 as target [ 540.721861][ T9711] tipc: Node identity 3e7d9e8bb90b, cluster identity 4711 [ 540.858298][ T9711] tipc: Enabled bearer , priority 0 [ 541.770683][ T9711] tipc: Resetting bearer [ 541.794379][ T9716] syzkaller0: entered promiscuous mode [ 541.800254][ T9716] syzkaller0: entered allmulticast mode [ 541.839372][ T9710] tipc: Resetting bearer [ 542.455862][ T978] tipc: Node number set to 2272697995 [ 542.482874][ T8835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.612554][ T9710] tipc: Disabling bearer [ 547.565404][ T9781] netlink: 'syz.4.971': attribute type 23 has an invalid length. [ 548.158762][ T8835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.713161][ T9810] comedi comedi3: comedi_config --init_data is deprecated [ 552.536978][ T9832] netlink: 'syz.5.986': attribute type 23 has an invalid length. [ 552.585418][ T9835] tipc: Enabling of bearer rejected, failed to enable media [ 552.616119][ T9840] comedi comedi0: Minor -2147450880 is invalid! [ 552.686703][ T9835] syzkaller0: entered promiscuous mode [ 552.712404][ T9835] syzkaller0: entered allmulticast mode [ 554.663817][ T8829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.149593][ T10] IPVS: starting estimator thread 0... [ 555.337362][ T9856] IPVS: using max 31 ests per chain, 74400 per kthread [ 558.197978][ T5925] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 558.210967][ T9888] netlink: 'syz.0.1001': attribute type 23 has an invalid length. [ 558.497075][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 558.756655][ T5925] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 558.809412][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.863086][ T9896] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.965452][ T5925] usb 4-1: Product: syz [ 559.103589][ T5925] usb 4-1: Manufacturer: syz [ 559.187885][ T5925] usb 4-1: SerialNumber: syz [ 559.493976][ T5925] usb 4-1: config 0 descriptor?? [ 559.677885][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.943421][ T5925] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 561.354486][ T9915] netlink: 'syz.0.1005': attribute type 15 has an invalid length. [ 561.648407][ T9919] trusted_key: syz.4.1007 sent an empty control message without MSG_MORE. [ 561.666152][ T5925] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 561.906679][ T24] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 562.528227][ T24] usb 1-1: config 2 has an invalid interface number: 190 but max is 0 [ 562.546389][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 562.573053][ T24] usb 1-1: config 2 has no interface number 0 [ 562.586410][ T24] usb 1-1: config 2 interface 190 altsetting 0 endpoint 0x3 has invalid maxpacket 45, setting to 8 [ 562.600617][ T24] usb 1-1: string descriptor 0 read error: -22 [ 562.624353][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 562.644165][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.734412][ T978] usb 4-1: USB disconnect, device number 17 [ 562.881853][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.888965][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.997828][ T5925] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 563.224431][ T24] (null): keene_cmd_main failed (-110) [ 563.597166][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 563.752250][ T5925] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 563.789567][ T24] video4linux radio48: keene_cmd_main failed (-32) [ 563.806372][ T5925] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 563.846499][ T24] radio-keene 1-1:2.190: V4L2 device registered as radio48 [ 563.865584][ T5925] usb 5-1: config 0 interface 0 has no altsetting 0 [ 563.906151][ T5925] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 563.934382][ T9950] netlink: 'syz.5.1016': attribute type 23 has an invalid length. [ 563.966930][ T5925] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 564.021323][ T5925] usb 5-1: Product: syz [ 564.029316][ T5925] usb 5-1: Manufacturer: syz [ 564.034177][ T5925] usb 5-1: SerialNumber: syz [ 564.109036][ T5925] usb 5-1: config 0 descriptor?? [ 564.586052][ T5925] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 564.662333][ T978] usb 1-1: USB disconnect, device number 11 [ 565.223435][ T5925] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 565.256555][ T5925] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 565.319884][ T5925] usb 5-1: USB disconnect, device number 15 [ 565.440311][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.788158][ T9975] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1021'. [ 567.540238][ T9982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 567.677668][ T9985] FAULT_INJECTION: forcing a failure. [ 567.677668][ T9985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.694727][ T9985] CPU: 1 UID: 0 PID: 9985 Comm: syz.3.1025 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 567.694753][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.694782][ T9985] Call Trace: [ 567.694790][ T9985] [ 567.694797][ T9985] dump_stack_lvl+0x189/0x250 [ 567.694824][ T9985] ? __pfx____ratelimit+0x10/0x10 [ 567.694846][ T9985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.694867][ T9985] ? __pfx__printk+0x10/0x10 [ 567.694910][ T9985] should_fail_ex+0x414/0x560 [ 567.694936][ T9985] _copy_to_user+0x31/0xb0 [ 567.694967][ T9985] simple_read_from_buffer+0xe1/0x170 [ 567.694992][ T9985] proc_fail_nth_read+0x1df/0x250 [ 567.695018][ T9985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.695044][ T9985] ? rw_verify_area+0x258/0x650 [ 567.695074][ T9985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.695099][ T9985] vfs_read+0x200/0x980 [ 567.695134][ T9985] ? __pfx___mutex_lock+0x10/0x10 [ 567.695158][ T9985] ? __pfx_vfs_read+0x10/0x10 [ 567.695189][ T9985] ? __fget_files+0x2a/0x420 [ 567.695214][ T9985] ? __fget_files+0x3a0/0x420 [ 567.695235][ T9985] ? __fget_files+0x2a/0x420 [ 567.695266][ T9985] ksys_read+0x145/0x250 [ 567.695287][ T9985] ? __pfx_ksys_read+0x10/0x10 [ 567.695302][ T9985] ? rcu_is_watching+0x15/0xb0 [ 567.695328][ T9985] ? do_syscall_64+0xbe/0x3b0 [ 567.695353][ T9985] do_syscall_64+0xfa/0x3b0 [ 567.695372][ T9985] ? lockdep_hardirqs_on+0x9c/0x150 [ 567.695390][ T9985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.695410][ T9985] ? clear_bhb_loop+0x60/0xb0 [ 567.695433][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.695452][ T9985] RIP: 0033:0x7fd95a38d5fc [ 567.695469][ T9985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 567.695485][ T9985] RSP: 002b:00007fd95b270030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 567.695504][ T9985] RAX: ffffffffffffffda RBX: 00007fd95a5b5fa0 RCX: 00007fd95a38d5fc [ 567.695518][ T9985] RDX: 000000000000000f RSI: 00007fd95b2700a0 RDI: 000000000000000b [ 567.695530][ T9985] RBP: 00007fd95b270090 R08: 0000000000000000 R09: 0000000000000000 [ 567.695542][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.695553][ T9985] R13: 00007fd95a5b6038 R14: 00007fd95a5b5fa0 R15: 00007ffc4f672d88 [ 567.695584][ T9985] [ 570.415503][T10008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1032'. [ 570.768478][T10010] netlink: 'syz.3.1033': attribute type 23 has an invalid length. [ 570.953154][T10014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.057274][T10018] loop8: detected capacity change from 0 to 7 [ 571.104306][T10018] Dev loop8: unable to read RDB block 7 [ 571.152916][T10018] loop8: unable to read partition table [ 571.167141][T10018] loop8: partition table beyond EOD, truncated [ 571.173431][T10018] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 571.198506][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.883153][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 573.040139][T10027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.854983][T10054] FAULT_INJECTION: forcing a failure. [ 576.854983][T10054] name failslab, interval 1, probability 0, space 0, times 0 [ 576.868108][T10054] CPU: 0 UID: 0 PID: 10054 Comm: syz.1.1045 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 576.868130][T10054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.868141][T10054] Call Trace: [ 576.868149][T10054] [ 576.868157][T10054] dump_stack_lvl+0x189/0x250 [ 576.868181][T10054] ? __pfx____ratelimit+0x10/0x10 [ 576.868200][T10054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 576.868220][T10054] ? __pfx__printk+0x10/0x10 [ 576.868248][T10054] ? __pfx___might_resched+0x10/0x10 [ 576.868274][T10054] should_fail_ex+0x414/0x560 [ 576.868297][T10054] should_failslab+0xa8/0x100 [ 576.868319][T10054] kmem_cache_alloc_noprof+0x73/0x3c0 [ 576.868337][T10054] ? getname_flags+0xb8/0x540 [ 576.868363][T10054] getname_flags+0xb8/0x540 [ 576.868384][T10054] ? _copy_from_user+0x94/0xb0 [ 576.868412][T10054] user_path_at+0x24/0x60 [ 576.868438][T10054] __se_sys_mount+0x2d3/0x410 [ 576.868465][T10054] ? __pfx___se_sys_mount+0x10/0x10 [ 576.868508][T10054] ? do_syscall_64+0xbe/0x3b0 [ 576.868528][T10054] ? __x64_sys_mount+0x20/0xc0 [ 576.868553][T10054] do_syscall_64+0xfa/0x3b0 [ 576.868576][T10054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.868594][T10054] ? asm_sysvec_call_function_single+0x1a/0x20 [ 576.868614][T10054] ? clear_bhb_loop+0x60/0xb0 [ 576.868638][T10054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.868658][T10054] RIP: 0033:0x7fabb1f8ebe9 [ 576.868693][T10054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.868728][T10054] RSP: 002b:00007fabb2eb5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 576.868750][T10054] RAX: ffffffffffffffda RBX: 00007fabb21b6090 RCX: 00007fabb1f8ebe9 [ 576.868765][T10054] RDX: 0000200000000040 RSI: 0000200000004a00 RDI: 0000200000000500 [ 576.868780][T10054] RBP: 00007fabb2eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 576.868793][T10054] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000001 [ 576.868806][T10054] R13: 00007fabb21b6128 R14: 00007fabb21b6090 R15: 00007ffc15ef74f8 [ 576.868839][T10054] [ 577.080524][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.187873][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.517133][T10056] netlink: 'syz.0.1046': attribute type 23 has an invalid length. [ 578.173458][T10075] trusted_key: encrypted_key: insufficient parameters specified [ 578.898126][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.687313][T10086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.933269][T10097] FAULT_INJECTION: forcing a failure. [ 581.933269][T10097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.020548][T10097] CPU: 0 UID: 0 PID: 10097 Comm: syz.0.1055 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 582.020577][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.020589][T10097] Call Trace: [ 582.020597][T10097] [ 582.020611][T10097] dump_stack_lvl+0x189/0x250 [ 582.020640][T10097] ? __pfx____ratelimit+0x10/0x10 [ 582.020661][T10097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.020684][T10097] ? __pfx__printk+0x10/0x10 [ 582.020709][T10097] ? __might_fault+0xb0/0x130 [ 582.020741][T10097] should_fail_ex+0x414/0x560 [ 582.020767][T10097] _copy_from_user+0x2d/0xb0 [ 582.020796][T10097] ___sys_sendmsg+0x158/0x2a0 [ 582.020831][T10097] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.020898][T10097] ? __fget_files+0x2a/0x420 [ 582.020919][T10097] ? __fget_files+0x3a0/0x420 [ 582.020952][T10097] __x64_sys_sendmsg+0x19b/0x260 [ 582.020986][T10097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.021027][T10097] ? __pfx_ksys_write+0x10/0x10 [ 582.021043][T10097] ? rcu_is_watching+0x15/0xb0 [ 582.021070][T10097] ? do_syscall_64+0xbe/0x3b0 [ 582.021096][T10097] do_syscall_64+0xfa/0x3b0 [ 582.021120][T10097] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.021140][T10097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.021160][T10097] ? clear_bhb_loop+0x60/0xb0 [ 582.021184][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.021203][T10097] RIP: 0033:0x7fbbf8d8ebe9 [ 582.021220][T10097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.021238][T10097] RSP: 002b:00007fbbf9c56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.021259][T10097] RAX: ffffffffffffffda RBX: 00007fbbf8fb5fa0 RCX: 00007fbbf8d8ebe9 [ 582.021273][T10097] RDX: 000000000000c800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 582.021286][T10097] RBP: 00007fbbf9c56090 R08: 0000000000000000 R09: 0000000000000000 [ 582.021298][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.021310][T10097] R13: 00007fbbf8fb6038 R14: 00007fbbf8fb5fa0 R15: 00007ffea6bb0c28 [ 582.021341][T10097] [ 582.229154][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.157322][T10120] trusted_key: encrypted_key: insufficient parameters specified [ 585.275843][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.035440][T10165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1073'. [ 587.245014][T10170] trusted_key: encrypted_key: insufficient parameters specified [ 587.267797][ T30] audit: type=1326 audit(1755592133.806:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10162 comm="syz.1.1073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabb1f8ebe9 code=0x0 [ 591.033768][ T6510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 592.021669][T10190] 9pnet: Could not find request transport: f$ [ 592.916179][T10174] syz.4.1071 (10174): drop_caches: 2 [ 595.044379][T10219] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1087'. [ 595.097732][T10219] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 596.506703][T10228] trusted_key: encrypted_key: insufficient parameters specified [ 598.715729][ T8835] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 598.867869][T10244] comedi comedi0: Minor -2147450880 is invalid! [ 599.162257][ T925] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 599.392236][ T925] usb 4-1: Using ep0 maxpacket: 32 [ 599.417204][ T925] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 599.428252][ T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.446521][ T925] usb 4-1: Product: syz [ 599.462238][ T925] usb 4-1: Manufacturer: syz [ 599.488054][ T925] usb 4-1: SerialNumber: syz [ 599.570543][T10256] comedi comedi0: Minor -2147450880 is invalid! [ 599.981932][ T925] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 600.523312][ T925] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 601.402468][ T925] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 601.438785][ T925] usb 4-1: USB disconnect, device number 18 [ 601.513327][ T925] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 601.608941][ T925] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 601.799532][T10278] trusted_key: encrypted_key: insufficient parameters specified [ 602.112285][ T925] visor 4-1:1.0: device disconnected [ 602.322475][T10287] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1104'. [ 603.062507][T10294] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1107'. [ 604.187408][T10302] overlayfs: failed to clone upperpath [ 604.649342][ T8848] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 604.787119][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 604.796518][T10312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 605.665428][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 606.034334][T10318] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1114'. [ 606.081769][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 606.167365][T10327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1115'. [ 606.245347][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 606.269881][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.296263][ T10] usb 5-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 606.322049][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.473386][ T10] usb 5-1: config 0 descriptor?? [ 606.502722][ T10] usb 5-1: Found UVC 0.00 device (05a9:2630) [ 606.519756][ T10] usb 5-1: No valid video chain found. [ 606.759846][ T10] usb 5-1: USB disconnect, device number 16 [ 608.121091][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1123'. [ 608.130329][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1123'. [ 609.466522][T10368] vlan2: entered allmulticast mode [ 609.483887][T10368] macvlan0: entered allmulticast mode [ 609.509033][T10368] veth1_vlan: entered allmulticast mode [ 609.925450][T10385] comedi comedi0: Minor -2147450880 is invalid! [ 610.343210][ T8839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.162089][T10390] 9pnet: Could not find request transport: frfdé [ 611.232563][T10397] sctp: [Deprecated]: syz.0.1135 (pid 10397) Use of int in maxseg socket option. [ 611.232563][T10397] Use struct sctp_assoc_value instead [ 611.907420][T10425] FAULT_INJECTION: forcing a failure. [ 611.907420][T10425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.920841][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.1.1140 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 611.920869][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.920883][T10425] Call Trace: [ 611.920892][T10425] [ 611.920911][T10425] dump_stack_lvl+0x189/0x250 [ 611.920941][T10425] ? __pfx____ratelimit+0x10/0x10 [ 611.920965][T10425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 611.920989][T10425] ? __pfx__printk+0x10/0x10 [ 611.921030][T10425] should_fail_ex+0x414/0x560 [ 611.921059][T10425] _copy_to_user+0x31/0xb0 [ 611.921092][T10425] simple_read_from_buffer+0xe1/0x170 [ 611.921119][T10425] proc_fail_nth_read+0x1df/0x250 [ 611.921150][T10425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.921180][T10425] ? rw_verify_area+0x258/0x650 [ 611.921212][T10425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 611.921240][T10425] vfs_read+0x200/0x980 [ 611.921272][T10425] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 611.921302][T10425] ? __pfx_vfs_read+0x10/0x10 [ 611.921336][T10425] ? irqentry_exit+0x74/0x90 [ 611.921358][T10425] ? lockdep_hardirqs_on+0x9c/0x150 [ 611.921421][T10425] ksys_read+0x145/0x250 [ 611.921445][T10425] ? __pfx_ksys_read+0x10/0x10 [ 611.921462][T10425] ? rcu_is_watching+0x15/0xb0 [ 611.921493][T10425] ? do_syscall_64+0xbe/0x3b0 [ 611.921522][T10425] do_syscall_64+0xfa/0x3b0 [ 611.921549][T10425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.921570][T10425] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 611.921592][T10425] ? clear_bhb_loop+0x60/0xb0 [ 611.921619][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.921640][T10425] RIP: 0033:0x7fabb1f8d5fc [ 611.921660][T10425] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 611.921679][T10425] RSP: 002b:00007fabb2eb5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.921702][T10425] RAX: ffffffffffffffda RBX: 00007fabb21b6090 RCX: 00007fabb1f8d5fc [ 611.921718][T10425] RDX: 000000000000000f RSI: 00007fabb2eb50a0 RDI: 0000000000000008 [ 611.921731][T10425] RBP: 00007fabb2eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 611.921745][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.921758][T10425] R13: 00007fabb21b6128 R14: 00007fabb21b6090 R15: 00007ffc15ef74f8 [ 611.921793][T10425] [ 612.233160][T10422] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1141'. [ 612.498777][T10430] comedi comedi0: Minor -2147450880 is invalid! [ 614.398780][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.406486][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.431891][T10465] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 614.711381][T10464] syz.1.1149 (10464) used greatest stack depth: 16360 bytes left [ 616.430894][T10497] netlink: 'syz.3.1157': attribute type 3 has an invalid length. [ 616.633095][ T8839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 616.782048][ C1] sd 0:0:1:0: [sda] tag#4488 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 616.792688][ C1] sd 0:0:1:0: [sda] tag#4488 CDB: Read(6) 08 00 0c 6a 08 48 [ 616.921352][T10504] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1159'. [ 617.028350][ T30] audit: type=1326 audit(1755592163.559:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.0.1161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbf8d8ebe9 code=0x0 [ 617.049272][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.340357][ T978] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 618.190174][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 618.196810][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.247900][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.258614][ T978] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.273117][ T978] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.292402][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.486373][ T978] usb 5-1: config 0 descriptor?? [ 618.969601][T10526] caif0: entered allmulticast mode [ 618.999412][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 619.159609][T10542] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1167'. [ 619.237833][ T978] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 619.821641][ T978] microsoft 0003:045E:07DA.0005: unbalanced collection at end of report description [ 619.860710][ T978] microsoft 0003:045E:07DA.0005: parse failed [ 619.867056][ T978] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 619.900327][T10546] sctp: [Deprecated]: syz.0.1169 (pid 10546) Use of int in maxseg socket option. [ 619.900327][T10546] Use struct sctp_assoc_value instead [ 620.078768][ T978] usb 5-1: USB disconnect, device number 17 [ 620.179035][T10554] FAULT_INJECTION: forcing a failure. [ 620.179035][T10554] name failslab, interval 1, probability 0, space 0, times 0 [ 620.192152][T10554] CPU: 0 UID: 0 PID: 10554 Comm: syz.3.1170 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 620.192180][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.192194][T10554] Call Trace: [ 620.192202][T10554] [ 620.192212][T10554] dump_stack_lvl+0x189/0x250 [ 620.192242][T10554] ? __pfx____ratelimit+0x10/0x10 [ 620.192266][T10554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.192291][T10554] ? __pfx__printk+0x10/0x10 [ 620.192323][T10554] ? __pfx___might_resched+0x10/0x10 [ 620.192348][T10554] ? fs_reclaim_acquire+0x7d/0x100 [ 620.192380][T10554] should_fail_ex+0x414/0x560 [ 620.192409][T10554] should_failslab+0xa8/0x100 [ 620.192435][T10554] __kmalloc_noprof+0xcb/0x4f0 [ 620.192456][T10554] ? tomoyo_encode+0x28b/0x550 [ 620.192489][T10554] tomoyo_encode+0x28b/0x550 [ 620.192525][T10554] tomoyo_realpath_from_path+0x58d/0x5d0 [ 620.192580][T10554] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 620.192603][T10554] tomoyo_path_number_perm+0x1e8/0x5a0 [ 620.192630][T10554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.192651][T10554] ? sb_end_write+0x197/0x1c0 [ 620.192694][T10554] ? __lock_acquire+0xab9/0xd20 [ 620.192738][T10554] ? __fget_files+0x2a/0x420 [ 620.192765][T10554] ? __fget_files+0x2a/0x420 [ 620.192787][T10554] ? __fget_files+0x3a0/0x420 [ 620.192814][T10554] ? __fget_files+0x2a/0x420 [ 620.192843][T10554] security_file_ioctl+0xcb/0x2d0 [ 620.192870][T10554] __se_sys_ioctl+0x47/0x170 [ 620.192904][T10554] do_syscall_64+0xfa/0x3b0 [ 620.192929][T10554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.192950][T10554] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 620.192971][T10554] ? clear_bhb_loop+0x60/0xb0 [ 620.192996][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.193017][T10554] RIP: 0033:0x7fd95a38ebe9 [ 620.193035][T10554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.193055][T10554] RSP: 002b:00007fd95b22e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.193077][T10554] RAX: ffffffffffffffda RBX: 00007fd95a5b6180 RCX: 00007fd95a38ebe9 [ 620.193093][T10554] RDX: 0000200000000340 RSI: 00000000c0405602 RDI: 0000000000000006 [ 620.193107][T10554] RBP: 00007fd95b22e090 R08: 0000000000000000 R09: 0000000000000000 [ 620.193121][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.193133][T10554] R13: 00007fd95a5b6218 R14: 00007fd95a5b6180 R15: 00007ffc4f672d88 [ 620.193173][T10554] [ 620.193304][T10554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.629780][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 623.596361][ T1143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.622834][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.634163][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.645573][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 623.659938][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 623.669893][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.681175][ T10] usb 4-1: config 0 descriptor?? [ 623.973220][T10580] xt_hashlimit: max too large, truncated to 1048576 [ 624.031258][T10584] xt_connbytes: Forcing CT accounting to be enabled [ 624.216406][T10584] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 624.341153][ T10] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 624.445187][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.461803][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.831129][T10593] MTD: Couldn't look up '/dev/sg0': -15 [ 625.949342][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 626.612606][T10605] syz_tun: entered allmulticast mode [ 626.621843][T10604] syz_tun: left allmulticast mode [ 626.749415][ T10] usb 4-1: USB disconnect, device number 19 [ 626.921353][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1183'. [ 627.317384][T10615] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1183'. [ 628.802905][T10627] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 629.026672][T10630] loop8: detected capacity change from 0 to 16384 [ 629.092751][ T8549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.622365][T10634] loop8: detected capacity change from 16384 to 16383 [ 629.656053][T10640] FAULT_INJECTION: forcing a failure. [ 629.656053][T10640] name failslab, interval 1, probability 0, space 0, times 0 [ 629.758906][T10640] CPU: 0 UID: 0 PID: 10640 Comm: syz.4.1191 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 629.758936][T10640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.758949][T10640] Call Trace: [ 629.758958][T10640] [ 629.758966][T10640] dump_stack_lvl+0x189/0x250 [ 629.758994][T10640] ? __pfx____ratelimit+0x10/0x10 [ 629.759015][T10640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.759045][T10640] ? __pfx__printk+0x10/0x10 [ 629.759075][T10640] ? __pfx___might_resched+0x10/0x10 [ 629.759102][T10640] should_fail_ex+0x414/0x560 [ 629.759128][T10640] should_failslab+0xa8/0x100 [ 629.759151][T10640] __kmalloc_noprof+0xcb/0x4f0 [ 629.759170][T10640] ? sock_kmalloc+0xd6/0x160 [ 629.759193][T10640] sock_kmalloc+0xd6/0x160 [ 629.759216][T10640] alg_setkey+0x55/0x190 [ 629.759234][T10640] ? alg_setsockopt+0x3c5/0x4a0 [ 629.759255][T10640] alg_setsockopt+0x3da/0x4a0 [ 629.759275][T10640] ? __pfx_alg_setsockopt+0x10/0x10 [ 629.759296][T10640] do_sock_setsockopt+0x179/0x1b0 [ 629.759329][T10640] __x64_sys_setsockopt+0x13f/0x1b0 [ 629.759364][T10640] do_syscall_64+0xfa/0x3b0 [ 629.759388][T10640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.759406][T10640] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 629.759425][T10640] ? clear_bhb_loop+0x60/0xb0 [ 629.759450][T10640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.759468][T10640] RIP: 0033:0x7fc3f018ebe9 [ 629.759486][T10640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.759503][T10640] RSP: 002b:00007fc3f0fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 629.759524][T10640] RAX: ffffffffffffffda RBX: 00007fc3f03b6090 RCX: 00007fc3f018ebe9 [ 629.759538][T10640] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000008 [ 629.759550][T10640] RBP: 00007fc3f0fd1090 R08: 0000000000000018 R09: 0000000000000000 [ 629.759562][T10640] R10: 0000200000c18000 R11: 0000000000000246 R12: 0000000000000001 [ 629.759575][T10640] R13: 00007fc3f03b6128 R14: 00007fc3f03b6090 R15: 00007ffc0a254438 [ 629.759605][T10640] [ 629.973957][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.994021][T10651] netlink: 'syz.4.1193': attribute type 23 has an invalid length. [ 631.149289][ T978] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 632.136459][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 632.160578][ T978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.182110][ T978] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 632.675733][ T978] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.685459][ T978] usb 6-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 632.696849][ T978] usb 6-1: Product: syz [ 632.702090][ T978] usb 6-1: Manufacturer: syz [ 632.709556][ T978] usb 6-1: SerialNumber: syz [ 632.927159][T10644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 633.348763][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 633.447436][T10675] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1199'. [ 633.643742][T10644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 633.812102][T10677] netlink: 'syz.0.1200': attribute type 1 has an invalid length. [ 633.893602][ T978] cdc_ncm 6-1:1.0: failed to get mac address [ 633.907723][T10677] bond1: entered promiscuous mode [ 633.915528][T10677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 633.917644][ T978] cdc_ncm 6-1:1.0: bind() failure [ 633.951088][ T978] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 633.966274][ T978] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 633.976491][ T978] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 634.134339][ T978] usb 6-1: USB disconnect, device number 11 [ 635.234717][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.530174][T10679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 635.619032][T10679] bond1: (slave bond2): making interface the new active one [ 635.704120][T10679] bond2: entered promiscuous mode [ 635.711293][T10679] bond1: (slave bond2): Enslaving as an active interface with an up link [ 636.760186][T10704] overlayfs: failed to clone upperpath [ 637.028725][T10710] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 637.088314][T10710] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 637.096337][T10710] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 637.117634][T10710] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 637.147150][T10710] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 637.167046][T10710] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 637.215041][T10710] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 637.235677][T10720] Cannot find add_set index 0 as target [ 638.107680][T10727] comedi comedi0: Minor -2147450880 is invalid! [ 640.503546][T10747] comedi comedi0: Minor -2147450880 is invalid! [ 640.643884][T10753] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 641.596366][ T8549] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.363654][T10771] hsr0: entered promiscuous mode [ 645.329759][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 645.587354][T10803] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1231'. [ 646.019374][T10806] sctp: [Deprecated]: syz.4.1233 (pid 10806) Use of int in maxseg socket option. [ 646.019374][T10806] Use struct sctp_assoc_value instead [ 648.027423][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.052298][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 650.084296][T10829] comedi comedi0: Minor -2147450880 is invalid! [ 653.894156][T10850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.440544][ T6510] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.672729][T10852] tipc: Enabling of bearer rejected, failed to enable media [ 654.715429][T10855] Cannot find add_set index 0 as target [ 654.739837][T10859] --map-set only usable from mangle table [ 655.985690][T10873] netlink: 'syz.5.1249': attribute type 23 has an invalid length. [ 657.030765][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.230086][T10887] sctp: [Deprecated]: syz.5.1253 (pid 10887) Use of int in maxseg socket option. [ 657.230086][T10887] Use struct sctp_assoc_value instead [ 657.590562][T10885] overlayfs: failed to clone upperpath [ 657.597409][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.018441][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.420127][T10909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 664.659764][T10916] --map-set only usable from mangle table [ 664.799180][T10920] netlink: 'syz.4.1263': attribute type 23 has an invalid length. [ 664.818078][T10922] Cannot find add_set index 0 as target [ 665.035958][T10923] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 665.042713][T10923] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 665.050625][T10923] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 665.058261][T10923] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 665.065707][T10923] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 665.072448][T10923] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 665.079533][T10923] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 667.189580][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.886394][ T1143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.921971][T10932] overlayfs: failed to clone upperpath [ 668.971592][T10943] FAULT_INJECTION: forcing a failure. [ 668.971592][T10943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.059455][T10943] CPU: 0 UID: 0 PID: 10943 Comm: syz.4.1271 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 669.059487][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.059501][T10943] Call Trace: [ 669.059517][T10943] [ 669.059527][T10943] dump_stack_lvl+0x189/0x250 [ 669.059557][T10943] ? __pfx____ratelimit+0x10/0x10 [ 669.059580][T10943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.059605][T10943] ? __pfx__printk+0x10/0x10 [ 669.059633][T10943] ? __might_fault+0xb0/0x130 [ 669.059666][T10943] should_fail_ex+0x414/0x560 [ 669.059694][T10943] _copy_from_user+0x2d/0xb0 [ 669.059724][T10943] ___sys_sendmsg+0x158/0x2a0 [ 669.059759][T10943] ? __pfx____sys_sendmsg+0x10/0x10 [ 669.059839][T10943] ? __might_fault+0xb0/0x130 [ 669.059864][T10943] __sys_sendmmsg+0x227/0x430 [ 669.059903][T10943] ? __pfx___sys_sendmmsg+0x10/0x10 [ 669.059933][T10943] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 669.059986][T10943] ? ksys_write+0x22a/0x250 [ 669.060009][T10943] ? __pfx_ksys_write+0x10/0x10 [ 669.060026][T10943] ? rcu_is_watching+0x15/0xb0 [ 669.060057][T10943] __x64_sys_sendmmsg+0xa0/0xc0 [ 669.060105][T10943] do_syscall_64+0xfa/0x3b0 [ 669.060144][T10943] ? lockdep_hardirqs_on+0x9c/0x150 [ 669.060166][T10943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.060187][T10943] ? clear_bhb_loop+0x60/0xb0 [ 669.060213][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.060234][T10943] RIP: 0033:0x7fc3f018ebe9 [ 669.060252][T10943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.060271][T10943] RSP: 002b:00007fc3f0fd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 669.060294][T10943] RAX: ffffffffffffffda RBX: 00007fc3f03b6090 RCX: 00007fc3f018ebe9 [ 669.060309][T10943] RDX: 07fffffffffffd33 RSI: 0000200000004d00 RDI: 0000000000000005 [ 669.060324][T10943] RBP: 00007fc3f0fd1090 R08: 0000000000000000 R09: 0000000000000000 [ 669.060337][T10943] R10: 0000000020000890 R11: 0000000000000246 R12: 0000000000000001 [ 669.060372][T10943] R13: 00007fc3f03b6128 R14: 00007fc3f03b6090 R15: 00007ffc0a254438 [ 669.060405][T10943] [ 669.274707][ C0] vkms_vblank_simulate: vblank timer overrun [ 669.829976][T10962] Cannot find add_set index 0 as target [ 669.913565][T10965] --map-set only usable from mangle table [ 670.404342][ T10] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 670.939799][ T10] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 670.951564][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.978813][ T10] usb 6-1: config 0 descriptor?? [ 671.020988][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 671.226039][T10974] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 671.232735][T10974] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 671.240297][T10974] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 671.247566][T10974] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 671.255243][T10974] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 671.262092][T10974] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 671.269486][T10974] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 673.105486][ T10] gp8psk: usb in 128 operation failed. [ 673.127991][ T10] gp8psk: usb in 137 operation failed. [ 673.133535][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 673.145126][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 673.175476][T10975] overlayfs: failed to clone upperpath [ 673.806852][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 674.333126][T10992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.624343][T11002] overlayfs: failed to clone upperpath [ 674.947153][T11003] FAULT_INJECTION: forcing a failure. [ 674.947153][T11003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.948515][T11003] [ 674.948523][T11003] ====================================================== [ 674.948529][T11003] WARNING: possible circular locking dependency detected [ 674.948541][T11003] 6.16.0-syzkaller #0 Not tainted [ 674.948550][T11003] ------------------------------------------------------ [ 674.948557][T11003] syz.4.1286/11003 is trying to acquire lock: [ 674.948565][T11003] ffffffff8e133300 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 674.948615][T11003] [ 674.948615][T11003] but task is already holding lock: [ 674.948620][T11003] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 674.948655][T11003] [ 674.948655][T11003] which lock already depends on the new lock. [ 674.948655][T11003] [ 674.948660][T11003] [ 674.948660][T11003] the existing dependency chain (in reverse order) is: [ 674.948666][T11003] [ 674.948666][T11003] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 674.948686][T11003] lock_acquire+0x120/0x360 [ 674.948700][T11003] _raw_spin_lock_nested+0x32/0x50 [ 674.948715][T11003] raw_spin_rq_lock_nested+0x2a/0x140 [ 674.948730][T11003] task_rq_lock+0xbc/0x470 [ 674.948743][T11003] cgroup_move_task+0x9a/0x590 [ 674.948760][T11003] css_set_move_task+0x658/0x9e0 [ 674.948778][T11003] cgroup_post_fork+0x1ef/0x790 [ 674.948807][T11003] copy_process+0x37e6/0x3b80 [ 674.948822][T11003] kernel_clone+0x224/0x7f0 [ 674.948838][T11003] user_mode_thread+0xdd/0x140 [ 674.948854][T11003] rest_init+0x23/0x300 [ 674.948872][T11003] start_kernel+0x47d/0x500 [ 674.948887][T11003] x86_64_start_reservations+0x24/0x30 [ 674.948907][T11003] x86_64_start_kernel+0x143/0x1c0 [ 674.948936][T11003] common_startup_64+0x13e/0x147 [ 674.948954][T11003] [ 674.948954][T11003] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 674.948994][T11003] lock_acquire+0x120/0x360 [ 674.949006][T11003] _raw_spin_lock_irqsave+0xa7/0xf0 [ 674.949032][T11003] try_to_wake_up+0x6e/0x1290 [ 674.949049][T11003] create_worker+0x503/0x720 [ 674.949067][T11003] workqueue_init+0x503/0x8a0 [ 674.949085][T11003] kernel_init_freeable+0x3a7/0x570 [ 674.949100][T11003] kernel_init+0x1d/0x1d0 [ 674.949116][T11003] ret_from_fork+0x3fc/0x770 [ 674.949127][T11003] ret_from_fork_asm+0x1a/0x30 [ 674.949143][T11003] [ 674.949143][T11003] -> #3 (&pool->lock){-.-.}-{2:2}: [ 674.949160][T11003] lock_acquire+0x120/0x360 [ 674.949170][T11003] _raw_spin_lock+0x2e/0x40 [ 674.949188][T11003] __queue_work+0x7b0/0xfe0 [ 674.949202][T11003] queue_work_on+0x181/0x270 [ 674.949215][T11003] rpm_suspend+0xe54/0x1720 [ 674.949233][T11003] __pm_runtime_idle+0x12f/0x1a0 [ 674.949251][T11003] __device_attach+0x342/0x400 [ 674.949270][T11003] bus_probe_device+0x185/0x260 [ 674.949285][T11003] device_add+0x7b6/0xb50 [ 674.949302][T11003] serial_base_port_add+0x2e3/0x410 [ 674.949315][T11003] serial_core_register_port+0x367/0x2700 [ 674.949331][T11003] serial8250_register_8250_port+0x16db/0x2050 [ 674.949347][T11003] serial_pnp_probe+0x527/0x790 [ 674.949362][T11003] pnp_device_probe+0x30b/0x4c0 [ 674.949379][T11003] really_probe+0x26a/0x9a0 [ 674.949390][T11003] __driver_probe_device+0x18c/0x2f0 [ 674.949409][T11003] driver_probe_device+0x4f/0x430 [ 674.949421][T11003] __driver_attach+0x452/0x700 [ 674.949431][T11003] bus_for_each_dev+0x230/0x2b0 [ 674.949445][T11003] bus_add_driver+0x345/0x640 [ 674.949460][T11003] driver_register+0x23a/0x320 [ 674.949472][T11003] serial8250_init+0xc2/0x1c0 [ 674.949489][T11003] do_one_initcall+0x233/0x820 [ 674.949503][T11003] do_initcall_level+0x137/0x1f0 [ 674.949518][T11003] do_initcalls+0x69/0xd0 [ 674.949531][T11003] kernel_init_freeable+0x3d9/0x570 [ 674.949545][T11003] kernel_init+0x1d/0x1d0 [ 674.949561][T11003] ret_from_fork+0x3fc/0x770 [ 674.949572][T11003] ret_from_fork_asm+0x1a/0x30 [ 674.949587][T11003] [ 674.949587][T11003] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 674.949605][T11003] lock_acquire+0x120/0x360 [ 674.949614][T11003] _raw_spin_lock_irqsave+0xa7/0xf0 [ 674.949634][T11003] __pm_runtime_resume+0x10f/0x180 [ 674.949652][T11003] __uart_start+0x171/0x440 [ 674.949668][T11003] uart_write+0xdc/0x130 [ 674.949683][T11003] n_tty_write+0xd35/0x11d0 [ 674.949695][T11003] file_tty_write+0x500/0x990 [ 674.949711][T11003] vfs_write+0x54b/0xa90 [ 674.949721][T11003] ksys_write+0x145/0x250 [ 674.949731][T11003] do_syscall_64+0xfa/0x3b0 [ 674.949745][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.949757][T11003] [ 674.949757][T11003] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 674.949774][T11003] lock_acquire+0x120/0x360 [ 674.949784][T11003] _raw_spin_lock_irqsave+0xa7/0xf0 [ 674.949821][T11003] serial8250_console_write+0x17e/0x1ba0 [ 674.949842][T11003] console_flush_all+0x728/0xc40 [ 674.949859][T11003] console_unlock+0xc4/0x270 [ 674.949874][T11003] vprintk_emit+0x5b7/0x7a0 [ 674.949889][T11003] _printk+0xcf/0x120 [ 674.949905][T11003] register_console+0xa8b/0xf90 [ 674.949922][T11003] univ8250_console_init+0x52/0x90 [ 674.949939][T11003] console_init+0x1a1/0x670 [ 674.949956][T11003] start_kernel+0x2cc/0x500 [ 674.949970][T11003] x86_64_start_reservations+0x24/0x30 [ 674.949996][T11003] x86_64_start_kernel+0x143/0x1c0 [ 674.950015][T11003] common_startup_64+0x13e/0x147 [ 674.950033][T11003] [ 674.950033][T11003] -> #0 (console_owner){-.-.}-{0:0}: [ 674.950051][T11003] validate_chain+0xb9b/0x2140 [ 674.950065][T11003] __lock_acquire+0xab9/0xd20 [ 674.950076][T11003] lock_acquire+0x120/0x360 [ 674.950087][T11003] console_flush_all+0x6d2/0xc40 [ 674.950104][T11003] console_unlock+0xc4/0x270 [ 674.950118][T11003] vprintk_emit+0x5b7/0x7a0 [ 674.950133][T11003] _printk+0xcf/0x120 [ 674.950149][T11003] should_fail_ex+0x3f5/0x560 [ 674.950161][T11003] strncpy_from_user+0x36/0x290 [ 674.950182][T11003] strncpy_from_user_nofault+0x72/0x150 [ 674.950197][T11003] bpf_probe_read_user_str+0x2a/0x70 [ 674.950210][T11003] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 674.950221][T11003] bpf_trace_run4+0x28e/0x4a0 [ 674.950239][T11003] __bpf_trace_sched_switch+0x17a/0x1e0 [ 674.950257][T11003] __traceiter_sched_switch+0x9a/0xd0 [ 674.950275][T11003] __schedule+0x22ba/0x4c90 [ 674.950287][T11003] schedule+0x165/0x360 [ 674.950298][T11003] exit_to_user_mode_loop+0x4c/0x110 [ 674.950310][T11003] do_syscall_64+0x2bd/0x3b0 [ 674.950325][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.950338][T11003] [ 674.950338][T11003] other info that might help us debug this: [ 674.950338][T11003] [ 674.950343][T11003] Chain exists of: [ 674.950343][T11003] console_owner --> &p->pi_lock --> &rq->__lock [ 674.950343][T11003] [ 674.950365][T11003] Possible unsafe locking scenario: [ 674.950365][T11003] [ 674.950369][T11003] CPU0 CPU1 [ 674.950374][T11003] ---- ---- [ 674.950378][T11003] lock(&rq->__lock); [ 674.950387][T11003] lock(&p->pi_lock); [ 674.950397][T11003] lock(&rq->__lock); [ 674.950407][T11003] lock(console_owner); [ 674.950417][T11003] [ 674.950417][T11003] *** DEADLOCK *** [ 674.950417][T11003] [ 674.950420][T11003] 4 locks held by syz.4.1286/11003: [ 674.950429][T11003] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 674.950463][T11003] #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 674.950500][T11003] #2: ffffffff8e133360 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 674.950535][T11003] #3: ffffffff8e01ac30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 674.950572][T11003] [ 674.950572][T11003] stack backtrace: [ 674.950580][T11003] CPU: 1 UID: 0 PID: 11003 Comm: syz.4.1286 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 674.950597][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.950606][T11003] Call Trace: [ 674.950611][T11003] [ 674.950618][T11003] dump_stack_lvl+0x189/0x250 [ 674.950635][T11003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.950651][T11003] ? __pfx__printk+0x10/0x10 [ 674.950670][T11003] ? print_lock_name+0xde/0x100 [ 674.950689][T11003] print_circular_bug+0x2ee/0x310 [ 674.950708][T11003] check_noncircular+0x134/0x160 [ 674.950728][T11003] validate_chain+0xb9b/0x2140 [ 674.950753][T11003] __lock_acquire+0xab9/0xd20 [ 674.950768][T11003] ? console_flush_all+0x13a/0xc40 [ 674.950786][T11003] lock_acquire+0x120/0x360 [ 674.950798][T11003] ? console_flush_all+0x13a/0xc40 [ 674.950820][T11003] ? do_raw_spin_unlock+0x122/0x240 [ 674.950839][T11003] ? console_flush_all+0x13a/0xc40 [ 674.950858][T11003] console_flush_all+0x6d2/0xc40 [ 674.950875][T11003] ? console_flush_all+0x13a/0xc40 [ 674.950895][T11003] ? console_flush_all+0x13a/0xc40 [ 674.950916][T11003] ? __pfx_console_flush_all+0x10/0x10 [ 674.950935][T11003] ? __switch_to+0xd74/0x1600 [ 674.950957][T11003] ? is_printk_cpu_sync_owner+0x32/0x40 [ 674.950980][T11003] console_unlock+0xc4/0x270 [ 674.951004][T11003] ? __pfx_console_unlock+0x10/0x10 [ 674.951023][T11003] ? is_printk_cpu_sync_owner+0x32/0x40 [ 674.951045][T11003] vprintk_emit+0x5b7/0x7a0 [ 674.951062][T11003] ? __pfx_vprintk_emit+0x10/0x10 [ 674.951078][T11003] ? rcu_is_watching+0x15/0xb0 [ 674.951094][T11003] ? trace_sched_exit_tp+0x38/0x120 [ 674.951115][T11003] ? __schedule+0x16c8/0x4c90 [ 674.951133][T11003] _printk+0xcf/0x120 [ 674.951150][T11003] ? __pfx____ratelimit+0x10/0x10 [ 674.951166][T11003] ? __pfx__printk+0x10/0x10 [ 674.951184][T11003] ? __schedule+0x16c8/0x4c90 [ 674.951201][T11003] should_fail_ex+0x3f5/0x560 [ 674.951216][T11003] strncpy_from_user+0x36/0x290 [ 674.951240][T11003] strncpy_from_user_nofault+0x72/0x150 [ 674.951257][T11003] bpf_probe_read_user_str+0x2a/0x70 [ 674.951272][T11003] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 674.951284][T11003] bpf_trace_run4+0x28e/0x4a0 [ 674.951303][T11003] ? bpf_trace_run4+0x19c/0x4a0 [ 674.951323][T11003] ? __pfx_bpf_trace_run4+0x10/0x10 [ 674.951342][T11003] ? kvm_sched_clock_read+0x11/0x20 [ 674.951359][T11003] ? sched_clock_cpu+0x74/0x430 [ 674.951376][T11003] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 674.951398][T11003] __bpf_trace_sched_switch+0x17a/0x1e0 [ 674.951438][T11003] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 674.951458][T11003] ? psi_group_change+0xbc7/0x1210 [ 674.951475][T11003] ? rcu_read_lock_sched_held+0x89/0x100 [ 674.951492][T11003] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 674.951511][T11003] ? psi_task_switch+0x318/0x6d0 [ 674.951530][T11003] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 674.951550][T11003] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 674.951571][T11003] __traceiter_sched_switch+0x9a/0xd0 [ 674.951593][T11003] __schedule+0x22ba/0x4c90 [ 674.951613][T11003] ? schedule+0x165/0x360 [ 674.951628][T11003] ? __pfx___schedule+0x10/0x10 [ 674.951650][T11003] schedule+0x165/0x360 [ 674.951664][T11003] exit_to_user_mode_loop+0x4c/0x110 [ 674.951678][T11003] do_syscall_64+0x2bd/0x3b0 [ 674.951695][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.951710][T11003] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 674.951725][T11003] ? clear_bhb_loop+0x60/0xb0 [ 674.951742][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.951756][T11003] RIP: 0033:0x7fc3f018d69f [ 674.951769][T11003] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 674.951784][T11003] RSP: 002b:00007fc3f0fd1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 674.951799][T11003] RAX: 0000000000000001 RBX: 000000000000000a RCX: 00007fc3f018d69f [ 674.951809][T11003] RDX: 0000000000000001 RSI: 00007fc3f0fd1090 RDI: 000000000000000a [ 674.951819][T11003] RBP: 00007fc3f0fd1090 R08: 0000000000000000 R09: 00007fc3f0fd0df7 [ 674.951829][T11003] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 674.951838][T11003] R13: 00007fc3f03b6128 R14: 00007fc3f03b6090 R15: 00007ffc0a254438 [ 674.951856][T11003] [ 676.139424][T11003] CPU: 1 UID: 0 PID: 11003 Comm: syz.4.1286 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 676.139444][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 676.139454][T11003] Call Trace: [ 676.139462][T11003] [ 676.139471][T11003] dump_stack_lvl+0x189/0x250 [ 676.139492][T11003] ? __pfx____ratelimit+0x10/0x10 [ 676.139507][T11003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.139523][T11003] ? __pfx__printk+0x10/0x10 [ 676.139542][T11003] ? __schedule+0x16c8/0x4c90 [ 676.139560][T11003] should_fail_ex+0x414/0x560 [ 676.139577][T11003] strncpy_from_user+0x36/0x290 [ 676.139601][T11003] strncpy_from_user_nofault+0x72/0x150 [ 676.139619][T11003] bpf_probe_read_user_str+0x2a/0x70 [ 676.139635][T11003] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 676.139648][T11003] bpf_trace_run4+0x28e/0x4a0 [ 676.139668][T11003] ? bpf_trace_run4+0x19c/0x4a0 [ 676.139688][T11003] ? __pfx_bpf_trace_run4+0x10/0x10 [ 676.139706][T11003] ? kvm_sched_clock_read+0x11/0x20 [ 676.139732][T11003] ? sched_clock_cpu+0x74/0x430 [ 676.139749][T11003] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 676.139772][T11003] __bpf_trace_sched_switch+0x17a/0x1e0 [ 676.139793][T11003] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 676.139813][T11003] ? psi_group_change+0xbc7/0x1210 [ 676.139829][T11003] ? rcu_read_lock_sched_held+0x89/0x100 [ 676.139846][T11003] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 676.139864][T11003] ? psi_task_switch+0x318/0x6d0 [ 676.139887][T11003] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 676.139908][T11003] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 676.139928][T11003] __traceiter_sched_switch+0x9a/0xd0 [ 676.139951][T11003] __schedule+0x22ba/0x4c90 [ 676.139971][T11003] ? schedule+0x165/0x360 [ 676.139985][T11003] ? __pfx___schedule+0x10/0x10 [ 676.140006][T11003] schedule+0x165/0x360 [ 676.140020][T11003] exit_to_user_mode_loop+0x4c/0x110 [ 676.140035][T11003] do_syscall_64+0x2bd/0x3b0 [ 676.140052][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.140066][T11003] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 676.140080][T11003] ? clear_bhb_loop+0x60/0xb0 [ 676.140097][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.140112][T11003] RIP: 0033:0x7fc3f018d69f [ 676.140126][T11003] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 676.140139][T11003] RSP: 002b:00007fc3f0fd1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 676.140155][T11003] RAX: 0000000000000001 RBX: 000000000000000a RCX: 00007fc3f018d69f [ 676.140165][T11003] RDX: 0000000000000001 RSI: 00007fc3f0fd1090 RDI: 000000000000000a [ 676.140174][T11003] RBP: 00007fc3f0fd1090 R08: 0000000000000000 R09: 00007fc3f0fd0df7 [ 676.140184][T11003] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 676.140193][T11003] R13: 00007fc3f03b6128 R14: 00007fc3f03b6090 R15: 00007ffc0a254438 [ 676.140210][T11003] [ 676.140335][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.433641][ C0] vkms_vblank_simulate: vblank timer overrun [ 676.470270][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.481835][ T10] usb 6-1: USB disconnect, device number 12 [ 676.784865][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.797690][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 679.343891][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.543326][ T6625] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration