last executing test programs: 15.212967549s ago: executing program 1 (id=248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000030426bdb3fe989122e65ed40000", @ANYRES32=0x0, @ANYBLOB="addca88801200500180012800e000100776972656775617264000000"], 0x38}}, 0x440088c4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x80000}]}}]}, 0x38}}, 0x44080) 10.988650949s ago: executing program 1 (id=269): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) symlink(0x0, 0x0) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0x101800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) mq_open(&(0x7f0000000740)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0l\xa4\x92\xf8\x17\x04\xae\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!3\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x00\xde\xbe_\x88N\xb8\xde\xcf)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10\x9a\xa6\xb4\x12\xc2b^\x86q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8as\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xces:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x05\x18\x00\x00', 0x42, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x4000) close(0xffffffffffffffff) r3 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) 10.802466645s ago: executing program 1 (id=271): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 10.478658568s ago: executing program 1 (id=273): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000010129"], 0x0) syz_usb_connect$uac1(0x1, 0xd1, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x6, 0x60, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0x1, "8753f5"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x205, 0x3, 0x9, 0x6f1, 0x81, 0x6}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x2, "7114"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x6, 0x7f, "a9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf4, 0x2, 0x6, 0x2, "6380d4b2acb69e"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x4, 0x2, "3384c01481c4"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xdf, 0x2, 0x5f, 0x5, "cd"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0xed3, 0x6, "24f336b66ae9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x9, 0xc, {0x7, 0x25, 0x1, 0x82, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe9, 0x5, 0x5, {0x7, 0x25, 0x1, 0x1, 0x51}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x5, 0x10, 0x9, 0xe0, 0x2e}, 0x3d, &(0x7f0000000180)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7fffffb, 0xf, 0x6, [0x3f, 0xc000, 0x3f, 0x3f30, 0xc0cf]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0xd6, 0x1e00, 0xb2, [0xc000, 0xffc000, 0x14050]}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x458}}, {0x1b, &(0x7f00000002c0)=@string={0x1b, 0x3, "362c841db85bde7e1308a4417cd37c88bd502eceed25c33946"}}, {0x96, &(0x7f0000000300)=@string={0x96, 0x3, "f8ede8874868484ee29a1ab7516563ee4252cc473400a2d115a6d07d50abe4e818101c3d3c024b6f11843172f3b2b3d787a3986c2ed15b92cda48949be8955cae93e0a70c324169c2f0334acd3dc02ce71139c47e9bb03ba652740a2743ee730681dc830eb0cb9d7811658db98b624f2185c6b70f24caf940122f2a3100fcbd92c01da1aae7494fb9c8a5271b35b7f253a528b73"}}]}) (async) syz_usb_connect$uac1(0x1, 0xd1, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x6, 0x60, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0x1, "8753f5"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x205, 0x3, 0x9, 0x6f1, 0x81, 0x6}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x2, "7114"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x6, 0x7f, "a9"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xf4, 0x2, 0x6, 0x2, "6380d4b2acb69e"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x4, 0x2, "3384c01481c4"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xdf, 0x2, 0x5f, 0x5, "cd"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0xed3, 0x6, "24f336b66ae9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x9, 0xc, {0x7, 0x25, 0x1, 0x82, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe9, 0x5, 0x5, {0x7, 0x25, 0x1, 0x1, 0x51}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x5, 0x10, 0x9, 0xe0, 0x2e}, 0x3d, &(0x7f0000000180)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7fffffb, 0xf, 0x6, [0x3f, 0xc000, 0x3f, 0x3f30, 0xc0cf]}, @ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0xd6, 0x1e00, 0xb2, [0xc000, 0xffc000, 0x14050]}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x458}}, {0x1b, &(0x7f00000002c0)=@string={0x1b, 0x3, "362c841db85bde7e1308a4417cd37c88bd502eceed25c33946"}}, {0x96, &(0x7f0000000300)=@string={0x96, 0x3, "f8ede8874868484ee29a1ab7516563ee4252cc473400a2d115a6d07d50abe4e818101c3d3c024b6f11843172f3b2b3d787a3986c2ed15b92cda48949be8955cae93e0a70c324169c2f0334acd3dc02ce71139c47e9bb03ba652740a2743ee730681dc830eb0cb9d7811658db98b624f2185c6b70f24caf940122f2a3100fcbd92c01da1aae7494fb9c8a5271b35b7f253a528b73"}}]}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00", 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) 10.220119974s ago: executing program 2 (id=276): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0xffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') preadv(r5, &(0x7f0000003900)=[{&(0x7f00000003c0)=""/124, 0x7c}], 0x1, 0x80, 0xc51a) bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f0000004500)=[0x0]) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffb3, 0x100000000009, 0x5, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002300)='./file0\x00') execve(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x400c810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 10.01197905s ago: executing program 0 (id=278): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x8, 0x4) (fail_nth: 2) 8.908583444s ago: executing program 0 (id=281): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) symlink(0x0, 0x0) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0x101800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}]}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) mq_open(&(0x7f0000000740)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0l\xa4\x92\xf8\x17\x04\xae\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!3\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x00\xde\xbe_\x88N\xb8\xde\xcf)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10\x9a\xa6\xb4\x12\xc2b^\x86q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8as\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xces:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x05\x18\x00\x00', 0x42, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x4000) close(0xffffffffffffffff) r3 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r1, 0x0, 0x0) 8.885775877s ago: executing program 0 (id=282): ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/tcp6\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@filename='./file0\x00', 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca949257819f25159c532504978ed33d145658cce40a3dd867df925cbedfbd01f157cae933c958c5dfdc1e0132e03f60e3418410fe17f95bdb8090c4adb3636ea342fb8589cf4944e42579da1d2aa919fa78d9e27565fc30d2513293f3cc7d6c7d2d1fb756b0d7b352efd07bd38bedcabb8d856610db17155de5bb0409e3713b2c73464055345b98fe30949e7ee8cddc663f3d5d50881520df8da5115d6d8d81bc62e8dde2460f128365ca184efc5e1b14ff3f4ad1c1f7bad98a9435c0d757ddb9dcd577f5ae33ef675676ba7b44be538aeec0e6ec4973865dc2bb0f0847ded0a131f3b01ac48e070783564cd9031b3b9fcbeafb69dd253e8cbc2c12307f03154573a27f6f00073aae7c4c1701a3f745744c254ddd3b43988c7bbdec9c1e158fda3cdffc887206b78fb1fc943810dc473894738286878513d06aa7f074a11983261f5be648b4b76893a5f733bdafcf42427743534de2bfcf27f014923488c6476dd417344045c747c68c69e3eb5357e69d97a2cfafa44e2547aa21548dfc0739e49321684120c8bdb64448689a3412eebaca2e4b2a2ecf96690f9fec7d569087bc8561cff6012cf5cb14775230226b95a9ded9cccfedafe61c550376adf0b1b59abf9f92da6247e1061afe2eaa9d8f5a28d63db50fca875020da59426501eab6602beb74de33df143ccb60c70f950f5f53f1d5aca6371dfc8dd68cbe7ccfbe0f52e1ff238105dd93d8a3a72da45ce79824d6b091d9c91509cb290afd01f1945b118f2c1c58f17c0b59fbd872412d7d291dcecad019af039375aeee7ddcf36ede82914f64bb41281962c9b10216907c37d06aa5a5b33afe0547c6726ee169779ad6d5cfc5f373f75b234df4ac2007c6db9dc6a0fc3e7e1d2f2658e928c2a854483e6780d69908692d0166ab5334cd5ceb7a69a420803b7ca33e4609f61cfda3b631b54fb81a7473b4bbe2eabc17276f8a009668d634f332fe47fda76a1fae8fe9c3c8962f7ca7a102d5ecd1d6029abb6c422026af6ef277a4c6c21f07121cd8bcce6f1792ea6a628580b478d72b32dd50f59e893bfcf353bea1e2ddbd349c16ccc23bceb8f3b64aa16257eedabadaead30f912bd0e579c0b71e6cd86804fc39a074f94da63f0db97c5f41e38541bf441f49d2751966cc78dacd150ae0b91ffe1f5a117fe494a8b60a17ccfbc780f82f0ea96d8db842e07fb4d68edbe28119a6c2ab72ea15a5ba75ac8193dd7411d9aeece6fc23ac00370c84d7e03990ca3697a0187cc3286e4536ace023ec21389ff08cddb1e9075d1e1b3a98a95720f44e50830ad54fecd437a40f483579c7a5eb40e52e75099d9ada449ba4d0751e44de6edd5e17caa91cfb3bf88bb1e093bd76952c80669845d3cbcde8acf7415ed30ad3a0ff648968d036af2de90f2ab93b250b9386fcba42c1ba01cc951fa1f62ebbb99ad6576d803d29e81ed319350ee0a032bfab9b079ea5a29c66f665ce9ccb6b908593ae2406332c5ac7d11c9b830593576177b2af5d70c65dda56b98448862b75a54b3447534d45e0b5a52edc1a76c97f511030bd261bb1a443e1a38a78973f0781efa9910ebe207457587dbc803e68b2cb985c03c4dfbac440d58c90de66a634c07b13197b9e7d42657fb0537abe475fb56fe24cdcd771d9ac5bcea1c915a77d731d2d16a54885387e034aab6db1718521eeb07b0326d23decd5bba45b311d8617bbfd3afc10923567e8987c95260ab90ba3ff1309273a2a615174d9a33c11bfd393013c314d3df8cf4e584b752c30f54e09a38409a34cdaee74f30547b7dfdb3c48d6b4d5b7346ebcaf7fdbb91d9d45ba303e2ea2736f28301c7b8354bc6f89f58841cb844646a57153c83cd03687d8d3a6b95e93f8abd1218af123ada0de5025d18e4599c8d34cdd8ecf91af7a647c6b43d4704446a104829783ec10b68d95418ddfe8b0dc6552069bd07e4452821317131b7a76887fd792c431e6c07d770926c4e60243d198372482b911d29daac57d92f12d7f471657107a8a910d9abd67bac6eec6e0858e7cf078579621", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r3, 0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8.256514893s ago: executing program 1 (id=287): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000e6000000005300000400000000"], 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000240)={0x7, {0x3ff, 0x800, 0x5}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0xffe}, 0x2b1}) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x4}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r4, &(0x7f0000000740), 0x0, 0x40010000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a000000000000000400040037cff30d384f926c01506136964b672494e1c61475c64c9c854c1b7f3c1622b443a0fc2da4b4046cd7458c9fe210f56bfde3e58aaef8a7ec6b489502960bb5b458"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 7.471096888s ago: executing program 3 (id=290): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000a"], 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x5}, {0x6, 0x8}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a000100000000000000001881000000004000000000000008000f7d"], 0x24}}, 0x10000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]}) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.504514839s ago: executing program 3 (id=291): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0xb}, {&(0x7f0000000180)='\x00', 0x1}], 0x2) socket$unix(0x1, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) semget(0x0, 0x2, 0x2c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) fchdir(r2) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) semget$private(0x0, 0x2, 0x52) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x45d2, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_GET_FP_MODE(0x2e) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) 6.024814908s ago: executing program 2 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xb}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0x3) 5.847352218s ago: executing program 2 (id=293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 5.421876703s ago: executing program 0 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r8 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000100)={0x80000001, 0x5, 0x4, 0x40, 0x1, {0x0, 0xea60}, {0x5, 0x2, 0x3, 0xc, 0x6, 0x2}, 0x7ff, 0x4, {}, 0x10}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) close(r4) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r8, 0xc0585609, &(0x7f0000000100)={0x80000001, 0x5, 0x4, 0x40, 0x1, {0x0, 0xea60}, {0x5, 0x2, 0x3, 0xc, 0x6, 0x2}, 0x7ff, 0x4, {}, 0x10}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) 3.435425605s ago: executing program 2 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x80}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x89, &(0x7f0000000240)=""/137, 0x41000, 0xc8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x2, 0x7, 0x2}], 0x10, 0x3}, 0x94) openat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x101, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001080)={0x0, "00c1ffffffff00000900012b07f400"}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000640)={0x8, 0x7, {0xf, @struct={0x7f, 0x6}, 0x0, 0x1, 0x6, 0x7, 0x200, 0xffffffffffffff81, 0x14, @usage=0x9, 0x90000, 0x8, [0xd, 0x3, 0xfff, 0x8, 0x0, 0x200]}, {0x0, @usage=0x8, 0x0, 0x9, 0x400, 0x7, 0xfffffffffffffff9, 0x7, 0xac, @struct={0x0, 0x5}, 0x100, 0x9, [0x9166, 0x3, 0x1, 0xeb1b, 0x9]}, {0x4, @struct={0x4, 0xfffffffa}, r3, 0x401, 0x2, 0x5, 0x7, 0x3, 0x12, @struct={0x4, 0x80}, 0x3, 0x4, [0x3, 0x5, 0xa97e, 0x2, 0x9, 0x7]}, {0x9, 0x2, 0x9}}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r6, @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x64}}, 0x0) 3.352427223s ago: executing program 4 (id=297): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xf0f002}) 3.348843086s ago: executing program 4 (id=298): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0xb}, {&(0x7f0000000180)='\x00', 0x1}], 0x2) socket$unix(0x1, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) semget(0x0, 0x2, 0x2c0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) fchdir(r1) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x3, 0x1) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = semget$private(0x0, 0x2, 0x52) semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f00000001c0)=""/237) r5 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) read$snapshot(r5, 0x0, 0xffffffbf) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0x45d2, 0x4) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) prctl$PR_GET_FP_MODE(0x2e) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) 3.33810933s ago: executing program 1 (id=299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000030426bdb3fe989122e65ed40000", @ANYRES32=0x0, @ANYBLOB="addca88801200500180012800e000100776972656775617264000000"], 0x38}}, 0x440088c4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) close(0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x80000}]}}]}, 0x38}}, 0x44080) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x1004}, 0x1c, &(0x7f0000001700)=[{0x0}, {0x0}, {&(0x7f0000000180)="2b1393c831ca55d119fa0d4fe72bb77dc9ac587ac0", 0x15}, {&(0x7f0000000640)}], 0x4}, 0x4048043) dup(r0) 3.212656591s ago: executing program 2 (id=300): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (fail_nth: 2) 3.212514736s ago: executing program 0 (id=301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a0006"], 0x64}}, 0x0) (fail_nth: 2) 3.01271276s ago: executing program 0 (id=302): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x90, 0x7f, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa}}}}]}}]}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x40, 0x0, 0x0, 0x8, @private0, @loopback}}) r1 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000540)={0x7, 0xfffffffe, 0x1001}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xffffffb9}, 0x0}, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x2, 0x40, 0x30}, 0x18) write$sysctl(r3, &(0x7f0000000140)='3\x00', 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r4, &(0x7f0000000580)={0x50, 0x0, 0x0, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, 0x0, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x1, 0x16, 0x0, 0x7ff, 0x0, {0x2, 0x80000a418, 0x3, 0x6, 0x800000000003, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x8000, 0x80000000, 0x0, 0x0, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000001c0)={0x3, [0x4cac, 0x7ff, 0x9, 0x5, 0x9, 0x0, 0x2, 0x71a7, 0x7de, 0x8, 0x7, 0x9, 0x0, 0x0, 0x5, 0x9, 0x7, 0x3, 0x8, 0x8000, 0xfffe, 0x6, 0x1, 0x9, 0x100, 0x3, 0x9, 0x5, 0x200, 0x6, 0x4, 0x5, 0x1, 0xf801, 0x2, 0x3, 0x5, 0x9, 0x0, 0x8090, 0x4, 0xcb, 0x0, 0x401, 0x5, 0x7ff, 0x6, 0x846], 0xb}) 2.468248009s ago: executing program 3 (id=303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='schedstat\x00') symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) dup2(r0, r0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) r3 = fsopen(&(0x7f0000000140)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='sourca', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) capset(0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r4, 0x40045436, 0x34) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x4e6d, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000002c0)={'ipvlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c07"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000200)=@filename='./file0\x00', 0x0, &(0x7f0000000440)={0x5, 0x2, 0x1, 0x2}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40095}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_perm_addr}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r3, 0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4004) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.032360814s ago: executing program 4 (id=305): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x1}}, './cgroup/../file0\x00'}) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x4, 0x2}}, 0x2e) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x4000044) (fail_nth: 2) socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) r6 = open(0x0, 0x240, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES8=r6], 0x2b) write$cgroup_pid(r3, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, 0x0) 523.718261ms ago: executing program 3 (id=306): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) 372.85821ms ago: executing program 4 (id=307): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (fail_nth: 2) 238.352516ms ago: executing program 3 (id=308): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x10, 0xbe}}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x937}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@empty, 0x4e1e, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0xbf, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x358004, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x2, "15733790ba2f726ce7135ca566dbaf1dbce4225e0af27fcb4541c73fd0e1"}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff, 0xff], 'batadv_slave_1\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x3b, 0x6, 0x2, 0x1a}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xfff1, 0x0, 0x0, 0x0, "89dffb78b68da4c3fe77d722fd67f99614d1e011f6702e84c86e99afe23d6e315792bc6d7fba5cf8a4dbac624f6f4adff3421850f922d9f7faac4c5a3c4a4097"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f0000001740)={'filter\x00', 0x1002, 0x4, 0x3d8, 0x0, 0x0, 0xe0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x1ec}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010104, @rand_addr=0x64010101, 0x4, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0x80800000, 0x6, 0x0, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010102, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) 200.096354ms ago: executing program 4 (id=309): r0 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_WEIGHT={0x8, 0xf, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x700, 0x9, 0x7, {{0x5, 0x4, 0x1, 0x0, 0x14, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @local}}}}) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000001c0)="55e13981fdb5f04c50ea658e2bd5134faba1ed3b0fecd82bdf5be4254b7f7206cb007fde9c563ffdf652a908f7ce7fe5a03eb7be8ef2514b3f95bf37fe8de3ebc6869627789c9783151cb2d6d1d063af824cda18b0677bea74222a9573dc64ea39f2f0587290561fdb999ed155c7d6686c14e2cd", 0x74}, {&(0x7f0000000300)="3acf747dbf04887b7e317bcfad296158843df40d1b54df09dfb79151b9fd5c7156b073f6a4d253859f8438ac7f62a6afd7c480b20953ec590ede05ab76b74356cf4d1324", 0x44}, {&(0x7f00000008c0)="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", 0x4e8}, {0x0}], 0x4, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x50}}], 0x2, 0x4880) 427.726µs ago: executing program 3 (id=310): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 1) 0s ago: executing program 4 (id=311): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x80) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r10, 0x7, &(0x7f00000006c0)={0x0, 0x1, 0xb, 0x8}) fcntl$lock(r10, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x10000000010000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1b, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x86c}, [@jmp={0x5, 0x1, 0x8, 0x9, 0x9, 0xc}, @generic={0x8, 0x6, 0x9, 0x8, 0x1}, @call={0x85, 0x0, 0x0, 0x30}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1a6e}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000100)='syzkaller\x00', 0x200, 0x92, &(0x7f00000002c0)=""/146, 0x41000, 0x10, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000380)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r7, r8, r9, r10, r11, 0xffffffffffffffff, 0xffffffffffffffff, r12, r13], &(0x7f00000006c0)=[{0x1, 0x2, 0x1, 0xb}], 0x10, 0x7}, 0x94) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 105.425174][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.425183][ T6258] RIP: 0033:0x7f7ac858e9a9 [ 105.425192][ T6258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.425199][ T6258] RSP: 002b:00007f7ac948f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.425210][ T6258] RAX: ffffffffffffffda RBX: 00007f7ac87b5fa0 RCX: 00007f7ac858e9a9 [ 105.425216][ T6258] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 105.425222][ T6258] RBP: 00007f7ac948f090 R08: 0000000000000000 R09: 0000000000000000 [ 105.425227][ T6258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.425232][ T6258] R13: 0000000000000000 R14: 00007f7ac87b5fa0 R15: 00007f7ac88dfa28 [ 105.425247][ T6258] [ 105.680974][ T9] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 105.691779][ T9] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 226 [ 105.701379][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 105.710765][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.988456][ T1584] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.114047][ T5948] usb 5-1: USB disconnect, device number 5 [ 106.232069][ T1584] usb 3-1: config 9 has an invalid interface number: 32 but max is 0 [ 106.361644][ T1584] usb 3-1: config 9 has no interface number 0 [ 106.368230][ T1584] usb 3-1: config 9 interface 32 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 106.572822][ T1584] usb 3-1: config 9 interface 32 has no altsetting 0 [ 106.589645][ T1584] usb 3-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 106.602209][ T1584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.610840][ T1584] usb 3-1: Product: syz [ 106.615156][ T1584] usb 3-1: Manufacturer: syz [ 106.626594][ T5963] usb 1-1: USB disconnect, device number 6 [ 106.638599][ T980] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 106.666503][ T36] syzkaller0: tun_net_xmit 76 [ 106.675791][ T1584] usb 3-1: SerialNumber: syz [ 106.694925][ T9] syzkaller0: tun_net_xmit 76 [ 106.700442][ T36] syzkaller0: tun_net_xmit 48 [ 106.715941][ T6269] tipc: Enabling of bearer rejected, failed to enable media [ 106.833507][ T980] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 106.868510][ T980] usb 4-1: config 0 has no interface number 0 [ 106.883448][ T980] usb 4-1: config 0 interface 29 has no altsetting 0 [ 106.902793][ T980] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 106.918029][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.927517][ T980] usb 4-1: Product: syz [ 106.932059][ T980] usb 4-1: Manufacturer: syz [ 106.946890][ T980] usb 4-1: SerialNumber: syz [ 106.954949][ T980] usb 4-1: config 0 descriptor?? [ 106.970585][ T1584] usb 3-1: USB disconnect, device number 4 [ 107.051651][ T5963] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.104380][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 107.218484][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 107.225572][ T5963] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 107.235072][ T5963] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 107.245533][ T5963] usb 1-1: config 4 has no interface number 0 [ 107.251824][ T5963] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 107.268220][ T5963] usb 1-1: config 4 interface 51 has no altsetting 0 [ 107.284728][ T5963] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 107.295256][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.303981][ T5963] usb 1-1: Product: syz [ 107.308538][ T5963] usb 1-1: Manufacturer: syz [ 107.313298][ T5963] usb 1-1: SerialNumber: syz [ 107.335686][ T5963] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 108.688042][ T980] peak_usb 4-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 108.713504][ T980] peak_usb 4-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 108.849153][ T980] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -71 [ 108.918665][ T980] usb 4-1: USB disconnect, device number 5 [ 108.984897][ T6291] vcan0: tx drop: invalid da for name 0x0000000000040000 [ 109.355114][ T30] audit: type=1326 audit(1753531693.774:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdd58e9a9 code=0x7ffc0000 [ 109.456623][ T30] audit: type=1326 audit(1753531693.804:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3fdd58e9a9 code=0x7ffc0000 [ 109.681532][ T55] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.707113][ T30] audit: type=1326 audit(1753531693.804:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdd58e9a9 code=0x7ffc0000 [ 109.713187][ T6315] Zero length message leads to an empty skb [ 109.869232][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 109.915315][ T55] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.927538][ T9] usb 1-1: USB disconnect, device number 7 [ 109.946529][ T30] audit: type=1326 audit(1753531693.854:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6302 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fdd58e9a9 code=0x7ffc0000 [ 109.972464][ T55] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.059790][ T55] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 110.063602][ T6317] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 110.116531][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.149327][ T55] usb 5-1: Product: syz [ 110.175839][ T55] usb 5-1: Manufacturer: syz [ 110.185296][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.193193][ T55] usb 5-1: SerialNumber: syz [ 110.206945][ T6320] batadv_slave_1: entered promiscuous mode [ 110.234308][ T55] usb 5-1: config 0 descriptor?? [ 110.259805][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.203792][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 111.540694][ T6332] FAULT_INJECTION: forcing a failure. [ 111.540694][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.602923][ T6332] CPU: 1 UID: 0 PID: 6332 Comm: syz.2.106 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 111.602949][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 111.602958][ T6332] Call Trace: [ 111.602965][ T6332] [ 111.602973][ T6332] dump_stack_lvl+0x189/0x250 [ 111.602996][ T6332] ? __pfx____ratelimit+0x10/0x10 [ 111.603015][ T6332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.603032][ T6332] ? __pfx__printk+0x10/0x10 [ 111.603053][ T6332] ? __might_fault+0xb0/0x130 [ 111.603085][ T6332] should_fail_ex+0x414/0x560 [ 111.603108][ T6332] _copy_from_user+0x2d/0xb0 [ 111.603130][ T6332] ___sys_sendmsg+0x158/0x2a0 [ 111.603167][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.603217][ T6332] ? __fget_files+0x2a/0x420 [ 111.603231][ T6332] ? __fget_files+0x3a0/0x420 [ 111.603256][ T6332] __x64_sys_sendmsg+0x19b/0x260 [ 111.603275][ T6332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.603300][ T6332] ? __pfx_ksys_write+0x10/0x10 [ 111.603329][ T6332] ? rcu_is_watching+0x15/0xb0 [ 111.603353][ T6332] ? do_syscall_64+0xbe/0x3b0 [ 111.603373][ T6332] do_syscall_64+0xfa/0x3b0 [ 111.603389][ T6332] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.603405][ T6332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.603420][ T6332] ? clear_bhb_loop+0x60/0xb0 [ 111.603439][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.603454][ T6332] RIP: 0033:0x7f7ac858e9a9 [ 111.603469][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.603481][ T6332] RSP: 002b:00007f7ac948f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.603498][ T6332] RAX: ffffffffffffffda RBX: 00007f7ac87b5fa0 RCX: 00007f7ac858e9a9 [ 111.603509][ T6332] RDX: 0000000000080841 RSI: 0000200000000240 RDI: 0000000000000003 [ 111.603519][ T6332] RBP: 00007f7ac948f090 R08: 0000000000000000 R09: 0000000000000000 [ 111.603529][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.603538][ T6332] R13: 0000000000000000 R14: 00007f7ac87b5fa0 R15: 00007f7ac88dfa28 [ 111.603565][ T6332] [ 112.184686][ T9] usb 5-1: USB disconnect, device number 6 [ 112.345030][ T6350] FAULT_INJECTION: forcing a failure. [ 112.345030][ T6350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.358656][ T55] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.361164][ T6350] CPU: 0 UID: 0 PID: 6350 Comm: syz.4.110 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 112.361188][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.361199][ T6350] Call Trace: [ 112.361206][ T6350] [ 112.361213][ T6350] dump_stack_lvl+0x189/0x250 [ 112.361237][ T6350] ? __pfx____ratelimit+0x10/0x10 [ 112.361255][ T6350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.361272][ T6350] ? __pfx__printk+0x10/0x10 [ 112.361292][ T6350] ? __might_fault+0xb0/0x130 [ 112.361323][ T6350] should_fail_ex+0x414/0x560 [ 112.361345][ T6350] _copy_from_user+0x2d/0xb0 [ 112.361368][ T6350] ___sys_sendmsg+0x158/0x2a0 [ 112.361386][ T6350] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.361434][ T6350] ? __fget_files+0x2a/0x420 [ 112.361449][ T6350] ? __fget_files+0x3a0/0x420 [ 112.361472][ T6350] __x64_sys_sendmsg+0x19b/0x260 [ 112.361490][ T6350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 112.361514][ T6350] ? __pfx_ksys_write+0x10/0x10 [ 112.361539][ T6350] ? do_syscall_64+0xbe/0x3b0 [ 112.361560][ T6350] do_syscall_64+0xfa/0x3b0 [ 112.361576][ T6350] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.361593][ T6350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.361608][ T6350] ? clear_bhb_loop+0x60/0xb0 [ 112.361627][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.361642][ T6350] RIP: 0033:0x7f7437f8e9a9 [ 112.361656][ T6350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.361669][ T6350] RSP: 002b:00007f7438dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.361686][ T6350] RAX: ffffffffffffffda RBX: 00007f74381b5fa0 RCX: 00007f7437f8e9a9 [ 112.361697][ T6350] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 112.361707][ T6350] RBP: 00007f7438dce090 R08: 0000000000000000 R09: 0000000000000000 [ 112.361717][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.361726][ T6350] R13: 0000000000000000 R14: 00007f74381b5fa0 R15: 00007f74382dfa28 [ 112.361751][ T6350] [ 112.862862][ T6356] FAULT_INJECTION: forcing a failure. [ 112.862862][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 112.906709][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.3.113 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 112.906733][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.906743][ T6356] Call Trace: [ 112.906749][ T6356] [ 112.906757][ T6356] dump_stack_lvl+0x189/0x250 [ 112.906782][ T6356] ? __pfx____ratelimit+0x10/0x10 [ 112.906799][ T6356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.906824][ T6356] ? __pfx__printk+0x10/0x10 [ 112.906852][ T6356] ? __pfx___might_resched+0x10/0x10 [ 112.906870][ T6356] ? fs_reclaim_acquire+0x7d/0x100 [ 112.906890][ T6356] should_fail_ex+0x414/0x560 [ 112.906911][ T6356] should_failslab+0xa8/0x100 [ 112.906935][ T6356] __kmalloc_noprof+0xcb/0x4f0 [ 112.906954][ T6356] ? kfree+0x4d/0x440 [ 112.906979][ T6356] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 112.907003][ T6356] tomoyo_realpath_from_path+0xe3/0x5d0 [ 112.907024][ T6356] ? tomoyo_domain+0xd9/0x130 [ 112.907049][ T6356] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 112.907064][ T6356] tomoyo_path_number_perm+0x1e8/0x5a0 [ 112.907083][ T6356] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.907117][ T6356] ? __lock_acquire+0xab9/0xd20 [ 112.907154][ T6356] ? __fget_files+0x2a/0x420 [ 112.907172][ T6356] ? __fget_files+0x2a/0x420 [ 112.907186][ T6356] ? __fget_files+0x3a0/0x420 [ 112.907199][ T6356] ? __fget_files+0x2a/0x420 [ 112.907217][ T6356] security_file_ioctl+0xcb/0x2d0 [ 112.907245][ T6356] __se_sys_ioctl+0x47/0x170 [ 112.907268][ T6356] do_syscall_64+0xfa/0x3b0 [ 112.907285][ T6356] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.907302][ T6356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.907319][ T6356] ? clear_bhb_loop+0x60/0xb0 [ 112.907338][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.907354][ T6356] RIP: 0033:0x7ff7bbd8e9a9 [ 112.907370][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.907383][ T6356] RSP: 002b:00007ff7bcc81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.907399][ T6356] RAX: ffffffffffffffda RBX: 00007ff7bbfb5fa0 RCX: 00007ff7bbd8e9a9 [ 112.907411][ T6356] RDX: 0000000000000000 RSI: 000000004400ae8f RDI: 0000000000000005 [ 112.907421][ T6356] RBP: 00007ff7bcc81090 R08: 0000000000000000 R09: 0000000000000000 [ 112.907431][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.907440][ T6356] R13: 0000000000000000 R14: 00007ff7bbfb5fa0 R15: 00007ff7bc0dfa28 [ 112.907468][ T6356] [ 112.907474][ T6356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.956514][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 113.288494][ T980] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.305091][ T55] usb 1-1: device descriptor read/all, error -71 [ 113.451686][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 113.480243][ T980] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 113.515099][ T980] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 113.545378][ T980] usb 5-1: config 4 has no interface number 0 [ 113.593468][ T980] usb 5-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.648188][ T980] usb 5-1: config 4 interface 51 has no altsetting 0 [ 113.685196][ T980] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 113.704651][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.727026][ T980] usb 5-1: Product: syz [ 113.737832][ T980] usb 5-1: Manufacturer: syz [ 113.754584][ T980] usb 5-1: SerialNumber: syz [ 113.776976][ T980] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 113.883396][ T6369] FAULT_INJECTION: forcing a failure. [ 113.883396][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.915042][ T6369] CPU: 1 UID: 0 PID: 6369 Comm: syz.0.119 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 113.915067][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.915077][ T6369] Call Trace: [ 113.915084][ T6369] [ 113.915091][ T6369] dump_stack_lvl+0x189/0x250 [ 113.915116][ T6369] ? __pfx____ratelimit+0x10/0x10 [ 113.915135][ T6369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.915154][ T6369] ? __pfx__printk+0x10/0x10 [ 113.915176][ T6369] ? __might_fault+0xb0/0x130 [ 113.915209][ T6369] should_fail_ex+0x414/0x560 [ 113.915232][ T6369] _copy_from_user+0x2d/0xb0 [ 113.915255][ T6369] ___sys_sendmsg+0x158/0x2a0 [ 113.915275][ T6369] ? __pfx____sys_sendmsg+0x10/0x10 [ 113.915327][ T6369] ? __fget_files+0x2a/0x420 [ 113.915342][ T6369] ? __fget_files+0x3a0/0x420 [ 113.915367][ T6369] __sys_sendmmsg+0x227/0x430 [ 113.915389][ T6369] ? __pfx___sys_sendmmsg+0x10/0x10 [ 113.915402][ T6369] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 113.915448][ T6369] ? ksys_write+0x22a/0x250 [ 113.915472][ T6369] ? __pfx_ksys_write+0x10/0x10 [ 113.915490][ T6369] ? rcu_is_watching+0x15/0xb0 [ 113.915517][ T6369] __x64_sys_sendmmsg+0xa0/0xc0 [ 113.915535][ T6369] do_syscall_64+0xfa/0x3b0 [ 113.915552][ T6369] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.915567][ T6369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.915582][ T6369] ? clear_bhb_loop+0x60/0xb0 [ 113.915599][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.915614][ T6369] RIP: 0033:0x7f594338e9a9 [ 113.915629][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.915641][ T6369] RSP: 002b:00007f5944110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.915658][ T6369] RAX: ffffffffffffffda RBX: 00007f59435b5fa0 RCX: 00007f594338e9a9 [ 113.915669][ T6369] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000003 [ 113.915680][ T6369] RBP: 00007f5944110090 R08: 0000000000000000 R09: 0000000000000000 [ 113.915689][ T6369] R10: 000000000404c851 R11: 0000000000000246 R12: 0000000000000001 [ 113.915699][ T6369] R13: 0000000000000000 R14: 00007f59435b5fa0 R15: 00007f59436dfa28 [ 113.915726][ T6369] [ 114.654947][ T30] audit: type=1326 audit(1753531699.074:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7bbd8e9a9 code=0x0 [ 114.752433][ T6386] FAULT_INJECTION: forcing a failure. [ 114.752433][ T6386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.780194][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.2.123 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 114.780220][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.780230][ T6386] Call Trace: [ 114.780237][ T6386] [ 114.780244][ T6386] dump_stack_lvl+0x189/0x250 [ 114.780278][ T6386] ? __pfx____ratelimit+0x10/0x10 [ 114.780295][ T6386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.780313][ T6386] ? __pfx__printk+0x10/0x10 [ 114.780334][ T6386] ? __might_fault+0xb0/0x130 [ 114.780366][ T6386] should_fail_ex+0x414/0x560 [ 114.780388][ T6386] _copy_from_user+0x2d/0xb0 [ 114.780412][ T6386] ___sys_sendmsg+0x158/0x2a0 [ 114.780431][ T6386] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.780475][ T6386] ? __fget_files+0x2a/0x420 [ 114.780489][ T6386] ? __fget_files+0x3a0/0x420 [ 114.780509][ T6386] __x64_sys_sendmsg+0x19b/0x260 [ 114.780527][ T6386] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.780550][ T6386] ? __pfx_ksys_write+0x10/0x10 [ 114.780570][ T6386] ? rcu_is_watching+0x15/0xb0 [ 114.780594][ T6386] ? do_syscall_64+0xbe/0x3b0 [ 114.780617][ T6386] do_syscall_64+0xfa/0x3b0 [ 114.780634][ T6386] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.780652][ T6386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.780668][ T6386] ? clear_bhb_loop+0x60/0xb0 [ 114.780690][ T6386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.780706][ T6386] RIP: 0033:0x7f7ac858e9a9 [ 114.780721][ T6386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.780732][ T6386] RSP: 002b:00007f7ac948f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.780750][ T6386] RAX: ffffffffffffffda RBX: 00007f7ac87b5fa0 RCX: 00007f7ac858e9a9 [ 114.780762][ T6386] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 114.780771][ T6386] RBP: 00007f7ac948f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.780780][ T6386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.780788][ T6386] R13: 0000000000000000 R14: 00007f7ac87b5fa0 R15: 00007f7ac88dfa28 [ 114.780812][ T6386] [ 115.213678][ T6391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 115.319249][ T980] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.515319][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 115.628114][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.668265][ T980] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 115.717891][ T980] usb 4-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 115.826146][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.132'. [ 115.858712][ T980] usb 4-1: Product: syz [ 115.866453][ T980] usb 4-1: Manufacturer: syz [ 115.871702][ T980] usb 4-1: SerialNumber: syz [ 115.879480][ T980] usb 4-1: config 0 descriptor?? [ 115.895421][ T980] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 115.923330][ T980] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.944457][ T980] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 116.071487][ T24] usb 5-1: USB disconnect, device number 7 [ 116.099493][ T980] usb 4-1: media controller created [ 116.104413][ T6378] loop2: detected capacity change from 0 to 7 [ 116.127027][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.136412][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.161996][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.238719][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.249673][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.260419][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.268972][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.277663][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.286268][ T6378] ldm_validate_partition_table(): Disk read failed. [ 116.293398][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.306458][ T6417] FAULT_INJECTION: forcing a failure. [ 116.306458][ T6417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.321994][ T980] usb 4-1: selecting invalid altsetting 2 [ 116.329524][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.338319][ T6417] CPU: 1 UID: 0 PID: 6417 Comm: syz.2.134 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 116.338344][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.338352][ T6417] Call Trace: [ 116.338363][ T6417] [ 116.338371][ T6417] dump_stack_lvl+0x189/0x250 [ 116.338392][ T6417] ? __pfx____ratelimit+0x10/0x10 [ 116.338408][ T6417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.338425][ T6417] ? __pfx__printk+0x10/0x10 [ 116.338443][ T6417] ? __might_fault+0xb0/0x130 [ 116.338472][ T6417] should_fail_ex+0x414/0x560 [ 116.338492][ T6417] _copy_from_user+0x2d/0xb0 [ 116.338512][ T6417] ___sys_sendmsg+0x158/0x2a0 [ 116.338528][ T6417] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.338558][ T6417] ? __fget_files+0x2a/0x420 [ 116.338566][ T6417] ? __fget_files+0x3a0/0x420 [ 116.338579][ T6417] __sys_sendmmsg+0x227/0x430 [ 116.338601][ T6417] ? __pfx___sys_sendmmsg+0x10/0x10 [ 116.338609][ T6417] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 116.338637][ T6417] ? ksys_write+0x22a/0x250 [ 116.338650][ T6417] ? __pfx_ksys_write+0x10/0x10 [ 116.338660][ T6417] ? rcu_is_watching+0x15/0xb0 [ 116.338675][ T6417] __x64_sys_sendmmsg+0xa0/0xc0 [ 116.338685][ T6417] do_syscall_64+0xfa/0x3b0 [ 116.338695][ T6417] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.338705][ T6417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.338714][ T6417] ? clear_bhb_loop+0x60/0xb0 [ 116.338725][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.338735][ T6417] RIP: 0033:0x7f7ac858e9a9 [ 116.338745][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.338753][ T6417] RSP: 002b:00007f7ac946e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.338764][ T6417] RAX: ffffffffffffffda RBX: 00007f7ac87b6080 RCX: 00007f7ac858e9a9 [ 116.338770][ T6417] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 116.338776][ T6417] RBP: 00007f7ac946e090 R08: 0000000000000000 R09: 0000000000000000 [ 116.338781][ T6417] R10: 0000000000000bb8 R11: 0000000000000246 R12: 0000000000000001 [ 116.338787][ T6417] R13: 0000000000000000 R14: 00007f7ac87b6080 R15: 00007f7ac88dfa28 [ 116.338801][ T6417] [ 116.378559][ T5907] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 116.439092][ T980] set interface failed [ 116.594361][ T6378] Buffer I/O error on dev loop2, logical block 0, async page read [ 116.608610][ T6378] Dev loop2: unable to read RDB block 0 [ 116.617450][ T6378] loop2: unable to read partition table [ 116.777623][ T6378] loop2: partition table beyond EOD, truncated [ 116.789607][ T6378] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 116.848938][ T980] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 116.852488][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.856421][ T980] error writing reg: 0xff, val: 0x00 [ 116.948548][ T5907] usb 1-1: config 0 interface 0 has no altsetting 1 [ 117.005118][ T5907] usb 1-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 117.028556][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 117.037104][ T5907] usb 1-1: Product: syz [ 117.041842][ T5907] usb 1-1: Manufacturer: syz [ 117.046560][ T5907] usb 1-1: SerialNumber: syz [ 117.055335][ T5907] usb 1-1: config 0 descriptor?? [ 117.075141][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.117631][ T980] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 117.136509][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.222584][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.241183][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.298695][ T5963] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 117.468416][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 117.477256][ T5963] usb 5-1: device descriptor read/all, error -61 [ 117.614479][ T5963] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.798527][ T5963] usb 5-1: device descriptor read/64, error -71 [ 117.913404][ T5963] usb usb5-port1: attempt power cycle [ 117.965501][ T5907] usb 1-1: USB disconnect, device number 10 [ 118.100350][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.368560][ T5963] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 118.413333][ T5963] usb 5-1: device descriptor read/8, error -71 [ 118.678859][ T5963] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 118.721452][ T5963] usb 5-1: device descriptor read/8, error -71 [ 118.842487][ T5963] usb usb5-port1: unable to enumerate USB device [ 118.892012][ T5218] ldm_validate_partition_table(): Disk read failed. [ 118.903278][ T5218] Dev loop2: unable to read RDB block 0 [ 118.912517][ T5218] loop2: unable to read partition table [ 118.918970][ T5218] loop2: partition table beyond EOD, truncated [ 119.037769][ T980] usb 4-1: USB disconnect, device number 6 [ 119.135207][ T5218] ldm_validate_partition_table(): Disk read failed. [ 119.154486][ T5218] Dev loop2: unable to read RDB block 0 [ 119.196842][ T5218] loop2: unable to read partition table [ 119.211727][ T5218] loop2: partition table beyond EOD, truncated [ 119.411322][ T6453] No such timeout policy "syz1" [ 120.418532][ T5948] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.788508][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 120.795992][ T5948] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 120.807750][ T5948] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 120.840072][ T5948] usb 4-1: config 4 has no interface number 0 [ 120.865122][ T5948] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.914361][ T6469] netlink: 'syz.0.148': attribute type 10 has an invalid length. [ 120.924705][ T5948] usb 4-1: config 4 interface 51 has no altsetting 0 [ 120.947304][ T5948] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 120.957302][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.054591][ T5948] usb 4-1: Product: syz [ 121.059034][ T5948] usb 4-1: Manufacturer: syz [ 121.069283][ T5948] usb 4-1: SerialNumber: syz [ 121.080515][ T5948] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 121.468478][ T5963] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.728629][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 121.759852][ T5963] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 121.792068][ T5963] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 121.801565][ T5963] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 121.889646][ T5963] usb 1-1: Product: syz [ 121.950358][ T5963] usb 1-1: Manufacturer: syz [ 121.981646][ T5963] usb 1-1: SerialNumber: syz [ 122.280490][ T1584] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.288594][ T5963] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 122.321019][ T5963] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 122.350401][ T5963] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 122.698981][ T5963] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 122.742157][ T5963] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 122.789273][ T5963] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 122.814894][ T5963] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 122.836131][ T5963] usb 1-1: USB disconnect, device number 11 [ 122.877794][ T1584] usb 3-1: config 0 has no interfaces? [ 122.914028][ T5963] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 122.931951][ T5963] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 122.945733][ T5963] visor 1-1:1.0: device disconnected [ 122.966146][ T1584] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.996500][ T1584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.048140][ T1584] usb 3-1: Product: syz [ 123.078813][ T1584] usb 3-1: Manufacturer: syz [ 123.102893][ T1584] usb 3-1: SerialNumber: syz [ 123.169404][ T1584] usb 3-1: config 0 descriptor?? [ 123.228442][ T55] usb 4-1: USB disconnect, device number 7 [ 123.607066][ T6502] input: syz0 as /devices/virtual/input/input8 [ 123.641005][ T6498] tipc: Enabling of bearer rejected, failed to enable media [ 123.708260][ T6501] pimreg: entered allmulticast mode [ 123.723869][ T3564] syzkaller0: tun_net_xmit 76 [ 123.735410][ T3564] syzkaller0: tun_net_xmit 48 [ 123.746034][ T6502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.153'. [ 123.755761][ T1584] syzkaller0: tun_net_xmit 76 [ 123.779508][ T6502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.838831][ T1584] syzkaller0: tun_net_xmit 76 [ 124.896195][ T55] usb 3-1: USB disconnect, device number 5 [ 125.259537][ T1584] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 125.407603][ T6510] netlink: 'syz.1.157': attribute type 7 has an invalid length. [ 125.428589][ T6510] netlink: 'syz.1.157': attribute type 5 has an invalid length. [ 125.436352][ T1584] usb 1-1: Using ep0 maxpacket: 16 [ 125.468784][ T1584] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.482822][ T6510] netlink: 17 bytes leftover after parsing attributes in process `syz.1.157'. [ 125.505934][ T1584] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.527268][ T6513] loop8: detected capacity change from 0 to 7 [ 125.549596][ T1584] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.556765][ T6513] Dev loop8: unable to read RDB block 7 [ 125.563414][ T1584] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 125.573411][ T6513] loop8: unable to read partition table [ 125.580361][ T6513] loop8: partition table beyond EOD, truncated [ 125.587469][ T1584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.596327][ T6513] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 125.596327][ T6513] ) failed (rc=-5) [ 125.617568][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 125.634601][ T1584] usb 1-1: config 0 descriptor?? [ 126.109121][ T6523] __vm_enough_memory: pid: 6523, comm: syz.2.161, bytes: 4503599627366400 not enough memory for the allocation [ 126.284591][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.305792][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.331132][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.343201][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.354515][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.363114][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.383045][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.396688][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.407614][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 126.416679][ T6524] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 127.987840][ T1584] usbhid 1-1:0.0: can't add hid device: -71 [ 127.994490][ T1584] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 128.062255][ T1584] usb 1-1: USB disconnect, device number 12 [ 128.062482][ T6526] syz.2.162 (6526): drop_caches: 2 [ 128.156654][ T6515] erspan0: entered promiscuous mode [ 128.166877][ T6515] macvtap1: entered promiscuous mode [ 128.172606][ T6515] macvtap1: entered allmulticast mode [ 128.178272][ T6515] erspan0: entered allmulticast mode [ 128.304502][ T6531] input: syz0 as /devices/virtual/input/input9 [ 128.313814][ T6516] erspan0: left allmulticast mode [ 128.337474][ T6516] erspan0: left promiscuous mode [ 128.528707][ T1584] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 128.715542][ T55] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.821790][ T1584] usb 1-1: Using ep0 maxpacket: 16 [ 128.835211][ T1584] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 128.844173][ T1584] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 128.880453][ T55] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.889705][ T55] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.914990][ T1584] usb 1-1: config 4 has no interface number 0 [ 128.947243][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.977523][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 128.998843][ T1584] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.016798][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.053479][ T55] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.060605][ T1584] usb 1-1: config 4 interface 51 has no altsetting 0 [ 129.100120][ T55] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.142574][ T55] usb 2-1: Product: syz [ 129.280706][ T1584] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 129.320572][ T1584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.354561][ T55] usb 2-1: Manufacturer: syz [ 129.375228][ T1584] usb 1-1: Product: syz [ 129.380623][ T1584] usb 1-1: Manufacturer: syz [ 129.384971][ T55] cdc_wdm 2-1:1.0: skipping garbage [ 129.391287][ T55] cdc_wdm 2-1:1.0: skipping garbage [ 129.400186][ T55] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 129.407097][ T1584] usb 1-1: SerialNumber: syz [ 129.407511][ T55] cdc_wdm 2-1:1.0: Unknown control protocol [ 129.491392][ T1584] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 130.142549][ T980] usb 2-1: USB disconnect, device number 9 [ 130.174688][ T6557] block device autoloading is deprecated and will be removed. [ 130.196349][ T6557] syz.2.168: attempt to access beyond end of device [ 130.196349][ T6557] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 130.291346][ T6558] FAULT_INJECTION: forcing a failure. [ 130.291346][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 130.316341][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.3.169 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 130.316365][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.316374][ T6558] Call Trace: [ 130.316380][ T6558] [ 130.316387][ T6558] dump_stack_lvl+0x189/0x250 [ 130.316422][ T6558] ? __pfx____ratelimit+0x10/0x10 [ 130.316441][ T6558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.316458][ T6558] ? __pfx__printk+0x10/0x10 [ 130.316491][ T6558] ? __pfx___might_resched+0x10/0x10 [ 130.316513][ T6558] should_fail_ex+0x414/0x560 [ 130.316534][ T6558] should_failslab+0xa8/0x100 [ 130.316559][ T6558] kmem_cache_alloc_noprof+0x73/0x3c0 [ 130.316580][ T6558] ? ptlock_alloc+0x20/0x70 [ 130.316605][ T6558] ptlock_alloc+0x20/0x70 [ 130.316625][ T6558] pte_alloc_one+0x7d/0x170 [ 130.316646][ T6558] __pte_alloc+0x25/0x1a0 [ 130.316667][ T6558] __handle_mm_fault+0x4b8a/0x5620 [ 130.316709][ T6558] ? __pfx___handle_mm_fault+0x10/0x10 [ 130.316750][ T6558] ? __pfx___might_resched+0x10/0x10 [ 130.316773][ T6558] handle_mm_fault+0x40a/0x8e0 [ 130.316805][ T6558] __get_user_pages+0x1af4/0x30b0 [ 130.316861][ T6558] ? __pfx___get_user_pages+0x10/0x10 [ 130.316880][ T6558] ? __gup_longterm_locked+0xbf7/0x15b0 [ 130.316900][ T6558] ? down_read_killable+0x1d1/0x350 [ 130.316925][ T6558] __gup_longterm_locked+0xd66/0x15b0 [ 130.316958][ T6558] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 130.316980][ T6558] ? gup_fast_fallback+0x1afc/0x2260 [ 130.317004][ T6558] gup_fast_fallback+0x1cd4/0x2260 [ 130.317060][ T6558] ? __pfx_gup_fast_fallback+0x10/0x10 [ 130.317085][ T6558] ? preempt_schedule_irq+0xde/0x150 [ 130.317102][ T6558] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 130.317123][ T6558] ? pin_user_pages_fast+0x4d/0xb0 [ 130.317146][ T6558] iov_iter_extract_pages+0x35a/0x5e0 [ 130.317179][ T6558] extract_iter_to_sg+0xe46/0x24e0 [ 130.317207][ T6558] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 130.317225][ T6558] ? xxh64_update+0x453/0xcf0 [ 130.317249][ T6558] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 130.317267][ T6558] ? unpin_user_page+0xc9/0x1d0 [ 130.317283][ T6558] ? __pfx_unpin_user_page+0x10/0x10 [ 130.317312][ T6558] ? __asan_memset+0x22/0x50 [ 130.317330][ T6558] hash_sendmsg+0x4f4/0x11d0 [ 130.317365][ T6558] ? __pfx_hash_sendmsg+0x10/0x10 [ 130.317382][ T6558] __sock_sendmsg+0x21c/0x270 [ 130.317405][ T6558] __sys_sendto+0x3bd/0x520 [ 130.317429][ T6558] ? __pfx___sys_sendto+0x10/0x10 [ 130.317446][ T6558] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 130.317472][ T6558] ? __fget_files+0x3a0/0x420 [ 130.317487][ T6558] ? ksys_write+0x22a/0x250 [ 130.317500][ T6558] ? __pfx_ksys_write+0x10/0x10 [ 130.317510][ T6558] ? rcu_is_watching+0x15/0xb0 [ 130.317524][ T6558] __x64_sys_sendto+0xde/0x100 [ 130.317538][ T6558] do_syscall_64+0xfa/0x3b0 [ 130.317548][ T6558] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.317557][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.317567][ T6558] ? clear_bhb_loop+0x60/0xb0 [ 130.317578][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.317587][ T6558] RIP: 0033:0x7ff7bbd8e9a9 [ 130.317600][ T6558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.317608][ T6558] RSP: 002b:00007ff7bcc60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 130.317618][ T6558] RAX: ffffffffffffffda RBX: 00007ff7bbfb6080 RCX: 00007ff7bbd8e9a9 [ 130.317625][ T6558] RDX: fffffffffffffcf6 RSI: 00002000000002c0 RDI: 000000000000000a [ 130.317631][ T6558] RBP: 00007ff7bcc60090 R08: 0000000000000000 R09: 0000000000000000 [ 130.317637][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.317642][ T6558] R13: 0000000000000000 R14: 00007ff7bbfb6080 R15: 00007ff7bc0dfa28 [ 130.317657][ T6558] [ 130.712809][ T6562] syzkaller1: entered promiscuous mode [ 130.719617][ T6562] syzkaller1: entered allmulticast mode [ 131.209818][ T6572] netlink: 830 bytes leftover after parsing attributes in process `syz.3.173'. [ 131.332004][ T1584] usb 1-1: USB disconnect, device number 13 [ 132.208112][ T66] syzkaller0: tun_net_xmit 76 [ 132.219030][ T66] syzkaller0: tun_net_xmit 48 [ 132.228677][ T980] syzkaller0: tun_net_xmit 76 [ 132.282959][ T6583] loop2: detected capacity change from 0 to 8 [ 132.488708][ T5948] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 132.644999][ T5948] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 132.655540][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.666841][ T5948] usb 1-1: Product: syz [ 132.671916][ T5948] usb 1-1: Manufacturer: syz [ 132.691197][ T5948] usb 1-1: SerialNumber: syz [ 132.726446][ T5948] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 132.754366][ T980] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.875078][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883859][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.883513][ T980] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 133.923075][ T980] ath9k_htc: Failed to initialize the device [ 133.984402][ T980] usb 1-1: ath9k_htc: USB layer deinitialized [ 134.744453][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 135.150282][ T6597] vlan2: entered promiscuous mode [ 135.156938][ T6597] bond0: entered promiscuous mode [ 135.162670][ T6597] bond_slave_0: entered promiscuous mode [ 135.183031][ T6597] bond_slave_1: entered promiscuous mode [ 135.323958][ T6601] input: syz0 as /devices/virtual/input/input10 [ 135.567591][ T1584] usb 1-1: USB disconnect, device number 14 [ 135.611358][ T5963] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.198872][ T5963] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.240416][ T5963] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 136.252309][ T6613] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.266080][ T5963] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.287829][ T6613] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 136.306896][ T5963] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 136.342862][ T5963] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 136.397487][ T5963] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.404788][ T6616] FAULT_INJECTION: forcing a failure. [ 136.404788][ T6616] name failslab, interval 1, probability 0, space 0, times 0 [ 136.408542][ T5907] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.427535][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.437424][ T5963] usb 2-1: Product: syz [ 136.442214][ T5963] usb 2-1: Manufacturer: syz [ 136.471296][ T5963] cdc_wdm 2-1:1.0: skipping garbage [ 136.490776][ T5963] cdc_wdm 2-1:1.0: skipping garbage [ 136.505906][ T5963] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 136.507469][ T6616] CPU: 1 UID: 0 PID: 6616 Comm: syz.3.191 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 136.507496][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.507505][ T6616] Call Trace: [ 136.507516][ T6616] [ 136.507523][ T6616] dump_stack_lvl+0x189/0x250 [ 136.507548][ T6616] ? __pfx____ratelimit+0x10/0x10 [ 136.507566][ T6616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.507584][ T6616] ? __pfx__printk+0x10/0x10 [ 136.507609][ T6616] ? __pfx___might_resched+0x10/0x10 [ 136.507632][ T6616] should_fail_ex+0x414/0x560 [ 136.507654][ T6616] should_failslab+0xa8/0x100 [ 136.507678][ T6616] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 136.507700][ T6616] ? __alloc_skb+0x112/0x2d0 [ 136.507726][ T6616] __alloc_skb+0x112/0x2d0 [ 136.507752][ T6616] netlink_sendmsg+0x5c6/0xb30 [ 136.507783][ T6616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.507807][ T6616] ? aa_sock_msg_perm+0x94/0x160 [ 136.507827][ T6616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.507843][ T6616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.507865][ T6616] __sock_sendmsg+0x21c/0x270 [ 136.507887][ T6616] ____sys_sendmsg+0x505/0x830 [ 136.507908][ T6616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.507932][ T6616] ? import_iovec+0x74/0xa0 [ 136.507956][ T6616] ___sys_sendmsg+0x21f/0x2a0 [ 136.507974][ T6616] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.508022][ T6616] ? __fget_files+0x2a/0x420 [ 136.508036][ T6616] ? __fget_files+0x3a0/0x420 [ 136.508059][ T6616] __x64_sys_sendmsg+0x19b/0x260 [ 136.508077][ T6616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.508101][ T6616] ? __pfx_ksys_write+0x10/0x10 [ 136.508119][ T6616] ? rcu_is_watching+0x15/0xb0 [ 136.508142][ T6616] ? do_syscall_64+0xbe/0x3b0 [ 136.508171][ T6616] do_syscall_64+0xfa/0x3b0 [ 136.508188][ T6616] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.508204][ T6616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.508220][ T6616] ? clear_bhb_loop+0x60/0xb0 [ 136.508239][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.508255][ T6616] RIP: 0033:0x7ff7bbd8e9a9 [ 136.508268][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.508281][ T6616] RSP: 002b:00007ff7bcc81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.508298][ T6616] RAX: ffffffffffffffda RBX: 00007ff7bbfb5fa0 RCX: 00007ff7bbd8e9a9 [ 136.508309][ T6616] RDX: 0000000020004000 RSI: 0000200000000780 RDI: 0000000000000004 [ 136.508323][ T6616] RBP: 00007ff7bcc81090 R08: 0000000000000000 R09: 0000000000000000 [ 136.508332][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.508339][ T6616] R13: 0000000000000000 R14: 00007ff7bbfb5fa0 R15: 00007ff7bc0dfa28 [ 136.508361][ T6616] [ 136.807886][ T5963] cdc_wdm 2-1:1.0: Unknown control protocol [ 136.818966][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 136.825827][ T5907] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 136.834363][ T5907] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 136.848277][ T5907] usb 5-1: config 4 has no interface number 0 [ 136.860164][ T5907] usb 5-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.873711][ T5907] usb 5-1: config 4 interface 51 has no altsetting 0 [ 136.931558][ T5907] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 136.958740][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.025131][ T5907] usb 5-1: Product: syz [ 137.050697][ T5907] usb 5-1: Manufacturer: syz [ 137.055363][ T5907] usb 5-1: SerialNumber: syz [ 137.096601][ T5907] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 137.311115][ T980] usb 2-1: USB disconnect, device number 10 [ 137.463187][ T5907] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 137.598616][ T5963] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 137.631216][ T5907] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.640348][ T5907] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 137.692442][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 137.791347][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 137.808585][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 137.834427][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.869503][ T5963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.896310][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 137.947538][ T5963] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 137.957392][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.976930][ T5963] usb 4-1: Product: syz [ 137.984046][ T5963] usb 4-1: Manufacturer: syz [ 137.992012][ T5907] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.014218][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.032876][ T5907] usb 3-1: Product: syz [ 138.042980][ T5907] usb 3-1: Manufacturer: syz [ 138.065173][ T5963] usb 4-1: SerialNumber: syz [ 138.105775][ T5963] usb 4-1: config 0 descriptor?? [ 138.115863][ T5907] cdc_wdm 3-1:1.0: skipping garbage [ 138.134999][ T5907] cdc_wdm 3-1:1.0: skipping garbage [ 138.168635][ T5907] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 138.189382][ T5907] cdc_wdm 3-1:1.0: Unknown control protocol [ 138.540151][ T980] usb 3-1: USB disconnect, device number 6 [ 138.721363][ T5948] usb 5-1: USB disconnect, device number 12 [ 139.167579][ T6642] IPv6: sit1: Disabled Multicast RS [ 139.439973][ T6652] FAULT_INJECTION: forcing a failure. [ 139.439973][ T6652] name failslab, interval 1, probability 0, space 0, times 0 [ 139.494761][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.1.202 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 139.494785][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.494794][ T6652] Call Trace: [ 139.494801][ T6652] [ 139.494808][ T6652] dump_stack_lvl+0x189/0x250 [ 139.494841][ T6652] ? __pfx____ratelimit+0x10/0x10 [ 139.494860][ T6652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.494878][ T6652] ? __pfx__printk+0x10/0x10 [ 139.494904][ T6652] ? __pfx___might_resched+0x10/0x10 [ 139.494927][ T6652] should_fail_ex+0x414/0x560 [ 139.494948][ T6652] should_failslab+0xa8/0x100 [ 139.494973][ T6652] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 139.494994][ T6652] ? __alloc_skb+0x112/0x2d0 [ 139.495018][ T6652] __alloc_skb+0x112/0x2d0 [ 139.495040][ T6652] netlink_sendmsg+0x5c6/0xb30 [ 139.495073][ T6652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.495098][ T6652] ? aa_sock_msg_perm+0x94/0x160 [ 139.495119][ T6652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.495136][ T6652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.495159][ T6652] __sock_sendmsg+0x21c/0x270 [ 139.495180][ T6652] ____sys_sendmsg+0x505/0x830 [ 139.495200][ T6652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.495224][ T6652] ? import_iovec+0x74/0xa0 [ 139.495250][ T6652] ___sys_sendmsg+0x21f/0x2a0 [ 139.495267][ T6652] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.495319][ T6652] ? __fget_files+0x2a/0x420 [ 139.495333][ T6652] ? __fget_files+0x3a0/0x420 [ 139.495357][ T6652] __x64_sys_sendmsg+0x19b/0x260 [ 139.495375][ T6652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.495398][ T6652] ? __pfx_ksys_write+0x10/0x10 [ 139.495416][ T6652] ? rcu_is_watching+0x15/0xb0 [ 139.495440][ T6652] ? do_syscall_64+0xbe/0x3b0 [ 139.495462][ T6652] do_syscall_64+0xfa/0x3b0 [ 139.495479][ T6652] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.495494][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.495508][ T6652] ? clear_bhb_loop+0x60/0xb0 [ 139.495527][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.495542][ T6652] RIP: 0033:0x7f3fdd58e9a9 [ 139.495556][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.495567][ T6652] RSP: 002b:00007f3fde37d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.495583][ T6652] RAX: ffffffffffffffda RBX: 00007f3fdd7b5fa0 RCX: 00007f3fdd58e9a9 [ 139.495593][ T6652] RDX: 0000000010004044 RSI: 00002000000000c0 RDI: 0000000000000004 [ 139.495602][ T6652] RBP: 00007f3fde37d090 R08: 0000000000000000 R09: 0000000000000000 [ 139.495612][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.495621][ T6652] R13: 0000000000000000 R14: 00007f3fdd7b5fa0 R15: 00007f3fdd8dfa28 [ 139.495647][ T6652] [ 140.171936][ T6662] input: syz0 as /devices/virtual/input/input11 [ 140.468518][ T5907] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 140.597720][ T6649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.611575][ T1584] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.644180][ T980] usb 4-1: USB disconnect, device number 8 [ 140.709953][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.855962][ T6660] FAULT_INJECTION: forcing a failure. [ 140.855962][ T6660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.928688][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.1.204 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 140.928706][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.928712][ T6660] Call Trace: [ 140.928718][ T6660] [ 140.928723][ T6660] dump_stack_lvl+0x189/0x250 [ 140.928739][ T6660] ? __pfx____ratelimit+0x10/0x10 [ 140.928750][ T6660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.928760][ T6660] ? __pfx__printk+0x10/0x10 [ 140.928773][ T6660] ? __might_fault+0xb0/0x130 [ 140.928790][ T6660] should_fail_ex+0x414/0x560 [ 140.928803][ T6660] _copy_from_user+0x2d/0xb0 [ 140.928817][ T6660] ___sys_recvmsg+0x12e/0x510 [ 140.928830][ T6660] ? __pfx____sys_recvmsg+0x10/0x10 [ 140.928854][ T6660] ? __might_fault+0xb0/0x130 [ 140.928867][ T6660] do_recvmmsg+0x307/0x770 [ 140.928881][ T6660] ? __pfx_do_recvmmsg+0x10/0x10 [ 140.928896][ T6660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 140.928917][ T6660] __x64_sys_recvmmsg+0x190/0x240 [ 140.928927][ T6660] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 140.928935][ T6660] ? rcu_is_watching+0x15/0xb0 [ 140.928949][ T6660] ? do_syscall_64+0xbe/0x3b0 [ 140.928961][ T6660] do_syscall_64+0xfa/0x3b0 [ 140.928970][ T6660] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.928979][ T6660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.928988][ T6660] ? clear_bhb_loop+0x60/0xb0 [ 140.928999][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.929008][ T6660] RIP: 0033:0x7f3fdd58e9a9 [ 140.929018][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.929026][ T6660] RSP: 002b:00007f3fde37d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 140.929036][ T6660] RAX: ffffffffffffffda RBX: 00007f3fdd7b5fa0 RCX: 00007f3fdd58e9a9 [ 140.929043][ T6660] RDX: 040000000000026c RSI: 00002000000005c0 RDI: 0000000000000003 [ 140.929049][ T6660] RBP: 00007f3fde37d090 R08: 0000000000000000 R09: 0000000000000000 [ 140.929054][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.929060][ T6660] R13: 0000000000000000 R14: 00007f3fdd7b5fa0 R15: 00007f3fdd8dfa28 [ 140.929074][ T6660] [ 141.153679][ T5907] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 141.244980][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.262963][ T1584] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.376370][ T5907] usb 5-1: config 0 descriptor?? [ 141.398453][ T980] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.418530][ T1584] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.455086][ T1584] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.465742][ T1584] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 141.477530][ T1584] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 141.494950][ T6671] FAULT_INJECTION: forcing a failure. [ 141.494950][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 141.496947][ T1584] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.517936][ T6671] CPU: 1 UID: 0 PID: 6671 Comm: syz.2.209 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 141.517959][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.517968][ T6671] Call Trace: [ 141.517976][ T6671] [ 141.517982][ T6671] dump_stack_lvl+0x189/0x250 [ 141.518005][ T6671] ? __pfx____ratelimit+0x10/0x10 [ 141.518023][ T6671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.518039][ T6671] ? __pfx__printk+0x10/0x10 [ 141.518064][ T6671] ? __pfx___might_resched+0x10/0x10 [ 141.518087][ T6671] should_fail_ex+0x414/0x560 [ 141.518108][ T6671] should_failslab+0xa8/0x100 [ 141.518132][ T6671] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 141.518153][ T6671] ? __alloc_skb+0x112/0x2d0 [ 141.518176][ T6671] __alloc_skb+0x112/0x2d0 [ 141.518199][ T6671] netlink_sendmsg+0x5c6/0xb30 [ 141.518230][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.518246][ T1584] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.518254][ T6671] ? aa_sock_msg_perm+0x94/0x160 [ 141.518274][ T6671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.518288][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.518307][ T6671] __sock_sendmsg+0x21c/0x270 [ 141.518332][ T6671] ____sys_sendmsg+0x505/0x830 [ 141.518353][ T6671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.518377][ T6671] ? import_iovec+0x74/0xa0 [ 141.518402][ T6671] ___sys_sendmsg+0x21f/0x2a0 [ 141.518418][ T6671] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.518466][ T6671] ? __fget_files+0x2a/0x420 [ 141.518480][ T6671] ? __fget_files+0x3a0/0x420 [ 141.518504][ T6671] __x64_sys_sendmsg+0x19b/0x260 [ 141.518521][ T6671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.518545][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 141.518564][ T6671] ? rcu_is_watching+0x15/0xb0 [ 141.518587][ T6671] ? do_syscall_64+0xbe/0x3b0 [ 141.518608][ T6671] do_syscall_64+0xfa/0x3b0 [ 141.518624][ T6671] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.518640][ T6671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.518663][ T6671] ? clear_bhb_loop+0x60/0xb0 [ 141.518683][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.518698][ T6671] RIP: 0033:0x7f7ac858e9a9 [ 141.518713][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.518727][ T6671] RSP: 002b:00007f7ac948f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.518744][ T6671] RAX: ffffffffffffffda RBX: 00007f7ac87b5fa0 RCX: 00007f7ac858e9a9 [ 141.518756][ T6671] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 141.518766][ T6671] RBP: 00007f7ac948f090 R08: 0000000000000000 R09: 0000000000000000 [ 141.518776][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.518786][ T6671] R13: 0000000000000000 R14: 00007f7ac87b5fa0 R15: 00007f7ac88dfa28 [ 141.518812][ T6671] [ 141.558439][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 141.586258][ T1584] usb 1-1: Product: syz [ 141.597696][ T980] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 141.597723][ T980] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 141.597741][ T980] usb 4-1: config 4 has no interface number 0 [ 141.597780][ T980] usb 4-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.597804][ T980] usb 4-1: config 4 interface 51 has no altsetting 0 [ 141.606151][ T980] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 141.655073][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 141.661247][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.670799][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.676259][ T980] usb 4-1: Product: syz [ 141.702591][ T5907] usb 5-1: USB disconnect, device number 13 [ 141.706052][ T980] usb 4-1: Manufacturer: syz [ 141.738459][ T1584] usb 1-1: Manufacturer: syz [ 141.752253][ T980] usb 4-1: SerialNumber: syz [ 141.816789][ T1584] cdc_wdm 1-1:1.0: skipping garbage [ 141.865850][ T980] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -22 [ 141.926079][ T1584] cdc_wdm 1-1:1.0: skipping garbage [ 141.963518][ T1584] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 141.985476][ T1584] cdc_wdm 1-1:1.0: Unknown control protocol [ 142.337127][ T5907] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.520904][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.555072][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.596582][ T5907] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.626239][ T9] usb 1-1: USB disconnect, device number 15 [ 142.659122][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.707646][ T5907] usb 5-1: config 0 descriptor?? [ 142.828458][ T55] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 143.064736][ T55] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 143.086058][ T55] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 143.130354][ T55] usb 2-1: config 8 has no interface number 0 [ 143.156719][ T55] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 143.173415][ T5907] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 143.186634][ T55] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.256917][ T55] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 143.308541][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.364857][ T55] usb 2-1: Product: syz [ 143.384750][ T55] usb 2-1: Manufacturer: syz [ 143.407443][ T55] usb 2-1: SerialNumber: syz [ 143.661175][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.215'. [ 143.670617][ T5907] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 143.686594][ T6697] vlan2: entered promiscuous mode [ 143.762288][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.771631][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.788710][ T6699] delete_channel: no stack [ 143.809151][ T55] usb 2-1: USB disconnect, device number 11 [ 144.074137][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 144.914654][ T5907] usb 1-1: config index 0 descriptor too short (expected 19730, got 18) [ 144.971336][ T5907] usb 1-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 144.995715][ T5907] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 145.014082][ T9] usb 5-1: USB disconnect, device number 14 [ 145.041825][ T5907] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 145.056950][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.143724][ T5907] usb 1-1: Product: syz [ 145.173579][ T5907] usb 1-1: Manufacturer: syz [ 145.178233][ T5907] usb 1-1: SerialNumber: syz [ 145.220014][ T5907] usb 1-1: config 0 descriptor?? [ 145.227242][ T5928] usb 4-1: USB disconnect, device number 9 [ 145.273998][ T5907] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 145.550508][ T6712] loop4: detected capacity change from 0 to 7 [ 145.557762][ T5907] gspca_sn9c2028: read1 error -71 [ 145.576223][ T6712] Dev loop4: unable to read RDB block 7 [ 145.582351][ T5907] gspca_sn9c2028: read1 error -71 [ 145.596595][ T5907] gspca_sn9c2028: read1 error -71 [ 145.623602][ T5907] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 145.651066][ T5907] usb 1-1: USB disconnect, device number 16 [ 145.651292][ T6712] loop4: unable to read partition table [ 145.712521][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.216'. [ 145.726381][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.220'. [ 145.737949][ T6712] loop4: partition table beyond EOD, truncated [ 145.757608][ T6712] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 146.058180][ T6722] input: syz0 as /devices/virtual/input/input14 [ 146.328401][ T5928] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.490722][ T5928] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.507581][ T6731] FAULT_INJECTION: forcing a failure. [ 146.507581][ T6731] name failslab, interval 1, probability 0, space 0, times 0 [ 146.522602][ T5928] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.539472][ T5928] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.551404][ T6731] CPU: 1 UID: 0 PID: 6731 Comm: syz.0.227 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 146.551426][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.551437][ T6731] Call Trace: [ 146.551445][ T6731] [ 146.551453][ T6731] dump_stack_lvl+0x189/0x250 [ 146.551478][ T6731] ? __pfx____ratelimit+0x10/0x10 [ 146.551498][ T6731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.551517][ T6731] ? __pfx__printk+0x10/0x10 [ 146.551546][ T6731] ? __pfx___might_resched+0x10/0x10 [ 146.551565][ T6731] ? fs_reclaim_acquire+0x7d/0x100 [ 146.551586][ T6731] should_fail_ex+0x414/0x560 [ 146.551610][ T6731] should_failslab+0xa8/0x100 [ 146.551633][ T6731] __kmalloc_noprof+0xcb/0x4f0 [ 146.551654][ T6731] ? kfree+0x4d/0x440 [ 146.551671][ T6731] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.551698][ T6731] tomoyo_realpath_from_path+0xe3/0x5d0 [ 146.551721][ T6731] ? tomoyo_domain+0xd9/0x130 [ 146.551747][ T6731] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 146.551764][ T6731] tomoyo_path_number_perm+0x1e8/0x5a0 [ 146.551785][ T6731] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.551821][ T6731] ? __lock_acquire+0xab9/0xd20 [ 146.551942][ T6731] ? __fget_files+0x2a/0x420 [ 146.551970][ T6731] ? __fget_files+0x2a/0x420 [ 146.551983][ T6731] ? __fget_files+0x3a0/0x420 [ 146.551995][ T6731] ? __fget_files+0x2a/0x420 [ 146.552015][ T6731] security_file_ioctl+0xcb/0x2d0 [ 146.552043][ T6731] __se_sys_ioctl+0x47/0x170 [ 146.552067][ T6731] do_syscall_64+0xfa/0x3b0 [ 146.552085][ T6731] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.552103][ T6731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.552120][ T6731] ? clear_bhb_loop+0x60/0xb0 [ 146.552141][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.552157][ T6731] RIP: 0033:0x7f594338e9a9 [ 146.552174][ T6731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.552189][ T6731] RSP: 002b:00007f5944110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.552207][ T6731] RAX: ffffffffffffffda RBX: 00007f59435b5fa0 RCX: 00007f594338e9a9 [ 146.552227][ T6731] RDX: 0000200000000f00 RSI: 0000000000008946 RDI: 0000000000000004 [ 146.552239][ T6731] RBP: 00007f5944110090 R08: 0000000000000000 R09: 0000000000000000 [ 146.552250][ T6731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.552259][ T6731] R13: 0000000000000000 R14: 00007f59435b5fa0 R15: 00007f59436dfa28 [ 146.552283][ T6731] [ 146.552291][ T6731] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.828488][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 146.844884][ T5928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 146.868870][ T5928] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.877955][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.918533][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 146.968006][ T5928] usb 4-1: Product: syz [ 146.986608][ T5928] usb 4-1: Manufacturer: syz [ 147.044776][ T5928] cdc_wdm 4-1:1.0: skipping garbage [ 147.075625][ T5928] cdc_wdm 4-1:1.0: skipping garbage [ 147.081679][ T6736] FAULT_INJECTION: forcing a failure. [ 147.081679][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 147.102472][ T5928] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 147.108828][ T5928] cdc_wdm 4-1:1.0: Unknown control protocol [ 147.114329][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 147.165221][ T9] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 147.184584][ T6736] CPU: 1 UID: 0 PID: 6736 Comm: syz.0.229 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 147.184608][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.184619][ T6736] Call Trace: [ 147.184626][ T6736] [ 147.184634][ T6736] dump_stack_lvl+0x189/0x250 [ 147.184656][ T6736] ? __pfx____ratelimit+0x10/0x10 [ 147.184673][ T6736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.184690][ T6736] ? __pfx__printk+0x10/0x10 [ 147.184713][ T6736] ? __pfx___might_resched+0x10/0x10 [ 147.184730][ T6736] ? fs_reclaim_acquire+0x7d/0x100 [ 147.184752][ T6736] should_fail_ex+0x414/0x560 [ 147.184775][ T6736] should_failslab+0xa8/0x100 [ 147.184798][ T6736] __kmalloc_noprof+0xcb/0x4f0 [ 147.184819][ T6736] ? tomoyo_encode+0x28b/0x550 [ 147.184843][ T6736] tomoyo_encode+0x28b/0x550 [ 147.184867][ T6736] tomoyo_realpath_from_path+0x58d/0x5d0 [ 147.184886][ T6736] ? tomoyo_domain+0xd9/0x130 [ 147.184910][ T6736] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 147.184925][ T6736] tomoyo_path_number_perm+0x1e8/0x5a0 [ 147.184943][ T6736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.184976][ T6736] ? __lock_acquire+0xab9/0xd20 [ 147.185012][ T6736] ? __fget_files+0x2a/0x420 [ 147.185030][ T6736] ? __fget_files+0x2a/0x420 [ 147.185041][ T6736] ? __fget_files+0x3a0/0x420 [ 147.185054][ T6736] ? __fget_files+0x2a/0x420 [ 147.185073][ T6736] security_file_ioctl+0xcb/0x2d0 [ 147.185097][ T6736] __se_sys_ioctl+0x47/0x170 [ 147.185119][ T6736] do_syscall_64+0xfa/0x3b0 [ 147.185136][ T6736] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.185154][ T6736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.185179][ T6736] ? clear_bhb_loop+0x60/0xb0 [ 147.185199][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.185215][ T6736] RIP: 0033:0x7f594338e9a9 [ 147.185230][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.185244][ T6736] RSP: 002b:00007f5944110038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.185262][ T6736] RAX: ffffffffffffffda RBX: 00007f59435b5fa0 RCX: 00007f594338e9a9 [ 147.185273][ T6736] RDX: 0000200000000340 RSI: 0000000000008922 RDI: 0000000000000003 [ 147.185282][ T6736] RBP: 00007f5944110090 R08: 0000000000000000 R09: 0000000000000000 [ 147.185291][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.185299][ T6736] R13: 0000000000000000 R14: 00007f59435b5fa0 R15: 00007f59436dfa28 [ 147.185326][ T6736] [ 147.185344][ T6736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.194649][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 147.467916][ T9] usb 5-1: config 4 has no interface number 0 [ 147.478609][ T9] usb 5-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.491858][ T9] usb 5-1: config 4 interface 51 has no altsetting 0 [ 147.501682][ T9] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 147.511318][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.521444][ T9] usb 5-1: Product: syz [ 147.526266][ T9] usb 5-1: Manufacturer: syz [ 147.607635][ T9] usb 5-1: SerialNumber: syz [ 147.634700][ T9] cdc_eem 5-1:4.51: probe with driver cdc_eem failed with error -22 [ 148.009042][ T6754] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 148.078699][ T1584] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.091020][ T5907] usb 4-1: USB disconnect, device number 10 [ 148.238663][ T1584] usb 3-1: Using ep0 maxpacket: 16 [ 148.244273][ T1584] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.260423][ T1584] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.291869][ T1584] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 148.301180][ T1584] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.309615][ T1584] usb 3-1: Product: syz [ 148.316456][ T1584] usb 3-1: Manufacturer: syz [ 148.337198][ T1584] usb 3-1: SerialNumber: syz [ 148.344362][ T1584] usb 3-1: config 0 descriptor?? [ 149.047365][ T6773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.238'. [ 149.211497][ T6775] FAULT_INJECTION: forcing a failure. [ 149.211497][ T6775] name failslab, interval 1, probability 0, space 0, times 0 [ 149.228144][ T6775] CPU: 1 UID: 0 PID: 6775 Comm: syz.3.241 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 149.228165][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.228172][ T6775] Call Trace: [ 149.228177][ T6775] [ 149.228183][ T6775] dump_stack_lvl+0x189/0x250 [ 149.228198][ T6775] ? __pfx____ratelimit+0x10/0x10 [ 149.228209][ T6775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.228220][ T6775] ? __pfx__printk+0x10/0x10 [ 149.228235][ T6775] ? __pfx___might_resched+0x10/0x10 [ 149.228248][ T6775] should_fail_ex+0x414/0x560 [ 149.228261][ T6775] should_failslab+0xa8/0x100 [ 149.228276][ T6775] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 149.228289][ T6775] ? __alloc_skb+0x112/0x2d0 [ 149.228304][ T6775] __alloc_skb+0x112/0x2d0 [ 149.228329][ T6775] netlink_sendmsg+0x5c6/0xb30 [ 149.228357][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.228379][ T6775] ? aa_sock_msg_perm+0x94/0x160 [ 149.228398][ T6775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.228414][ T6775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.228437][ T6775] __sock_sendmsg+0x21c/0x270 [ 149.228460][ T6775] ____sys_sendmsg+0x505/0x830 [ 149.228481][ T6775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.228506][ T6775] ? import_iovec+0x74/0xa0 [ 149.228531][ T6775] ___sys_sendmsg+0x21f/0x2a0 [ 149.228550][ T6775] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.228601][ T6775] ? __fget_files+0x2a/0x420 [ 149.228615][ T6775] ? __fget_files+0x3a0/0x420 [ 149.228641][ T6775] __x64_sys_sendmsg+0x19b/0x260 [ 149.228660][ T6775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.228686][ T6775] ? __pfx_ksys_write+0x10/0x10 [ 149.228705][ T6775] ? rcu_is_watching+0x15/0xb0 [ 149.228727][ T6775] ? do_syscall_64+0xbe/0x3b0 [ 149.228749][ T6775] do_syscall_64+0xfa/0x3b0 [ 149.228765][ T6775] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.228781][ T6775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.228797][ T6775] ? clear_bhb_loop+0x60/0xb0 [ 149.228817][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.228832][ T6775] RIP: 0033:0x7ff7bbd8e9a9 [ 149.228848][ T6775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.228862][ T6775] RSP: 002b:00007ff7bcc81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.228880][ T6775] RAX: ffffffffffffffda RBX: 00007ff7bbfb5fa0 RCX: 00007ff7bbd8e9a9 [ 149.228892][ T6775] RDX: 0000000000004444 RSI: 0000200000000c00 RDI: 0000000000000003 [ 149.228902][ T6775] RBP: 00007ff7bcc81090 R08: 0000000000000000 R09: 0000000000000000 [ 149.228913][ T6775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.228923][ T6775] R13: 0000000000000000 R14: 00007ff7bbfb5fa0 R15: 00007ff7bc0dfa28 [ 149.228950][ T6775] [ 149.873149][ T980] usb 5-1: USB disconnect, device number 15 [ 149.907088][ T6779] FAULT_INJECTION: forcing a failure. [ 149.907088][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 149.921617][ T6778] FAULT_INJECTION: forcing a failure. [ 149.921617][ T6778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.953198][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz.0.242 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 149.953223][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.953234][ T6778] Call Trace: [ 149.953241][ T6778] [ 149.953248][ T6778] dump_stack_lvl+0x189/0x250 [ 149.953271][ T6778] ? __pfx____ratelimit+0x10/0x10 [ 149.953290][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.953309][ T6778] ? __pfx__printk+0x10/0x10 [ 149.953330][ T6778] ? __might_fault+0xb0/0x130 [ 149.953364][ T6778] should_fail_ex+0x414/0x560 [ 149.953387][ T6778] _copy_from_user+0x2d/0xb0 [ 149.953411][ T6778] ___sys_sendmsg+0x158/0x2a0 [ 149.953430][ T6778] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.953473][ T6778] ? __fget_files+0x2a/0x420 [ 149.953488][ T6778] ? __fget_files+0x3a0/0x420 [ 149.953513][ T6778] __x64_sys_sendmsg+0x19b/0x260 [ 149.953533][ T6778] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.953556][ T6778] ? __pfx_ksys_write+0x10/0x10 [ 149.953576][ T6778] ? rcu_is_watching+0x15/0xb0 [ 149.953601][ T6778] ? do_syscall_64+0xbe/0x3b0 [ 149.953623][ T6778] do_syscall_64+0xfa/0x3b0 [ 149.953649][ T6778] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.953666][ T6778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.953682][ T6778] ? clear_bhb_loop+0x60/0xb0 [ 149.953702][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.953718][ T6778] RIP: 0033:0x7f594338e9a9 [ 149.953734][ T6778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.953748][ T6778] RSP: 002b:00007f5944110038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.953767][ T6778] RAX: ffffffffffffffda RBX: 00007f59435b5fa0 RCX: 00007f594338e9a9 [ 149.953779][ T6778] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 149.953790][ T6778] RBP: 00007f5944110090 R08: 0000000000000000 R09: 0000000000000000 [ 149.953800][ T6778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.953810][ T6778] R13: 0000000000000000 R14: 00007f59435b5fa0 R15: 00007f59436dfa28 [ 149.953838][ T6778] [ 150.018591][ T6779] CPU: 0 UID: 0 PID: 6779 Comm: syz.1.244 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 150.018616][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 150.018626][ T6779] Call Trace: [ 150.018633][ T6779] [ 150.018641][ T6779] dump_stack_lvl+0x189/0x250 [ 150.018664][ T6779] ? __pfx____ratelimit+0x10/0x10 [ 150.018683][ T6779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.018701][ T6779] ? __pfx__printk+0x10/0x10 [ 150.018728][ T6779] ? __pfx___might_resched+0x10/0x10 [ 150.018751][ T6779] should_fail_ex+0x414/0x560 [ 150.018771][ T6779] ? __se_sys_add_key+0x269/0x400 [ 150.018791][ T6779] should_failslab+0xa8/0x100 [ 150.018820][ T6779] __kvmalloc_node_noprof+0x161/0x5f0 [ 150.018843][ T6779] ? __se_sys_add_key+0x269/0x400 [ 150.018862][ T6779] ? strncpy_from_user+0x150/0x290 [ 150.018881][ T6779] __se_sys_add_key+0x269/0x400 [ 150.018905][ T6779] ? __pfx___se_sys_add_key+0x10/0x10 [ 150.018934][ T6779] ? do_syscall_64+0xbe/0x3b0 [ 150.018956][ T6779] ? __x64_sys_add_key+0x20/0xc0 [ 150.018979][ T6779] do_syscall_64+0xfa/0x3b0 [ 150.018998][ T6779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.019012][ T6779] ? asm_sysvec_call_function_single+0x1a/0x20 [ 150.019028][ T6779] ? clear_bhb_loop+0x60/0xb0 [ 150.019046][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.019062][ T6779] RIP: 0033:0x7f3fdd58e9a9 [ 150.019077][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.019091][ T6779] RSP: 002b:00007f3fde37d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 150.019108][ T6779] RAX: ffffffffffffffda RBX: 00007f3fdd7b5fa0 RCX: 00007f3fdd58e9a9 [ 150.019120][ T6779] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000000 [ 150.019130][ T6779] RBP: 00007f3fde37d090 R08: 000000003de911c5 R09: 0000000000000000 [ 150.019140][ T6779] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 150.019150][ T6779] R13: 0000000000000000 R14: 00007f3fdd7b5fa0 R15: 00007f3fdd8dfa28 [ 150.019176][ T6779] [ 150.909359][ T6799] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 150.919404][ T6796] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 150.945874][ T6796] vlan2: entered allmulticast mode [ 150.951287][ T1584] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 150.976813][ T6796] veth1: entered allmulticast mode [ 150.995856][ T6802] FAULT_INJECTION: forcing a failure. [ 150.995856][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 151.033475][ T980] usb 3-1: USB disconnect, device number 7 [ 151.085359][ T6804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.252'. [ 151.132210][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.3.253 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 151.132236][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.132245][ T6802] Call Trace: [ 151.132253][ T6802] [ 151.132261][ T6802] dump_stack_lvl+0x189/0x250 [ 151.132286][ T6802] ? __pfx____ratelimit+0x10/0x10 [ 151.132305][ T6802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.132324][ T6802] ? __pfx__printk+0x10/0x10 [ 151.132350][ T6802] ? __pfx___might_resched+0x10/0x10 [ 151.132369][ T6802] ? fs_reclaim_acquire+0x7d/0x100 [ 151.132391][ T6802] should_fail_ex+0x414/0x560 [ 151.132414][ T6802] should_failslab+0xa8/0x100 [ 151.132439][ T6802] kmem_cache_alloc_noprof+0x73/0x3c0 [ 151.132460][ T6802] ? ep_insert+0x272/0x19e0 [ 151.132486][ T6802] ep_insert+0x272/0x19e0 [ 151.132518][ T6802] ? do_epoll_ctl+0x3c9/0xe90 [ 151.132535][ T6802] ? __pfx_ep_insert+0x10/0x10 [ 151.132552][ T6802] ? __pfx___mutex_lock+0x10/0x10 [ 151.132568][ T6802] ? rcu_is_watching+0x15/0xb0 [ 151.132598][ T6802] do_epoll_ctl+0x7f4/0xe90 [ 151.132621][ T6802] __x64_sys_epoll_ctl+0x163/0x1a0 [ 151.132641][ T6802] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 151.132657][ T6802] ? rcu_is_watching+0x15/0xb0 [ 151.132675][ T6802] ? do_syscall_64+0xbe/0x3b0 [ 151.132693][ T6802] do_syscall_64+0xfa/0x3b0 [ 151.132707][ T6802] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.132720][ T6802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.132733][ T6802] ? clear_bhb_loop+0x60/0xb0 [ 151.132749][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.132762][ T6802] RIP: 0033:0x7ff7bbd8e9a9 [ 151.132795][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.132807][ T6802] RSP: 002b:00007ff7bcc81038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 151.132822][ T6802] RAX: ffffffffffffffda RBX: 00007ff7bbfb5fa0 RCX: 00007ff7bbd8e9a9 [ 151.132832][ T6802] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 151.132840][ T6802] RBP: 00007ff7bcc81090 R08: 0000000000000000 R09: 0000000000000000 [ 151.132848][ T6802] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 151.132856][ T6802] R13: 0000000000000000 R14: 00007ff7bbfb5fa0 R15: 00007ff7bc0dfa28 [ 151.132877][ T6802] [ 151.147807][ T6806] program syz.2.254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.325399][ T6807] xt_TCPMSS: Only works on TCP SYN packets [ 151.436529][ T1584] usb 2-1: config 0 has no interfaces? [ 151.447007][ T1584] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 151.521035][ T6811] FAULT_INJECTION: forcing a failure. [ 151.521035][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 151.536144][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 151.574188][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz.3.257 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 151.574206][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.574212][ T6811] Call Trace: [ 151.574217][ T6811] [ 151.574222][ T6811] dump_stack_lvl+0x189/0x250 [ 151.574238][ T6811] ? __pfx____ratelimit+0x10/0x10 [ 151.574249][ T6811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.574260][ T6811] ? __pfx__printk+0x10/0x10 [ 151.574275][ T6811] ? __pfx___might_resched+0x10/0x10 [ 151.574287][ T6811] ? fs_reclaim_acquire+0x7d/0x100 [ 151.574299][ T6811] should_fail_ex+0x414/0x560 [ 151.574312][ T6811] should_failslab+0xa8/0x100 [ 151.574325][ T6811] __kmalloc_noprof+0xcb/0x4f0 [ 151.574337][ T6811] ? rds_message_alloc+0x47/0x1f0 [ 151.574351][ T6811] rds_message_alloc+0x47/0x1f0 [ 151.574362][ T6811] rds_sendmsg+0xb11/0x1f00 [ 151.574381][ T6811] ? __pfx_rds_sendmsg+0x10/0x10 [ 151.574391][ T6811] ? aa_sk_perm+0x81e/0x950 [ 151.574403][ T6811] ? __pfx_aa_sk_perm+0x10/0x10 [ 151.574411][ T6811] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 151.574425][ T6811] ? aa_sock_msg_perm+0x94/0x160 [ 151.574436][ T6811] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.574446][ T6811] ? __pfx_rds_sendmsg+0x10/0x10 [ 151.574458][ T6811] __sock_sendmsg+0x21c/0x270 [ 151.574472][ T6811] ____sys_sendmsg+0x505/0x830 [ 151.574484][ T6811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.574497][ T6811] ? import_iovec+0x74/0xa0 [ 151.574512][ T6811] ___sys_sendmsg+0x21f/0x2a0 [ 151.574528][ T6811] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.574555][ T6811] ? __fget_files+0x2a/0x420 [ 151.574563][ T6811] ? __fget_files+0x3a0/0x420 [ 151.574577][ T6811] __x64_sys_sendmsg+0x19b/0x260 [ 151.574587][ T6811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.574601][ T6811] ? __pfx_ksys_write+0x10/0x10 [ 151.574612][ T6811] ? rcu_is_watching+0x15/0xb0 [ 151.574625][ T6811] ? do_syscall_64+0xbe/0x3b0 [ 151.574638][ T6811] do_syscall_64+0xfa/0x3b0 [ 151.574647][ T6811] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.574657][ T6811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.574666][ T6811] ? clear_bhb_loop+0x60/0xb0 [ 151.574678][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.574687][ T6811] RIP: 0033:0x7ff7bbd8e9a9 [ 151.574696][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.574704][ T6811] RSP: 002b:00007ff7bcc81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.574715][ T6811] RAX: ffffffffffffffda RBX: 00007ff7bbfb5fa0 RCX: 00007ff7bbd8e9a9 [ 151.574722][ T6811] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 151.574728][ T6811] RBP: 00007ff7bcc81090 R08: 0000000000000000 R09: 0000000000000000 [ 151.574733][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.574739][ T6811] R13: 0000000000000000 R14: 00007ff7bbfb5fa0 R15: 00007ff7bc0dfa28 [ 151.574753][ T6811] [ 151.575670][ T1584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.944986][ T6818] FAULT_INJECTION: forcing a failure. [ 151.944986][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 151.957789][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.3.259 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 151.957810][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 151.957820][ T6818] Call Trace: [ 151.957827][ T6818] [ 151.957835][ T6818] dump_stack_lvl+0x189/0x250 [ 151.957859][ T6818] ? __pfx____ratelimit+0x10/0x10 [ 151.957879][ T6818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.957898][ T6818] ? __pfx__printk+0x10/0x10 [ 151.957926][ T6818] ? __pfx___might_resched+0x10/0x10 [ 151.957951][ T6818] should_fail_ex+0x414/0x560 [ 151.957974][ T6818] should_failslab+0xa8/0x100 [ 151.958000][ T6818] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 151.958024][ T6818] ? __alloc_skb+0x112/0x2d0 [ 151.958052][ T6818] __alloc_skb+0x112/0x2d0 [ 151.958079][ T6818] netlink_sendmsg+0x5c6/0xb30 [ 151.958112][ T6818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.958139][ T6818] ? aa_sock_msg_perm+0x94/0x160 [ 151.958159][ T6818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.958177][ T6818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.958200][ T6818] __sock_sendmsg+0x21c/0x270 [ 151.958224][ T6818] ____sys_sendmsg+0x505/0x830 [ 151.958246][ T6818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.958271][ T6818] ? import_iovec+0x74/0xa0 [ 151.958297][ T6818] ___sys_sendmsg+0x21f/0x2a0 [ 151.958330][ T6818] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.958375][ T6818] ? __fget_files+0x2a/0x420 [ 151.958388][ T6818] ? __fget_files+0x3a0/0x420 [ 151.958412][ T6818] __x64_sys_sendmsg+0x19b/0x260 [ 151.958431][ T6818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.958457][ T6818] ? __pfx_ksys_write+0x10/0x10 [ 151.958475][ T6818] ? rcu_is_watching+0x15/0xb0 [ 151.958499][ T6818] ? do_syscall_64+0xbe/0x3b0 [ 151.958521][ T6818] do_syscall_64+0xfa/0x3b0 [ 151.958545][ T6818] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.958561][ T6818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.958578][ T6818] ? clear_bhb_loop+0x60/0xb0 [ 151.958599][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.958615][ T6818] RIP: 0033:0x7ff7bbd8e9a9 [ 151.958630][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.958646][ T6818] RSP: 002b:00007ff7bcc81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.958664][ T6818] RAX: ffffffffffffffda RBX: 00007ff7bbfb5fa0 RCX: 00007ff7bbd8e9a9 [ 151.958677][ T6818] RDX: 0000000008060040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 151.958688][ T6818] RBP: 00007ff7bcc81090 R08: 0000000000000000 R09: 0000000000000000 [ 151.958698][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.958708][ T6818] R13: 0000000000000000 R14: 00007ff7bbfb5fa0 R15: 00007ff7bc0dfa28 [ 151.958736][ T6818] [ 152.457970][ T1584] usb 2-1: Product: syz [ 152.462669][ T1584] usb 2-1: Manufacturer: syz [ 152.467342][ T1584] usb 2-1: SerialNumber: syz [ 152.475408][ T1584] usb 2-1: config 0 descriptor?? [ 152.598097][ T6825] FAULT_INJECTION: forcing a failure. [ 152.598097][ T6825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.618209][ T6825] CPU: 0 UID: 0 PID: 6825 Comm: syz.2.262 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 152.618234][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 152.618242][ T6825] Call Trace: [ 152.618252][ T6825] [ 152.618277][ T6825] dump_stack_lvl+0x189/0x250 [ 152.618300][ T6825] ? __pfx____ratelimit+0x10/0x10 [ 152.618317][ T6825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.618334][ T6825] ? __pfx__printk+0x10/0x10 [ 152.618354][ T6825] ? __might_fault+0xb0/0x130 [ 152.618383][ T6825] should_fail_ex+0x414/0x560 [ 152.618405][ T6825] _copy_from_iter+0x1db/0x16f0 [ 152.618433][ T6825] ? policy_nodemask+0x27c/0x720 [ 152.618456][ T6825] ? __pfx__copy_from_iter+0x10/0x10 [ 152.618529][ T6825] ? set_page_refcounted+0xa0/0x1e0 [ 152.618551][ T6825] ? page_copy_sane+0x4e/0x280 [ 152.618571][ T6825] copy_page_from_iter+0xdd/0x170 [ 152.618594][ T6825] tun_get_user+0x1c4d/0x3ce0 [ 152.618619][ T6825] ? tun_get_user+0x693/0x3ce0 [ 152.618653][ T6825] ? aa_file_perm+0x11f/0xed0 [ 152.618670][ T6825] ? __pfx_tun_get_user+0x10/0x10 [ 152.618687][ T6825] ? aa_file_perm+0x11f/0xed0 [ 152.618702][ T6825] ? aa_file_perm+0x3e7/0xed0 [ 152.618732][ T6825] ? ref_tracker_alloc+0x318/0x460 [ 152.618748][ T6825] ? __lock_acquire+0xab9/0xd20 [ 152.618766][ T6825] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 152.618787][ T6825] ? tun_get+0x1c/0x2f0 [ 152.618813][ T6825] ? tun_get+0x1c/0x2f0 [ 152.618832][ T6825] ? tun_get+0x1c/0x2f0 [ 152.618857][ T6825] tun_chr_write_iter+0x113/0x200 [ 152.618881][ T6825] vfs_write+0x54b/0xa90 [ 152.618906][ T6825] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 152.618927][ T6825] ? __pfx_vfs_write+0x10/0x10 [ 152.618955][ T6825] ? __fget_files+0x2a/0x420 [ 152.618979][ T6825] ksys_write+0x145/0x250 [ 152.619002][ T6825] ? __pfx_ksys_write+0x10/0x10 [ 152.619021][ T6825] ? rcu_is_watching+0x15/0xb0 [ 152.619044][ T6825] ? do_syscall_64+0xbe/0x3b0 [ 152.619067][ T6825] do_syscall_64+0xfa/0x3b0 [ 152.619083][ T6825] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.619100][ T6825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.619114][ T6825] ? clear_bhb_loop+0x60/0xb0 [ 152.619134][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.619150][ T6825] RIP: 0033:0x7f7ac858d45f [ 152.619166][ T6825] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 152.619181][ T6825] RSP: 002b:00007f7ac948f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.619198][ T6825] RAX: ffffffffffffffda RBX: 00007f7ac87b5fa0 RCX: 00007f7ac858d45f [ 152.619210][ T6825] RDX: 000000000000004e RSI: 0000200000000340 RDI: 00000000000000c8 [ 152.619220][ T6825] RBP: 00007f7ac948f090 R08: 0000000000000000 R09: 0000000000000000 [ 152.619231][ T6825] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 152.619241][ T6825] R13: 0000000000000000 R14: 00007f7ac87b5fa0 R15: 00007f7ac88dfa28 [ 152.619270][ T6825] [ 153.093779][ T5907] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 153.174736][ T6835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.184996][ T6835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.258920][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 153.265873][ T5907] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 153.276296][ T5907] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 153.290022][ T5907] usb 1-1: config 4 has no interface number 0 [ 153.296151][ T5907] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.321541][ T5907] usb 1-1: config 4 interface 51 has no altsetting 0 [ 153.345567][ T5907] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 153.409345][ T980] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.431787][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.452464][ T5907] usb 1-1: Product: syz [ 153.470970][ T5907] usb 1-1: Manufacturer: syz [ 153.509865][ T5907] usb 1-1: SerialNumber: syz [ 153.566225][ T5907] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 153.588525][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 153.600456][ T980] usb 3-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 153.642547][ T980] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 153.690255][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.702248][ T980] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 153.728624][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.755126][ T980] usb 3-1: config 0 descriptor?? [ 153.770109][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 153.928499][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 153.938463][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 153.948923][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 153.959456][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 153.977917][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 153.995100][ T980] usb 3-1: string descriptor 0 read error: -71 [ 154.049868][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.054466][ T980] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 154.059004][ T10] usb 5-1: Product: syz [ 154.071197][ T10] usb 5-1: Manufacturer: syz [ 154.076801][ T10] usb 5-1: SerialNumber: syz [ 154.099567][ T10] usb 5-1: config 0 descriptor?? [ 154.105700][ T6840] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 154.120990][ T980] usb 3-1: USB disconnect, device number 8 [ 154.206433][ T10] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 154.215789][ T10] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 154.224774][ T10] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 154.232445][ T10] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 154.241282][ T10] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 154.686711][ T6856] x_tables: duplicate underflow at hook 2 [ 154.705673][ T10] usb 2-1: USB disconnect, device number 12 [ 154.883860][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 155.086146][ T6865] netlink: 372 bytes leftover after parsing attributes in process `syz.3.270'. [ 155.106022][ T6865] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 155.127881][ T10] usb 1-1: USB disconnect, device number 17 [ 155.159451][ T6871] netlink: 277 bytes leftover after parsing attributes in process `syz.3.270'. [ 155.475930][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.274'. [ 155.568476][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 155.741824][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.825134][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.839193][ T6894] FAULT_INJECTION: forcing a failure. [ 155.839193][ T6894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.839222][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.0.278 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 155.839242][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.839251][ T6894] Call Trace: [ 155.839256][ T6894] [ 155.839262][ T6894] dump_stack_lvl+0x189/0x250 [ 155.839285][ T6894] ? __pfx____ratelimit+0x10/0x10 [ 155.839303][ T6894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.839322][ T6894] ? __pfx__printk+0x10/0x10 [ 155.839354][ T6894] should_fail_ex+0x414/0x560 [ 155.839376][ T6894] _copy_from_user+0x2d/0xb0 [ 155.839399][ T6894] sctp_setsockopt+0x19f/0x1200 [ 155.839421][ T6894] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.839444][ T6894] do_sock_setsockopt+0x179/0x1b0 [ 155.839471][ T6894] __x64_sys_setsockopt+0x13f/0x1b0 [ 155.839499][ T6894] do_syscall_64+0xfa/0x3b0 [ 155.839516][ T6894] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.839533][ T6894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.839548][ T6894] ? clear_bhb_loop+0x60/0xb0 [ 155.839569][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.839584][ T6894] RIP: 0033:0x7f594338e9a9 [ 155.839599][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.839612][ T6894] RSP: 002b:00007f59411f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.839629][ T6894] RAX: ffffffffffffffda RBX: 00007f59435b6080 RCX: 00007f594338e9a9 [ 155.839641][ T6894] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000003 [ 155.839650][ T6894] RBP: 00007f59411f6090 R08: 0000000000000004 R09: 0000000000000000 [ 155.839660][ T6894] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 155.839670][ T6894] R13: 0000000000000000 R14: 00007f59435b6080 R15: 00007f59436dfa28 [ 155.839696][ T6894] [ 156.058081][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.072036][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.081192][ T10] usb 2-1: Product: syz [ 156.085594][ T10] usb 2-1: Manufacturer: syz [ 156.095787][ T10] usb 2-1: SerialNumber: syz [ 156.111668][ T10] usb 2-1: config 0 descriptor?? [ 156.226870][ T6898] FAULT_INJECTION: forcing a failure. [ 156.226870][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 156.306675][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 156.308467][ T6898] CPU: 1 UID: 0 PID: 6898 Comm: syz.3.279 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 156.308491][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.308501][ T6898] Call Trace: [ 156.308508][ T6898] [ 156.308515][ T6898] dump_stack_lvl+0x189/0x250 [ 156.308540][ T6898] ? __pfx____ratelimit+0x10/0x10 [ 156.308559][ T6898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.308578][ T6898] ? __pfx__printk+0x10/0x10 [ 156.308605][ T6898] ? __pfx___might_resched+0x10/0x10 [ 156.308623][ T6898] ? fs_reclaim_acquire+0x7d/0x100 [ 156.308644][ T6898] should_fail_ex+0x414/0x560 [ 156.308667][ T6898] should_failslab+0xa8/0x100 [ 156.308691][ T6898] __kmalloc_cache_noprof+0x70/0x3d0 [ 156.308711][ T6898] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 156.308737][ T6898] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 156.308763][ T6898] tcp_sendmsg_locked+0x4dc7/0x5650 [ 156.308787][ T6898] ? tcp_sendmsg_locked+0x4a1/0x5650 [ 156.308808][ T6898] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 156.308837][ T6898] ? look_up_lock_class+0x74/0x170 [ 156.308857][ T6898] ? register_lock_class+0x51/0x320 [ 156.308879][ T6898] ? __lock_acquire+0xab9/0xd20 [ 156.308906][ T6898] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 156.308923][ T6898] ? __local_bh_enable_ip+0x12d/0x1c0 [ 156.308945][ T6898] ? __local_bh_enable_ip+0x12d/0x1c0 [ 156.308976][ T6898] tcp_sendmsg+0x2f/0x50 [ 156.308994][ T6898] __sock_sendmsg+0x19c/0x270 [ 156.309017][ T6898] __sys_sendto+0x3bd/0x520 [ 156.309042][ T6898] ? __pfx___sys_sendto+0x10/0x10 [ 156.309065][ T6898] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 156.309096][ T6898] ? __fget_files+0x3a0/0x420 [ 156.309122][ T6898] ? ksys_write+0x22a/0x250 [ 156.309145][ T6898] ? __pfx_ksys_write+0x10/0x10 [ 156.309163][ T6898] ? rcu_is_watching+0x15/0xb0 [ 156.309191][ T6898] __x64_sys_sendto+0xde/0x100 [ 156.309216][ T6898] do_syscall_64+0xfa/0x3b0 [ 156.309233][ T6898] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.309250][ T6898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.309265][ T6898] ? clear_bhb_loop+0x60/0xb0 [ 156.309285][ T6898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.309301][ T6898] RIP: 0033:0x7ff7bbd8e9a9 [ 156.309316][ T6898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.309330][ T6898] RSP: 002b:00007ff7bcc60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 156.309348][ T6898] RAX: ffffffffffffffda RBX: 00007ff7bbfb6080 RCX: 00007ff7bbd8e9a9 [ 156.309360][ T6898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 156.309369][ T6898] RBP: 00007ff7bcc60090 R08: 0000200000e68000 R09: 0000000000000010 [ 156.309379][ T6898] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 156.309389][ T6898] R13: 0000000000000000 R14: 00007ff7bbfb6080 R15: 00007ff7bc0dfa28 [ 156.309416][ T6898] [ 156.485066][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.618485][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.618816][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.627192][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.679979][ T5513] mcba_usb 5-1:0.0 can0: bit-timing not yet defined [ 156.820743][ T6876] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.273'. [ 157.098217][ T10] usb 2-1: USB disconnect, device number 13 [ 157.119429][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 157.128570][ T980] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 157.156843][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.177853][ T5948] usb 5-1: USB disconnect, device number 16 [ 157.186087][ T5948] mcba_usb 5-1:0.0 can0: device disconnected [ 157.394397][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 157.422755][ T980] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 157.594297][ T980] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 157.634639][ T980] usb 1-1: config 4 has no interface number 0 [ 157.654770][ T980] usb 1-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.675641][ T980] usb 1-1: config 4 interface 51 has no altsetting 0 [ 157.834134][ T980] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 157.891365][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.905813][ T6932] netlink: 52 bytes leftover after parsing attributes in process `syz.4.286'. [ 157.934480][ T980] usb 1-1: Product: syz [ 157.958615][ T980] usb 1-1: Manufacturer: syz [ 157.986419][ T980] usb 1-1: SerialNumber: syz [ 158.075717][ T5948] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 158.116368][ T980] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -22 [ 158.163464][ T6935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.289'. [ 158.173768][ T6935] netlink: 60 bytes leftover after parsing attributes in process `syz.3.289'. [ 158.188469][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 158.294212][ T5948] usb 2-1: config 0 has no interfaces? [ 158.566860][ T5948] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 158.568472][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 158.596667][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.716116][ T5948] usb 2-1: Product: syz [ 158.741832][ T5948] usb 2-1: Manufacturer: syz [ 158.812894][ T5948] usb 2-1: SerialNumber: syz [ 158.845392][ T5948] usb 2-1: config 0 descriptor?? [ 159.632070][ T5948] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.830526][ T5948] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 159.840101][ T5948] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.871973][ T5948] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.970979][ T5948] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 160.047451][ T5948] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 160.076268][ T5948] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.101067][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.119616][ T5948] usb 4-1: Product: syz [ 160.159371][ T5948] usb 4-1: Manufacturer: syz [ 160.222357][ T980] usb 1-1: USB disconnect, device number 18 [ 160.286702][ T5948] cdc_wdm 4-1:1.0: skipping garbage [ 161.472967][ T5948] cdc_wdm 4-1:1.0: skipping garbage [ 161.504389][ T5948] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 161.532730][ T5928] usb 2-1: USB disconnect, device number 14 [ 161.561448][ T5948] cdc_wdm 4-1:1.0: Unknown control protocol [ 161.628591][ T6963] tipc: Started in network mode [ 161.645750][ T6963] tipc: Node identity 9690253e3de9, cluster identity 4711 [ 161.693630][ T6963] tipc: Enabled bearer , priority 0 [ 161.742917][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 161.762765][ T6964] syzkaller0: entered promiscuous mode [ 161.775112][ T9] usb 5-1: no configurations [ 161.798573][ T9] usb 5-1: can't read configurations, error -22 [ 161.830057][ T6964] syzkaller0: entered allmulticast mode [ 161.869299][ T6968] FAULT_INJECTION: forcing a failure. [ 161.869299][ T6968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.885937][ T6968] CPU: 0 UID: 0 PID: 6968 Comm: syz.4.295 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 161.885954][ T6968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.885960][ T6968] Call Trace: [ 161.885965][ T6968] [ 161.885970][ T6968] dump_stack_lvl+0x189/0x250 [ 161.885985][ T6968] ? __pfx____ratelimit+0x10/0x10 [ 161.885997][ T6968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.886007][ T6968] ? __pfx__printk+0x10/0x10 [ 161.886026][ T6968] should_fail_ex+0x414/0x560 [ 161.886039][ T6968] _copy_to_user+0x31/0xb0 [ 161.886053][ T6968] simple_read_from_buffer+0xe1/0x170 [ 161.886069][ T6968] proc_fail_nth_read+0x1df/0x250 [ 161.886081][ T6968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.886092][ T6968] ? rw_verify_area+0x258/0x650 [ 161.886103][ T6968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.886113][ T6968] vfs_read+0x1fd/0x980 [ 161.886129][ T6968] ? __pfx_vfs_read+0x10/0x10 [ 161.886140][ T6968] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.886150][ T6968] ? aa_sk_perm+0x81e/0x950 [ 161.886162][ T6968] ? __pfx_aa_sk_perm+0x10/0x10 [ 161.886176][ T6968] ksys_read+0x145/0x250 [ 161.886188][ T6968] ? __pfx_ksys_read+0x10/0x10 [ 161.886202][ T6968] ? do_syscall_64+0xbe/0x3b0 [ 161.886214][ T6968] do_syscall_64+0xfa/0x3b0 [ 161.886224][ T6968] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.886234][ T6968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.886243][ T6968] ? clear_bhb_loop+0x60/0xb0 [ 161.886254][ T6968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.886264][ T6968] RIP: 0033:0x7f7437f8d3bc [ 161.886274][ T6968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.886282][ T6968] RSP: 002b:00007f7438dce030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.886292][ T6968] RAX: ffffffffffffffda RBX: 00007f74381b5fa0 RCX: 00007f7437f8d3bc [ 161.886299][ T6968] RDX: 000000000000000f RSI: 00007f7438dce0a0 RDI: 0000000000000004 [ 161.886305][ T6968] RBP: 00007f7438dce090 R08: 0000000000000000 R09: 0000000000000000 [ 161.886311][ T6968] R10: 0000200000001740 R11: 0000000000000246 R12: 0000000000000001 [ 161.886316][ T6968] R13: 0000000000000000 R14: 00007f74381b5fa0 R15: 00007f74382dfa28 [ 161.886331][ T6968] [ 162.271838][ T6964] tipc: Resetting bearer [ 162.327334][ T5948] usb 4-1: USB disconnect, device number 11 [ 162.371355][ T6970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.296'. [ 162.402438][ T6964] tipc: Disabling bearer [ 162.602172][ T6979] FAULT_INJECTION: forcing a failure. [ 162.602172][ T6979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.615283][ T6982] FAULT_INJECTION: forcing a failure. [ 162.615283][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 162.615313][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.0.301 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 162.615330][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.615340][ T6982] Call Trace: [ 162.615346][ T6982] [ 162.615353][ T6982] dump_stack_lvl+0x189/0x250 [ 162.615374][ T6982] ? __pfx____ratelimit+0x10/0x10 [ 162.615392][ T6982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.615410][ T6982] ? __pfx__printk+0x10/0x10 [ 162.615435][ T6982] ? __pfx___might_resched+0x10/0x10 [ 162.615457][ T6982] should_fail_ex+0x414/0x560 [ 162.615479][ T6982] should_failslab+0xa8/0x100 [ 162.615504][ T6982] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 162.615527][ T6982] ? __alloc_skb+0x112/0x2d0 [ 162.615550][ T6982] __alloc_skb+0x112/0x2d0 [ 162.615576][ T6982] netlink_sendmsg+0x5c6/0xb30 [ 162.615608][ T6982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.615632][ T6982] ? aa_sock_msg_perm+0x94/0x160 [ 162.615652][ T6982] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.615669][ T6982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.615692][ T6982] __sock_sendmsg+0x21c/0x270 [ 162.615714][ T6982] ____sys_sendmsg+0x505/0x830 [ 162.615735][ T6982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.615759][ T6982] ? import_iovec+0x74/0xa0 [ 162.615784][ T6982] ___sys_sendmsg+0x21f/0x2a0 [ 162.615809][ T6982] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.615858][ T6982] ? __fget_files+0x2a/0x420 [ 162.615872][ T6982] ? __fget_files+0x3a0/0x420 [ 162.615896][ T6982] __x64_sys_sendmsg+0x19b/0x260 [ 162.615914][ T6982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.615938][ T6982] ? __pfx_ksys_write+0x10/0x10 [ 162.615957][ T6982] ? rcu_is_watching+0x15/0xb0 [ 162.615980][ T6982] ? do_syscall_64+0xbe/0x3b0 [ 162.616002][ T6982] do_syscall_64+0xfa/0x3b0 [ 162.616018][ T6982] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.616035][ T6982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.616051][ T6982] ? clear_bhb_loop+0x60/0xb0 [ 162.616070][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.616085][ T6982] RIP: 0033:0x7f594338e9a9 [ 162.616100][ T6982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.616113][ T6982] RSP: 002b:00007f5944110038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.616131][ T6982] RAX: ffffffffffffffda RBX: 00007f59435b5fa0 RCX: 00007f594338e9a9 [ 162.616142][ T6982] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 162.616153][ T6982] RBP: 00007f5944110090 R08: 0000000000000000 R09: 0000000000000000 [ 162.616162][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.616171][ T6982] R13: 0000000000000000 R14: 00007f59435b5fa0 R15: 00007f59436dfa28 [ 162.616198][ T6982] [ 162.768445][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 162.773463][ T6979] CPU: 1 UID: 0 PID: 6979 Comm: syz.2.300 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 162.773487][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.773497][ T6979] Call Trace: [ 162.773504][ T6979] [ 162.773510][ T6979] dump_stack_lvl+0x189/0x250 [ 162.773545][ T6979] ? __pfx____ratelimit+0x10/0x10 [ 162.773564][ T6979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.773582][ T6979] ? __pfx__printk+0x10/0x10 [ 162.773603][ T6979] ? __might_fault+0xb0/0x130 [ 162.773635][ T6979] should_fail_ex+0x414/0x560 [ 162.773658][ T6979] _copy_from_iter+0x1db/0x16f0 [ 162.773687][ T6979] ? policy_nodemask+0x27c/0x720 [ 162.773709][ T6979] ? __pfx__copy_from_iter+0x10/0x10 [ 162.773734][ T6979] ? set_page_refcounted+0xa0/0x1e0 [ 162.773755][ T6979] ? page_copy_sane+0x4e/0x280 [ 162.773776][ T6979] copy_page_from_iter+0xdd/0x170 [ 162.773800][ T6979] tun_get_user+0x1c4d/0x3ce0 [ 162.773823][ T6979] ? tun_get_user+0x693/0x3ce0 [ 162.773856][ T6979] ? aa_file_perm+0x11f/0xed0 [ 162.773874][ T6979] ? __pfx_tun_get_user+0x10/0x10 [ 162.773892][ T6979] ? aa_file_perm+0x11f/0xed0 [ 162.773909][ T6979] ? aa_file_perm+0x3e7/0xed0 [ 162.773939][ T6979] ? ref_tracker_alloc+0x318/0x460 [ 162.773955][ T6979] ? __lock_acquire+0xab9/0xd20 [ 162.773973][ T6979] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 162.773995][ T6979] ? tun_get+0x1c/0x2f0 [ 162.774020][ T6979] ? tun_get+0x1c/0x2f0 [ 162.774038][ T6979] ? tun_get+0x1c/0x2f0 [ 162.774062][ T6979] tun_chr_write_iter+0x113/0x200 [ 162.774084][ T6979] vfs_write+0x54b/0xa90 [ 162.774109][ T6979] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 162.774130][ T6979] ? __pfx_vfs_write+0x10/0x10 [ 162.774159][ T6979] ? __fget_files+0x2a/0x420 [ 162.774182][ T6979] ksys_write+0x145/0x250 [ 162.774204][ T6979] ? __pfx_ksys_write+0x10/0x10 [ 162.774221][ T6979] ? rcu_is_watching+0x15/0xb0 [ 162.774245][ T6979] ? do_syscall_64+0xbe/0x3b0 [ 162.774267][ T6979] do_syscall_64+0xfa/0x3b0 [ 162.774283][ T6979] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.774299][ T6979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.774314][ T6979] ? clear_bhb_loop+0x60/0xb0 [ 162.774334][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.774350][ T6979] RIP: 0033:0x7f7ac858d45f [ 162.774365][ T6979] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 162.774379][ T6979] RSP: 002b:00007f7ac948f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 162.774396][ T6979] RAX: ffffffffffffffda RBX: 00007f7ac87b5fa0 RCX: 00007f7ac858d45f [ 162.774408][ T6979] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 00000000000000c8 [ 162.774418][ T6979] RBP: 00007f7ac948f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.774428][ T6979] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 162.774437][ T6979] R13: 0000000000000000 R14: 00007f7ac87b5fa0 R15: 00007f7ac88dfa28 [ 162.774463][ T6979] [ 163.268559][ T5963] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.370014][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 163.468789][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.479607][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 163.619146][ T5928] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 163.632955][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.648424][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.661677][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 163.671119][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 163.679997][ T9] usb 5-1: Product: syz [ 163.684657][ T9] usb 5-1: Manufacturer: syz [ 163.743406][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 163.786375][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 163.793035][ T5928] usb 1-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 163.820661][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 163.828656][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 163.853228][ T5963] usb 2-1: config 0 has no interfaces? [ 163.867961][ T5963] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 163.877696][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.886471][ T5963] usb 2-1: Product: syz [ 163.891027][ T5963] usb 2-1: Manufacturer: syz [ 163.893039][ T5928] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.895635][ T5963] usb 2-1: SerialNumber: syz [ 163.979303][ T980] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.051010][ T9] usb 5-1: USB disconnect, device number 18 [ 164.082946][ T5963] usb 2-1: config 0 descriptor?? [ 164.096162][ T5928] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.161457][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 164.167391][ T5928] usb 1-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 164.193166][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.205942][ T5928] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 164.215409][ T980] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 164.228673][ T980] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 164.250014][ T980] usb 3-1: config 4 has no interface number 0 [ 164.256325][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.272533][ T980] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.289232][ T5928] usb 1-1: config 0 descriptor?? [ 164.349879][ T980] usb 3-1: config 4 interface 51 has no altsetting 0 [ 164.542511][ T980] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 164.563781][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.584698][ T980] usb 3-1: Product: syz [ 164.592157][ T980] usb 3-1: Manufacturer: syz [ 164.596967][ T980] usb 3-1: SerialNumber: syz [ 164.623899][ T980] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22 [ 164.694236][ T6995] FAULT_INJECTION: forcing a failure. [ 164.694236][ T6995] name failslab, interval 1, probability 0, space 0, times 0 [ 164.710395][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.4.305 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 164.710413][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.710420][ T6995] Call Trace: [ 164.710424][ T6995] [ 164.710429][ T6995] dump_stack_lvl+0x189/0x250 [ 164.710455][ T6995] ? __pfx____ratelimit+0x10/0x10 [ 164.710467][ T6995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.710477][ T6995] ? __pfx__printk+0x10/0x10 [ 164.710493][ T6995] ? __pfx___might_resched+0x10/0x10 [ 164.710507][ T6995] should_fail_ex+0x414/0x560 [ 164.710520][ T6995] should_failslab+0xa8/0x100 [ 164.710535][ T6995] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 164.710548][ T6995] ? __alloc_skb+0x112/0x2d0 [ 164.710564][ T6995] __alloc_skb+0x112/0x2d0 [ 164.710578][ T6995] netlink_sendmsg+0x5c6/0xb30 [ 164.710597][ T6995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.710614][ T6995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.710627][ T6995] __sock_sendmsg+0x21c/0x270 [ 164.710640][ T6995] ____sys_sendmsg+0x505/0x830 [ 164.710653][ T6995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.710667][ T6995] ? import_iovec+0x74/0xa0 [ 164.710681][ T6995] ___sys_sendmsg+0x21f/0x2a0 [ 164.710695][ T6995] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.710723][ T6995] ? __fget_files+0x2a/0x420 [ 164.710732][ T6995] ? __fget_files+0x3a0/0x420 [ 164.710745][ T6995] __x64_sys_sendmsg+0x19b/0x260 [ 164.710756][ T6995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.710770][ T6995] ? __pfx_ksys_write+0x10/0x10 [ 164.710781][ T6995] ? rcu_is_watching+0x15/0xb0 [ 164.710795][ T6995] ? do_syscall_64+0xbe/0x3b0 [ 164.710808][ T6995] do_syscall_64+0xfa/0x3b0 [ 164.710817][ T6995] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.710827][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.710837][ T6995] ? clear_bhb_loop+0x60/0xb0 [ 164.710849][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.710858][ T6995] RIP: 0033:0x7f7437f8e9a9 [ 164.710868][ T6995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.710876][ T6995] RSP: 002b:00007f7438dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.710886][ T6995] RAX: ffffffffffffffda RBX: 00007f74381b5fa0 RCX: 00007f7437f8e9a9 [ 164.710893][ T6995] RDX: 0000000004000044 RSI: 0000200000000000 RDI: 0000000000000007 [ 164.710899][ T6995] RBP: 00007f7438dce090 R08: 0000000000000000 R09: 0000000000000000 [ 164.710905][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.710911][ T6995] R13: 0000000000000000 R14: 00007f74381b5fa0 R15: 00007f74382dfa28 [ 164.710925][ T6995] [ 165.576992][ T7006] x_tables: duplicate underflow at hook 3 [ 165.627441][ T7006] syz.3.308 (7006) used greatest stack depth: 20040 bytes left [ 169.814166][ C1] hrtimer: interrupt took 4058778938 ns [ 169.868350][ C0] sched: DL replenish lagged too much [ 274.898288][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 274.905378][ C0] rcu: 1-...!: (1 GPs behind) idle=a8c4/1/0x4000000000000000 softirq=25849/25850 fqs=1 [ 274.915930][ C0] rcu: (detected by 0, t=10502 jiffies, g=19693, q=438 ncpus=2) [ 274.923683][ C0] Sending NMI from CPU 0 to CPUs 1: [ 274.923729][ C1] NMI backtrace for cpu 1 [ 274.923821][ C1] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:6 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 274.923841][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.923856][ C1] Workqueue: bat_events batadv_nc_worker [ 274.923878][ C1] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 274.923902][ C1] Code: b8 8d e8 0e 3e e4 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d [ 274.923916][ C1] RSP: 0018:ffffc90000a07710 EFLAGS: 00000046 [ 274.923929][ C1] RAX: ffffffff81ae78e7 RBX: ffff8880b8727c88 RCX: ffffffff81ae7900 [ 274.923941][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa1ddf0 [ 274.923950][ C1] RBP: ffffc90000a07868 R08: ffff88803118715f R09: 1ffff11006230e2b [ 274.923962][ C1] R10: dffffc0000000000 R11: ffffed1006230e2c R12: ffff888031187340 [ 274.923973][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 274.923982][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 274.923994][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.924005][ C1] CR2: 000000110c3634c3 CR3: 0000000077604000 CR4: 00000000003526f0 [ 274.924018][ C1] Call Trace: [ 274.924026][ C1] [ 274.924034][ C1] __hrtimer_run_queues+0x590/0xc60 [ 274.924062][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 274.924078][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 274.924105][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 274.924133][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 274.924153][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 274.924169][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.924186][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 274.924201][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 94 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 274.924213][ C1] RSP: 0018:ffffc90000a07a98 EFLAGS: 00000206 [ 274.924225][ C1] RAX: 40b4e4cd436d5b00 RBX: 0000000000000000 RCX: 40b4e4cd436d5b00 [ 274.924236][ C1] RDX: 0000000000000000 RSI: ffffffff8db845d7 RDI: ffffffff8be28dc0 [ 274.924264][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 274.924274][ C1] R10: ffffc90000a07c58 R11: ffffffff81acfe50 R12: 0000000000000002 [ 274.924284][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 274.924296][ C1] ? unwind_next_frame+0xa5/0x2390 [ 274.924312][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.924333][ C1] ? unwind_next_frame+0xa5/0x2390 [ 274.924357][ C1] ? unwind_next_frame+0xa5/0x2390 [ 274.924373][ C1] ? batadv_nc_worker+0x328/0x610 [ 274.924386][ C1] ? unwind_next_frame+0xa5/0x2390 [ 274.924402][ C1] unwind_next_frame+0xc2/0x2390 [ 274.924417][ C1] ? unwind_next_frame+0xa5/0x2390 [ 274.924435][ C1] ? unwind_next_frame+0xa5/0x2390 [ 274.924452][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 274.924468][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.924488][ C1] arch_stack_walk+0x11c/0x150 [ 274.924509][ C1] ? batadv_nc_worker+0x328/0x610 [ 274.924525][ C1] stack_trace_save+0x9c/0xe0 [ 274.924544][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 274.924567][ C1] kasan_save_stack+0x3e/0x60 [ 274.924585][ C1] ? kasan_save_stack+0x3e/0x60 [ 274.924601][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 274.924616][ C1] ? call_rcu+0x157/0x9c0 [ 274.924633][ C1] ? sctp_do_sm+0x996/0x5a20 [ 274.924654][ C1] ? sctp_endpoint_bh_rcv+0x591/0x7e0 [ 274.924674][ C1] ? sctp_rcv+0x1ca6/0x2490 [ 274.924695][ C1] ? sctp6_rcv+0x39/0x70 [ 274.924714][ C1] ? ip6_protocol_deliver_rcu+0xe08/0x15c0 [ 274.924729][ C1] ? ip6_input_finish+0xde/0x190 [ 274.924741][ C1] ? NF_HOOK+0x309/0x3a0 [ 274.924753][ C1] ? ip6_input+0x16a/0x270 [ 274.924765][ C1] ? NF_HOOK+0x309/0x3a0 [ 274.924777][ C1] ? __netif_receive_skb+0xd3/0x380 [ 274.924794][ C1] ? process_backlog+0x60e/0x14f0 [ 274.924812][ C1] ? __napi_poll+0xc4/0x480 [ 274.924828][ C1] ? net_rx_action+0x707/0xe30 [ 274.924845][ C1] ? handle_softirqs+0x286/0x870 [ 274.924860][ C1] ? do_softirq+0xec/0x180 [ 274.924874][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 274.924890][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 274.924904][ C1] ? batadv_nc_worker+0x328/0x610 [ 274.924933][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 274.924948][ C1] ? __pfx_sctp_transport_destroy_rcu+0x10/0x10 [ 274.924965][ C1] call_rcu+0x157/0x9c0 [ 274.924984][ C1] ? debug_object_assert_init+0x20e/0x380 [ 274.925001][ C1] ? __pfx_call_rcu+0x10/0x10 [ 274.925019][ C1] ? sctp_packet_free+0x15d/0x1a0 [ 274.925044][ C1] sctp_do_sm+0x996/0x5a20 [ 274.925059][ C1] ? stack_depot_save_flags+0x40/0x900 [ 274.925075][ C1] ? NF_HOOK+0x261/0x3a0 [ 274.925088][ C1] ? handle_softirqs+0x286/0x870 [ 274.925107][ C1] ? __pfx_sctp_do_sm+0x10/0x10 [ 274.925121][ C1] ? sctp6_rcv+0x39/0x70 [ 274.925139][ C1] ? NF_HOOK+0x309/0x3a0 [ 274.925151][ C1] ? ip6_input+0x16a/0x270 [ 274.925181][ C1] ? sctp_inq_pop+0xc46/0x1010 [ 274.925196][ C1] ? sctp_auth_recv_cid+0x75/0x230 [ 274.925216][ C1] sctp_endpoint_bh_rcv+0x591/0x7e0 [ 274.925242][ C1] sctp_rcv+0x1ca6/0x2490 [ 274.925271][ C1] ? __pfx_sctp_rcv+0x10/0x10 [ 274.925293][ C1] ? raw6_local_deliver+0x9b3/0xa50 [ 274.925309][ C1] ? ip6t_do_table+0x1376/0x1560 [ 274.925330][ C1] ? raw6_local_deliver+0x15d/0xa50 [ 274.925346][ C1] ? __pfx_raw6_local_deliver+0x10/0x10 [ 274.925362][ C1] ? __pfx_sctp6_rcv+0x10/0x10 [ 274.925381][ C1] sctp6_rcv+0x39/0x70 [ 274.925399][ C1] ip6_protocol_deliver_rcu+0xe08/0x15c0 [ 274.925426][ C1] ip6_input_finish+0xde/0x190 [ 274.925442][ C1] NF_HOOK+0x309/0x3a0 [ 274.925456][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 274.925470][ C1] ? NF_HOOK+0x9a/0x3a0 [ 274.925482][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 274.925496][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 274.925515][ C1] ip6_input+0x16a/0x270 [ 274.925527][ C1] ? ip6_input+0x23/0x270 [ 274.925542][ C1] NF_HOOK+0x309/0x3a0 [ 274.925553][ C1] ? skb_orphan+0xaf/0xd0 [ 274.925567][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 274.925580][ C1] ? NF_HOOK+0x9a/0x3a0 [ 274.925592][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 274.925606][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 274.925624][ C1] __netif_receive_skb+0xd3/0x380 [ 274.925647][ C1] ? process_backlog+0x2d5/0x14f0 [ 274.925667][ C1] process_backlog+0x60e/0x14f0 [ 274.925693][ C1] ? __pfx_process_backlog+0x10/0x10 [ 274.925713][ C1] ? do_raw_spin_lock+0x121/0x290 [ 274.925735][ C1] __napi_poll+0xc4/0x480 [ 274.925751][ C1] ? net_rx_action+0x46d/0xe30 [ 274.925770][ C1] net_rx_action+0x707/0xe30 [ 274.925789][ C1] ? __lock_acquire+0xab9/0xd20 [ 274.925810][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 274.925830][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 274.925849][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 274.925873][ C1] handle_softirqs+0x286/0x870 [ 274.925890][ C1] ? do_softirq+0xec/0x180 [ 274.925908][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 274.925926][ C1] ? __common_interrupt+0x163/0x250 [ 274.925940][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 274.925956][ C1] do_softirq+0xec/0x180 [ 274.925970][ C1] [ 274.925975][ C1] [ 274.925981][ C1] ? __pfx_do_softirq+0x10/0x10 [ 274.925996][ C1] ? __lock_acquire+0xab9/0xd20 [ 274.926014][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 274.926028][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 274.926044][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.926062][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 274.926082][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 274.926096][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 274.926113][ C1] batadv_nc_purge_paths+0x318/0x3b0 [ 274.926134][ C1] batadv_nc_worker+0x328/0x610 [ 274.926149][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 274.926167][ C1] process_scheduled_works+0xae1/0x17b0 [ 274.926197][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.926221][ C1] worker_thread+0x8a0/0xda0 [ 274.926239][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 274.926258][ C1] ? __kthread_parkme+0x7b/0x200 [ 274.926280][ C1] kthread+0x711/0x8a0 [ 274.926301][ C1] ? __pfx_worker_thread+0x10/0x10 [ 274.926317][ C1] ? __pfx_kthread+0x10/0x10 [ 274.926337][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.926350][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.926365][ C1] ? __pfx_kthread+0x10/0x10 [ 274.926384][ C1] ret_from_fork+0x3fc/0x770 [ 274.926401][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 274.926419][ C1] ? __switch_to_asm+0x39/0x70 [ 274.926438][ C1] ? __switch_to_asm+0x33/0x70 [ 274.926455][ C1] ? __pfx_kthread+0x10/0x10 [ 274.926475][ C1] ret_from_fork_asm+0x1a/0x30 [ 274.926501][ C1] [ 274.926717][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g19693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 275.804941][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 275.814929][ C0] rcu: RCU grace-period kthread stack dump: [ 275.820822][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 275.834365][ C0] Call Trace: [ 275.837651][ C0] [ 275.840594][ C0] __schedule+0x16fd/0x4cf0 [ 275.845129][ C0] ? schedule+0x165/0x360 [ 275.849518][ C0] ? __pfx___schedule+0x10/0x10 [ 275.854426][ C0] ? schedule+0x91/0x360 [ 275.858693][ C0] schedule+0x165/0x360 [ 275.862872][ C0] schedule_timeout+0x12b/0x270 [ 275.867740][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 275.873127][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 275.879116][ C0] ? __pfx_process_timeout+0x10/0x10 [ 275.884424][ C0] ? prepare_to_swait_event+0x341/0x380 [ 275.889991][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 275.894875][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 275.900781][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 275.906074][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 275.911292][ C0] ? finish_swait+0xcd/0x1f0 [ 275.915900][ C0] rcu_gp_kthread+0x99/0x390 [ 275.920504][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 275.925713][ C0] ? __kthread_parkme+0x7b/0x200 [ 275.930671][ C0] ? __kthread_parkme+0x1a1/0x200 [ 275.935736][ C0] kthread+0x711/0x8a0 [ 275.939852][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 275.945117][ C0] ? __pfx_kthread+0x10/0x10 [ 275.949726][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.954937][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.960149][ C0] ? __pfx_kthread+0x10/0x10 [ 275.964754][ C0] ret_from_fork+0x3fc/0x770 [ 275.969365][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 275.974494][ C0] ? __switch_to_asm+0x39/0x70 [ 275.979270][ C0] ? __switch_to_asm+0x33/0x70 [ 275.984044][ C0] ? __pfx_kthread+0x10/0x10 [ 275.988649][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.993443][ C0] [ 275.996467][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 276.002812][ C0] CPU: 0 UID: 0 PID: 5988 Comm: udevd Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 276.014367][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.024437][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 276.031125][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 90 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 3b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 20 6a 0b [ 276.050864][ C0] RSP: 0018:ffffc900042df580 EFLAGS: 00000293 [ 276.056946][ C0] RAX: ffffffff81b4bcc0 RBX: ffff8880b863b1c0 RCX: ffff88802580bc00 [ 276.064928][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 276.073890][ C0] RBP: ffffc900042df6e0 R08: ffffffff8fa1ddf7 R09: 1ffffffff1f43bbe [ 276.081874][ C0] R10: dffffc0000000000 R11: fffffbfff1f43bbf R12: 1ffff110170e7f5d [ 276.089855][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873fae8 [ 276.097921][ C0] FS: 00007fef92356880(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000 [ 276.106862][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.113455][ C0] CR2: 00007fef9255ae80 CR3: 000000007ecd8000 CR4: 00000000003526f0 [ 276.121442][ C0] Call Trace: [ 276.124730][ C0] [ 276.127681][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 276.134057][ C0] ? free_pgd_range+0x144b/0x14c0 [ 276.139101][ C0] ? rcu_is_watching+0x15/0xb0 [ 276.143879][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 276.149092][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 276.154220][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 276.159357][ C0] ? free_pgtables+0xa12/0xaf0 [ 276.164136][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 276.169701][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 276.174833][ C0] tlb_flush_mmu+0x1a7/0x680 [ 276.179440][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 276.184043][ C0] vms_clear_ptes+0x42c/0x540 [ 276.188741][ C0] ? __pfx_vms_clear_ptes+0x10/0x10 [ 276.193973][ C0] vms_complete_munmap_vmas+0x206/0x8a0 [ 276.199542][ C0] ? __mas_set_range+0x12f/0x3c0 [ 276.204586][ C0] do_vmi_align_munmap+0x358/0x420 [ 276.209734][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 276.215402][ C0] ? mas_find+0x962/0xc10 [ 276.219748][ C0] do_vmi_munmap+0x253/0x2e0 [ 276.224359][ C0] __vm_munmap+0x23b/0x3d0 [ 276.228792][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 276.233755][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 276.239064][ C0] __x64_sys_munmap+0x60/0x70 [ 276.243762][ C0] do_syscall_64+0xfa/0x3b0 [ 276.248279][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.254353][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.260519][ C0] ? clear_bhb_loop+0x60/0xb0 [ 276.265210][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.271111][ C0] RIP: 0033:0x7fef92459097 [ 276.275545][ C0] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 276.295252][ C0] RSP: 002b:00007ffda590a038 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 276.303853][ C0] RAX: ffffffffffffffda RBX: 00005603099b6bf0 RCX: 00007fef92459097 [ 276.311839][ C0] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007fef91400000 [ 276.319816][ C0] RBP: 00005603099b6910 R08: 00005603099c9160 R09: 0000000000000006 [ 276.327795][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00005602f9402588 [ 276.335776][ C0] R13: 00007ffda590a0c0 R14: 0000000000000000 R15: 0000000000000000 [ 276.343783][ C0]