last executing test programs: 11m7.139507896s ago: executing program 3 (id=1438): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000003f0000070000000002000000000000000000"], 0x0, 0x26, 0x0, 0x1, 0x10001}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3, 0xd4, 0x0, 0x93}, 0xe) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) shutdown(r5, 0x1) socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000070900020073797a32000000000900010073797a300000000048000480440001800b00010065787468647200003400028008000440000000000500020000000000080006400000000108000340fffffffd080001"], 0x9c}}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r7, 0x0, 0x2, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 11m3.989960812s ago: executing program 3 (id=1446): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000009e602206d0414c34000000000010902"], 0x0) syz_usb_disconnect(r1) syz_usb_connect$uac2(0x6, 0x7b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000100304d8b848000102030109026900030100205c080b000201032002090400000001012000092401d8980209000d090401000001022000090401010101022000090501094000020b088375fcff0904020000010220170904020101010220000905820900040580f3082501"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xa5, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233bd00", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x143580, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x38, 0x14, "3eccd8000000002000000010000000040100"}) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0xfffffffffffffffe, 0x39, 0x0, 0x300}}, 0x40) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$key(0xf, 0x3, 0x2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000004c0000004c00000004000000000000000000000300000000060000000d000000050000000300000002000004020000000600000040000000a10100000e00d920471d906b40e4d58b6400000000000000110200000002000000006100000000"], 0x0, 0x68}, 0x28) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r6, 0x708, 0xb8f7) r7 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000020000008005a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f01000000000000000000f9231a0000000c241b4800f30000010000000000810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x5, 0x28, 0x0, 0xfff9, 0x3fc, 0xfffd, 0x4, 0x2, 0x800, 0x5, 0x3fb9, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x7, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 10m59.730713906s ago: executing program 3 (id=1456): mkdirat(0xffffffffffffff9c, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = msgget$private(0x0, 0x40a) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/685], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000012, 0x8ff, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mq_notify(0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) fcntl$setlease(r5, 0x400, 0x1) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7, 0x3, 0x7, 0x9, 0x6, 0x800004, 0x1, 0xffff8001, 0x3fd, 0x2, 0xc, 0x5, 0x5, 0xc, 0x3, 0x8}}]}}]}, 0x6c}}, 0x24008004) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) socket$inet6(0xa, 0x3, 0x2) 10m58.518903382s ago: executing program 3 (id=1463): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='3', 0x1) (fail_nth: 3) 10m57.264645897s ago: executing program 3 (id=1474): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x0, [], [0x0, 0x67b], [0x0, 0x0, 0xfffffffe], [0x2]}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r6, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0, 0x0, 0x200000000004}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x8, r8, &(0x7f00000003c0), 0x0, 0x80000001}]) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r10 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) socket$nl_route(0x10, 0x3, 0x0) 10m57.034926385s ago: executing program 32 (id=1474): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x0, [], [0x0, 0x67b], [0x0, 0x0, 0xfffffffe], [0x2]}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r6, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0, 0x0, 0x200000000004}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x8, r8, &(0x7f00000003c0), 0x0, 0x80000001}]) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r10 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) socket$nl_route(0x10, 0x3, 0x0) 7m39.879180287s ago: executing program 0 (id=2048): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) dup3(r0, 0xffffffffffffffff, 0x0) personality(0x400000) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0a"], 0xd) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r5, 0x601, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}}, 0x0) 7m39.720044182s ago: executing program 0 (id=2049): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x1}) ioctl$EVIOCRMFF(r2, 0x801c581f, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7m39.364588825s ago: executing program 0 (id=2053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x301, 0x0, 0x700, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m39.195120346s ago: executing program 0 (id=2054): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = userfaultfd(0x80001) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020) (async, rerun: 32) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x40000) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28) (async) sendmsg$tipc(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x1c100) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) (async, rerun: 64) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048801}, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) (async) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/206, 0xce}], 0x1}, 0x0) 7m39.148280322s ago: executing program 0 (id=2055): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ptrace$getregs(0xe, r3, 0x7f, &(0x7f0000000340)=""/128) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0x4, 0x4, 0x56}, {0x5, 0x8, 0x50, 0x1001}, {0x902b, 0x7, 0xd0, 0xc}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x24}}, 0x20040001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x20000005, 0xc5, 0x3, 0x1, 0x80009, 0x8, 0x2, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x7, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000080)=0x80) ioctl$TCSBRKP(r6, 0x5425, 0xfffffffffffffffd) write(r4, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) 7m38.867564295s ago: executing program 0 (id=2056): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x40cb, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}}) (fail_nth: 3) 7m21.561146606s ago: executing program 33 (id=2056): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x40cb, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}]}}) (fail_nth: 3) 52.679050486s ago: executing program 2 (id=3826): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x3}}, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}]}}, 0x0, 0x4e}, 0x28) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x19) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) ioctl(r0, 0x40104d00, &(0x7f0000000a00)="0000020006000000000002") 52.557428131s ago: executing program 2 (id=3828): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0x0, 0x886c}, @void, @mpls={[{0x7090}, {0xd1c00}, {0x9, 0x0, 0x1}, {0xa7a}], @ipv4=@dccp={{0x4e, 0x4, 0x2, 0x3a, 0x1e6, 0x68, 0x0, 0x4, 0x21, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, {[@ssrr={0x89, 0x23, 0xcd, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @multicast2, @rand_addr=0x64010101, @local]}, @timestamp_addr={0x44, 0x4c, 0x67, 0x1, 0x5, [{@multicast1, 0x13fe}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x22a40}, {@broadcast, 0x10}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xfffffffc}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100, 0x3}]}, @ssrr={0x89, 0x17, 0x5, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @remote]}, @ssrr={0x89, 0x17, 0xa6, [@empty, @multicast2, @empty, @broadcast, @private=0xa010102]}, @noop, @timestamp={0x44, 0x20, 0x8c, 0x0, 0x2, [0x8, 0x5, 0x8, 0xa, 0x2ffa, 0x44, 0x7f]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x2, 0xa, "368c53d76e722242"}]}, @timestamp_addr={0x44, 0x54, 0xf, 0x1, 0x4, [{@remote, 0x7}, {@remote, 0x3}, {@local, 0xfffffff7}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@empty, 0x7f}, {@remote, 0x8000}, {@remote, 0x10001}, {@rand_addr=0x64010101, 0xcc40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3, 0x1, "aaa95b", 0x3, "8539a5"}, "e2e79f084b983f2312b53520c3d42d37a43cbe5b4f261830fe75c9f16ca73dd019bac0ae11df65878f8780d063f42a6087dceea0d57b13a408744d21f0882b035f2e82ec455669bc6ca06d67eb6260b22ac32b40334e940509d0684b1ecdcf4bbaaaea97b202d490007800b8c2fa49f87a21af255d117a60e229c22c48fafd07a2db943cbdf7e1e259ee39c6d76c525f75bd290f9ca8e8817004f86e3355"}}}}, 0x1fa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd70008881435691e752ff"], 0x14}}, 0x10004000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0xd, 0x6, 0x300, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4018000}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x34, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000ffdbdf250300000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 51.668443714s ago: executing program 2 (id=3832): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x810000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00@\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',\x00']) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x3213c0, 0xa0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) ioctl$VT_RESIZEX(r0, 0x4b4b, 0x0) open(&(0x7f00000000c0)='./gadget\x00', 0x80040, 0x100) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x800, 0x76, 0x8, 0x1}}) 51.264013375s ago: executing program 2 (id=3834): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000004c0)={0x0, 0x1, 0x6, 0x0, 0x3}, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x2000000008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0x0, 0x0) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1000e5fe, 0x0, 0x14032, 0xffffffffffffffff, 0x0) lsm_list_modules(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x3, &(0x7f0000000000)) 49.922653628s ago: executing program 2 (id=3841): socket$kcm(0x29, 0x5, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000123f5240e316e9f9580000002001010000000000000000a68d000905", @ANYRES16], 0x0) syz_open_dev$mouse(0x0, 0x2, 0x123141) 49.148980026s ago: executing program 2 (id=3844): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) getsockopt(r2, 0xffffff80, 0x3, &(0x7f0000000600)=""/131, &(0x7f00000006c0)=0x83) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) openat(r5, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=r5, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYRES32=r6, @ANYBLOB="00000000030200daa800009f00"/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000500000200930000000040cccef347845e4c6deca8b4eddaecca", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02000000016e00000300000004000000"], 0x50) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x100b, 0x0, @stepwise={0x0, 0x400}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x0, &(0x7f0000000140)}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001f80)={0xfc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r9, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r9, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) inotify_init1(0x0) 48.860839607s ago: executing program 34 (id=3844): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x23, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) getsockopt(r2, 0xffffff80, 0x3, &(0x7f0000000600)=""/131, &(0x7f00000006c0)=0x83) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) openat(r5, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=r5, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYRES32=r6, @ANYBLOB="00000000030200daa800009f00"/25], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000500000200930000000040cccef347845e4c6deca8b4eddaecca", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02000000016e00000300000004000000"], 0x50) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x0, 0x100b, 0x0, @stepwise={0x0, 0x400}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x0, &(0x7f0000000140)}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001f80)={0xfc, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r9, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back', 0x2c) ioctl(r9, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020006") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) inotify_init1(0x0) 13.914652975s ago: executing program 7 (id=3944): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x81, 0xffffffff, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf250100000005000600af0000000800030000000000050005"], 0x2c}, 0x1, 0x0, 0x0, 0xc5}, 0x24000806) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000080001000a0810000000000000040000", 0x58}], 0x1) syz_emit_ethernet(0x15e, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) pipe2$watch_queue(&(0x7f0000000240), 0x80) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x501240, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000002c0)={0x6, 0x0, [{0xb, 0x7, 0x7, 0x6, 0x5, 0x3, 0xb}, {0xc0000001, 0x8, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x0, 0x7, 0xc, 0x7fffffff, 0x0, 0xf9f, 0xc}, {0x80000001, 0x5, 0x8e489a26d827ad4f, 0x0, 0x49dd3c13, 0x8, 0x5}, {0x80000001, 0x7, 0x6, 0x1, 0x4, 0x10001, 0x5}, {0x0, 0x4, 0x0, 0x5, 0x4, 0x380, 0x4779}]}) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000140), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10}, 0x4) 10.820122861s ago: executing program 7 (id=3956): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x700000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x49, &(0x7f0000000500)={0x0}}, 0xc050) r6 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r6, &(0x7f0000001000)=""/4085, 0xff5) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r7, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_open_dev$audion(&(0x7f0000000080), 0x4, 0x101200) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r9, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) 9.651024454s ago: executing program 7 (id=3958): connect$unix(0xffffffffffffffff, 0x0, 0xfd1e) r0 = timerfd_create(0x0, 0x80000) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000180)=0x800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0xfffffffd}, @GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4c800) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f00000003c0)={0x0, 0x2c58, 0x200, 0x20000, 0x16c}, &(0x7f0000000040)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r5, r6, 0x0, r7, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) close(r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 7.407113018s ago: executing program 1 (id=3969): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(r2, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x81, 0x28}, 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x700000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r6, &(0x7f0000001000)=""/4085, 0xff5) r7 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0x1000f1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x0, 0x8, 0x400b, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) ioctl$COMEDI_DEVINFO(r7, 0x80b06401, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_open_dev$audion(&(0x7f0000000080), 0x4, 0x101200) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r9, 0xf400, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247, 0x3f}) 6.310977169s ago: executing program 7 (id=3970): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x101, 0x5, 0x2, 0x2, 0xfff, 0x8, 0xc, 0x0, 0xf, 0x81, 0x0, 0x1a, 0x800, 0x7, 0x3, 0x6b4de7c], 0x4, 0x101010}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x410, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x8, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x80, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0xd, 0xa, 0x70}}}}}]}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0x880) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.444729993s ago: executing program 1 (id=3973): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000300)=0xcf99, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000400"], 0x50) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x10000004, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe75, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) poll(&(0x7f0000000180)=[{r2, 0xe203}, {r1, 0x8000}, {r1, 0x2400}, {r1, 0x10100}, {r2, 0xc030}, {r1, 0x23}, {r1, 0x290}, {r3, 0x40}], 0x8, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0x8, 0x1, 0xc, [{@multicast2}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe}}}}}}, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000280)={r6, 0x7, 0x28e6}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r5) fcntl$setsig(r0, 0xa, 0x19) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4054}, 0x20000014) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffd, 0x80, 0x2, 0x27e}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x5, r9, 0x0, 0x0, 0x0, 0x120, 0x1, {0x2}}) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) signalfd(r8, &(0x7f0000000200)={[0x2]}, 0x8) 4.602421592s ago: executing program 4 (id=3975): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x31, 0x0, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=ANY=[@ANYBLOB="180200000020000000000000000000008500000027000000180100002020702500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000000)="87252563142b490131925094ce0b23b92d431bee") 4.452797355s ago: executing program 1 (id=3977): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000300)=""/172, 0xdc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='configfs\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x7fc, 0x40) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 4.355700799s ago: executing program 4 (id=3978): r0 = socket(0x1, 0x2, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB], 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x26, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @ldst={0x3, 0x0, 0x3, 0xb, 0x6, 0x4, 0x10}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x23489, r1, 0x3, &(0x7f0000000e00)=[r2, r2, r2, r2, 0xffffffffffffffff, r2], &(0x7f0000000e40)=[{0x5, 0x1, 0x1, 0x8}, {0x0, 0x3, 0x10, 0xa}, {0x0, 0x4, 0x0, 0x705b23efd7fa5a47}], 0x10, 0x8}, 0x94) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r3, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.391124359s ago: executing program 1 (id=3985): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x1, 0x0) timerfd_settime(r3, 0x2, &(0x7f0000000280)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x0, [], [0x0, 0x67b], [0x0, 0x0, 0xfffffffe], [0x2]}) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) io_setup(0x1, &(0x7f00000012c0)=0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) io_submit(r6, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, 0x0, 0x0, 0x200000000004}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x8, r8, &(0x7f00000003c0), 0x0, 0x80000001}]) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r10 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}]}}}, @IFLA_MTU={0x8, 0x4, 0xffe7}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 3.383141339s ago: executing program 5 (id=3986): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf030000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (fail_nth: 3) 2.529925952s ago: executing program 5 (id=3987): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r2 = socket(0x40000000015, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f00009a6000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x5000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume_offset', 0x100102, 0x50) sendfile(r4, r4, 0x0, 0x6) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000240)={0x2, 0x2, @raw_data=[0xa7, 0x9, 0x0, 0x80000000, 0x7, 0x4, 0x101, 0x3ff, 0x7, 0x10, 0x2, 0x1, 0x8, 0x4, 0x4, 0x80]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x30, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r8, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r9}]}, 0x3c}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000008c0)="f3", 0x1}], 0x1}}], 0x3, 0x4040040) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.505519164s ago: executing program 4 (id=3988): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4000000400007012bed700000000000017c00000400fc800c0003800500060000000000c8000280c20027000038b9b7af2bba7cef0e9755ea59c65fefd248cc37ed36103c3b309aac399187cdc482651c634d30c5d2741c9867d2f746bbb490a2f544f480c9733be45458cdcd7c139739d345c08411fd905fa4b241b9118f03e5a37afa3431dc8bff87b1234d71ad42a864c64d81ce13709501040000000000001cb76adafa90a919fc5184c6a20081c74f37a69f4572f5944b2921fd05f577d741fb9bb71afcade10488ce778a4d7752dd7c4c5d063ec022f5f19c578258e118000008000500", @ANYRES32=r1, @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000180)={0xa, @capture={0x0, 0x0, {0x2, 0x2}, 0x4, 0x9}}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x414640, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) syz_io_uring_setup(0x2000048, &(0x7f0000000500)={0x0, 0xf20f, 0x40, 0x2, 0x1b, 0x0, r4}, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000280)={0x9a, 0x5, 0x68, 0x1, 0x408}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x4601, &(0x7f0000000040)) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000000240)) 2.447364093s ago: executing program 7 (id=3989): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$OTPERASE(r0, 0x400c4d19, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@mpls_getroute={0x50, 0x1a, 0x800, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x10, 0x20, 0x5, 0xff, 0x0, 0xfe, 0x0, 0x1400}, [@RTA_MULTIPATH={0xc, 0x9, {0x0, 0x3, 0x16, r2}}, @RTA_VIA={0x14, 0x12, {0x6, "912a0760928b0581af19db848544"}}, @RTA_VIA={0x14, 0x12, {0x9, "7a41e00491d966e0eb765d37a1bc"}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = socket(0xa, 0x5, 0x0) ioctl$PPPOEIOCDFWD(r3, 0x541b, 0xf0ff1f00000000) 1.911383259s ago: executing program 1 (id=3990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000227bd7000fddbdf25140000000800010000000000"], 0x1c}}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff00"], 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000200)={@loopback, @remote, @dev}, &(0x7f0000000240)=0xc) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="6865a1d4", 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='\x00\x00\x00', 0x3) close(r3) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='0\x00', 0x2) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000140)={0x1, 0x8}) prlimit64(0xffffffffffffffff, 0xb, &(0x7f0000000000)={0x7, 0x80000001}, &(0x7f0000000040)) 1.848129001s ago: executing program 7 (id=3991): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x50bd29, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b", 0x27}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac", 0x89}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRESDEC=r0, @ANYBLOB="2c67c96e75705f69643d", @ANYRESDEC=0x0]) 1.847635618s ago: executing program 5 (id=3992): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000040), 0x10) syz_io_uring_setup(0x5f87, &(0x7f0000000180)={0x0, 0xe519, 0x10000, 0x2, 0x8003b7}, &(0x7f0000000600), &(0x7f0000000080), &(0x7f0000000000)) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 1.68265018s ago: executing program 4 (id=3994): r0 = socket(0x1e, 0x4, 0x6) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x10200, 0x0) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181403, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0x0, 0x886c}, @void, @mpls={[{0x7090}, {0xd1c00}, {0x9, 0x0, 0x1}, {0xa7a}], @ipv4=@dccp={{0x4e, 0x4, 0x2, 0x3a, 0x1e6, 0x68, 0x0, 0x4, 0x21, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, {[@ssrr={0x89, 0x23, 0xcd, [@multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @multicast2, @rand_addr=0x64010101, @local]}, @timestamp_addr={0x44, 0x4c, 0x67, 0x1, 0x5, [{@multicast1, 0x13fe}, {@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x22a40}, {@broadcast, 0x10}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0xfffffffc}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100, 0x3}]}, @ssrr={0x89, 0x17, 0x5, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @remote]}, @ssrr={0x89, 0x17, 0xa6, [@empty, @multicast2, @empty, @broadcast, @private=0xa010102]}, @noop, @timestamp={0x44, 0x20, 0x8c, 0x0, 0x2, [0x8, 0x5, 0x8, 0xa, 0x2ffa, 0x44, 0x7f]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x2, 0xa, "368c53d76e722242"}]}, @timestamp_addr={0x44, 0x54, 0xf, 0x1, 0x4, [{@remote, 0x7}, {@remote, 0x3}, {@local, 0xfffffff7}, {@private=0xa010101, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x7}, {@empty, 0x7f}, {@remote, 0x8000}, {@remote, 0x10001}, {@rand_addr=0x64010101, 0xcc40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3, 0x1, "aaa95b", 0x3, "8539a5"}, "e2e79f084b983f2312b53520c3d42d37a43cbe5b4f261830fe75c9f16ca73dd019bac0ae11df65878f8780d063f42a6087dceea0d57b13a408744d21f0882b035f2e82ec455669bc6ca06d67eb6260b22ac32b40334e940509d0684b1ecdcf4bbaaaea97b202d490007800b8c2fa49f87a21af255d117a60e229c22c48fafd07a2db943cbdf7e1e259ee39c6d76c525f75bd290f9ca8e8817004f86e3355"}}}}, 0x1fa) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd70008881435691e752ff"], 0x14}}, 0x10004000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0xd, 0x6, 0x300, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4018000}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x34, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x34}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf250300000008000100ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 1.542490197s ago: executing program 6 (id=3996): r0 = syz_io_uring_setup(0x34b5, &(0x7f0000000540)={0x0, 0x2730, 0x0, 0x201, 0x7f}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) r4 = userfaultfd(0x80000) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x34000, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0xfffffffe}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0xe5e6e000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') sendfile(r6, r6, 0x0, 0x2000007ff) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x3, 0x583b, 0x80, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 1.250953176s ago: executing program 6 (id=3997): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x60, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000, 0x17}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 954.951102ms ago: executing program 6 (id=3998): inotify_init() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000fecf26ad00000030000000180100002020702500000000002020207b1af8ff00000000bfa100001ff2000007010000f8ffffffb702000008000000b703000000000000850000007300000095ac3e7815a9f2309bacac434cdfc65f9abb318f40"], &(0x7f0000000080)='GPL\x00', 0x121, 0x0, 0x0, 0x40f00, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x2) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0xfff, 0x0, 0x3) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000180)=0x1, 0x4) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0xff0c, &(0x7f00000003c0)=""/81}, &(0x7f0000000380)="259301010000", 0x0, 0xfffffffd, 0x0, 0x3, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14fff9900000008000300", @ANYRES32=r9, @ANYBLOB="d50633"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000229bd8ec0fbdbdf172b25d9f07b796dd7090866b20416290008e28bf2cf3456b8a1c8502b32cf54135a2ed9eedf21483b9088908f41c2a21921a937c4b71d", @ANYRES32=r9, @ANYBLOB="2c002380050005000c000000060016000300000006000a00010000000500130000000000080015004900000008006b000000008004000801"], 0x54}, 0x1, 0x0, 0x0, 0x4048008}, 0x0) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0xc) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000018", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 853.189877ms ago: executing program 6 (id=3999): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x2, @random="f94e829afd9b", 'macsec0\x00'}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="890b021004112c21540a96a98188c6655f5f3cf207eddaa8e0a2a0ab69899beee493039f0086d29316269aab6bd0b7df11f0001c2517e74eb888061ecc1b63fa256b5aa13267daa608c9882a032d73c9977a3bfac7b0695d343b65c58c1d6973d2c35ddc3d84fa5ec65e5fcc4df2e7335d782d2489b7aa64ffd94f0f59f1a478f6c1ef533c7623e93a008137dbd230e2ccb0d56e3fe88ee8534ca98fc441ae3ea35baf4195e03b36f4cb4098a4f69c2c1ea0cf1388fc1774c0a28026ba1dac84c53baffd020525bc5e962deba31d09c6ea38ede36253b8e903476e5971fe", 0xde}, {&(0x7f00000006c0)="c14fac5a61c5dc807dc23d5f717ac6717316374aa041679cf10fb64b1a7b2824de86a863f8e80ed9804aeaf09372c4dfa971237a5689334469229025caa0eec6605b38eac55958215cb3", 0x4a}], 0x2, &(0x7f0000010480)=ANY=[@ANYBLOB="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"], 0x228}, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200880, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f0000010440)=[{&(0x7f00000102c0)=""/161, 0xa1}], 0x1, 0xc03, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) syz_open_procfs(0x0, 0x0) r7 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r7, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101ed0000003c"], 0xfc}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e22, 0x7, @remote, 0x10000}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x48814) 753.370438ms ago: executing program 4 (id=4000): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff2, 0x10, r0, 0x3000) r1 = socket$inet(0x2, 0x80000, 0x9) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@rand_addr=0x64010100, @private=0xa010100}, 0xc) mmap(&(0x7f00004c7000/0x2000)=nil, 0x2000, 0x2000005, 0x10, r0, 0xe938000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000850000000e000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) mbind(&(0x7f00008f3000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000100)=0x9, 0x8, 0x2) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) 637.974778ms ago: executing program 5 (id=4001): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000009540)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000500)="26fc", 0x2}], 0x1, &(0x7f0000001ac0)=[{0x1c, 0x1, 0x2}], 0x10}}], 0x1, 0x0) 562.891222ms ago: executing program 6 (id=4002): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000e20000000000a050000000000000000000500"], 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000740)={&(0x7f00000003c0), 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x178, 0x13, 0xa, 0x100, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xb9, 0x8, "3529fe0f17e147ff208292d81493ee54c26d6ef820e036063b8d566c8d87a7192119fb11609d5d247264845f3746766b466c6bce3e3c59a5bb677529b78528065fd172a2f2bc9af8932c75eff1f0397b588866ba42988709c801800d9f0b1c133664a252d19f2de1e42bfec5dc932057bde74092524aeabcf66c667014376f5bba054d0281d2dfd49d198ecdf85775abe9234b848c97ff430ef28d9d23c98f52bc96b6805d9dfeb15ab581c5fee1da0562c08285d5"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x7b, 0x8, "b5fefef2702d9f26aa2e7238f62582596718238de8b54f4cb25de88bbb209df4e1c69bd5eb10bcaf6c0e0b438bf91c242c2c61acb058f1093dfc75353b813feeaee9f621820de7521767f48b5c27fec7ba5489b4b35fda9cc725a66689b5c085f5872b72fc0dff55abbee3a373ee87c26c2d56f53ff835"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x178}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r1) (async) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) (async) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x1, 0x10005, 0x79, 0x2000003, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0x3, 0x9, 0x80, 0x9, 0xf39e, 0x0, 0x1539b804, 0x7, 0x1, 0x2]}) (async) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x1, 0x10005, 0x79, 0x2000003, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0x3, 0x9, 0x80, 0x9, 0xf39e, 0x0, 0x1539b804, 0x7, 0x1, 0x2]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) syz_clone(0xc0212d00, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) unshare(0x4020400) unshare(0x2c020400) (async) unshare(0x2c020400) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 475.222142ms ago: executing program 5 (id=4003): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0xc000, 0x4000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0xfffffffffffff001, 0x10000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x1010, 0xffffffffffffffff, 0x4651b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) sendmsg$nl_xfrm(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000040000001000000000000000000000000200000000000000048000000000000009000000000000000700000000000000c600000000000000060000000000000005000000000000000a000000000000000000000000000000000000000000000001010302000000000000000009000000008000002bbd70000c0008000800080000d10000"], 0x134}, 0x1, 0x0, 0x0, 0xc091}, 0x4004) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 410.99301ms ago: executing program 4 (id=4004): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4000000400007012bed700000000000017c00000400fc800c0003800500060000000000c8000280c20027000038b9b7af2bba7cef0e9755ea59c65fefd248cc37ed36103c3b309aac399187cdc482651c634d30c5d2741c9867d2f746bbb490a2f544f480c9733be45458cdcd7c139739d345c08411fd905fa4b241b9118f03e5a37afa3431dc8bff87b1234d71ad42a864c64d81ce13709501040000000000001cb76adafa90a919fc5184c6a20081c74f37a69f4572f5944b2921fd05f577d741fb9bb71afcade10488ce778a4d7752dd7c4c5d063ec022f5f19c578258e118000008000500", @ANYRES32=r1, @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000180)={0xa, @capture={0x0, 0x0, {0x2, 0x2}, 0x4, 0x9}}) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x414640, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) syz_io_uring_setup(0x2000048, &(0x7f0000000500)={0x0, 0xf20f, 0x40, 0x2, 0x1b, 0x0, r4}, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000280)={0x9a, 0x5, 0x68, 0x1, 0x408}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x4601, &(0x7f0000000040)) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000000240)) 169.832848ms ago: executing program 5 (id=4005): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xb9, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x7f, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406070000005c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000017c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000001740)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 131.573156ms ago: executing program 6 (id=4006): r0 = dup(0xffffffffffffffff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x42, 0xbf) ftruncate(r1, 0xf4240) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r2, 0x0, 0x0, 0x20004008, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='file0\x00', 0x6) recvmsg$can_bcm(r3, &(0x7f0000001800)={&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/171, 0xab}, {&(0x7f0000001480)=""/14, 0xe}, {&(0x7f00000014c0)=""/145, 0x91}, {&(0x7f0000001580)=""/231, 0xe7}], 0x7, &(0x7f0000001700)=""/223, 0xdf}, 0x10001) 0s ago: executing program 1 (id=4007): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0xd9}], 0x1f, 0x10022, 0x0) kernel console output (not intermixed with test programs): software demuxer. [ 1057.261069][ T5708] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1057.364856][T19596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1057.373890][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1058.136481][T19609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.146668][T19609] FAULT_INJECTION: forcing a failure. [ 1058.146668][T19609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.159796][T19609] CPU: 0 UID: 0 PID: 19609 Comm: syz.1.3590 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.159815][T19609] Tainted: [L]=SOFTLOCKUP [ 1058.159819][T19609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1058.159826][T19609] Call Trace: [ 1058.159830][T19609] [ 1058.159834][T19609] dump_stack_lvl+0x100/0x190 [ 1058.159852][T19609] should_fail_ex.cold+0x5/0xa [ 1058.159866][T19609] _copy_from_user+0x2e/0xd0 [ 1058.159882][T19609] iommufd_fops_ioctl+0x300/0x520 [ 1058.159897][T19609] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1058.159911][T19609] ? __fget_files+0x215/0x3d0 [ 1058.159921][T19609] ? hook_file_ioctl_common+0x140/0x440 [ 1058.159938][T19609] ? selinux_file_ioctl+0x13b/0x290 [ 1058.159955][T19609] ? selinux_file_ioctl+0xb6/0x290 [ 1058.159972][T19609] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1058.159986][T19609] __x64_sys_ioctl+0x18e/0x210 [ 1058.160003][T19609] do_syscall_64+0x115/0x870 [ 1058.160016][T19609] ? clear_bhb_loop+0x40/0x90 [ 1058.160029][T19609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.160041][T19609] RIP: 0033:0x7f42b9f9e019 [ 1058.160051][T19609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.160061][T19609] RSP: 002b:00007f42baed4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.160072][T19609] RAX: ffffffffffffffda RBX: 00007f42ba226090 RCX: 00007f42b9f9e019 [ 1058.160079][T19609] RDX: 0000200000000040 RSI: 0000000000003b86 RDI: 0000000000000008 [ 1058.160086][T19609] RBP: 00007f42baed4090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.160092][T19609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.160098][T19609] R13: 00007f42ba226128 R14: 00007f42ba226090 R15: 00007fffee47f8b8 [ 1058.160112][T19609] [ 1058.563241][ T5708] usb 3-1: media controller created [ 1059.188516][T19596] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1059.215224][T19596] comedi comedi2: board detection failed [ 1059.244023][T19566] usb 7-1: reset high-speed USB device number 49 using dummy_hcd [ 1059.291179][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1059.473253][ T5708] dvb-usb: bulk message failed: -22 (6/0) [ 1060.374057][ T5708] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1060.479169][T19625] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3592'. [ 1060.493377][ T5708] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input222 [ 1060.512540][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1060.512551][ T30] audit: type=1800 audit(3933087426.080:7734): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288519 res=0 errno=0 [ 1060.544993][T19631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.609967][ T5708] dvb-usb: schedule remote query interval to 150 msecs. [ 1060.632573][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3592'. [ 1060.661660][ T5708] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1060.706792][ T30] audit: type=1800 audit(3933087426.150:7735): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=288535 res=0 errno=0 [ 1060.742264][ T5708] usb 3-1: USB disconnect, device number 116 [ 1060.855650][T19640] FAULT_INJECTION: forcing a failure. [ 1060.855650][T19640] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.885938][ T30] audit: type=1800 audit(3933087426.160:7736): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=288538 res=0 errno=0 [ 1060.967888][T19640] CPU: 0 UID: 0 PID: 19640 Comm: syz.1.3599 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.967910][T19640] Tainted: [L]=SOFTLOCKUP [ 1060.967914][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1060.967920][T19640] Call Trace: [ 1060.967924][T19640] [ 1060.967929][T19640] dump_stack_lvl+0x100/0x190 [ 1060.967947][T19640] should_fail_ex.cold+0x5/0xa [ 1060.967961][T19640] should_failslab+0xc2/0x120 [ 1060.967976][T19640] __kmalloc_noprof+0xfc/0x820 [ 1060.967989][T19640] ? rcu_is_watching+0x12/0xc0 [ 1060.968005][T19640] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1060.968020][T19640] tomoyo_realpath_from_path+0xb6/0x690 [ 1060.968034][T19640] tomoyo_path_number_perm+0x23c/0x580 [ 1060.968049][T19640] ? tomoyo_path_number_perm+0x22e/0x580 [ 1060.968065][T19640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1060.968094][T19640] ? find_held_lock+0x2b/0x80 [ 1060.968104][T19640] ? __fget_files+0x215/0x3d0 [ 1060.968115][T19640] ? hook_file_ioctl_common+0x140/0x440 [ 1060.968127][T19640] ? __fget_files+0x215/0x3d0 [ 1060.968140][T19640] ? __fget_files+0x21f/0x3d0 [ 1060.968153][T19640] security_file_ioctl+0xd3/0x230 [ 1060.968171][T19640] __x64_sys_ioctl+0xb7/0x210 [ 1060.968187][T19640] do_syscall_64+0x115/0x870 [ 1060.968200][T19640] ? clear_bhb_loop+0x40/0x90 [ 1060.968214][T19640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.968225][T19640] RIP: 0033:0x7f42b9f9e019 [ 1060.968235][T19640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.968246][T19640] RSP: 002b:00007f42baef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.968257][T19640] RAX: ffffffffffffffda RBX: 00007f42ba225fa0 RCX: 00007f42b9f9e019 [ 1060.968264][T19640] RDX: 00002000000001c0 RSI: 00000000c0585611 RDI: 0000000000000003 [ 1060.968271][T19640] RBP: 00007f42baef5090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.968277][T19640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.968283][T19640] R13: 00007f42ba226038 R14: 00007f42ba225fa0 R15: 00007fffee47f8b8 [ 1060.968297][T19640] [ 1060.968314][T19640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1061.225210][ T5708] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1061.244439][ T30] audit: type=1800 audit(3933087426.170:7737): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="rel" dev="sysfs" ino=288537 res=0 errno=0 [ 1061.314836][ T30] audit: type=1800 audit(3933087426.170:7738): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="key" dev="sysfs" ino=288536 res=0 errno=0 [ 1061.383796][ T30] audit: type=1800 audit(3933087426.170:7739): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="properties" dev="sysfs" ino=288527 res=0 errno=0 [ 1061.471812][ T30] audit: type=1800 audit(3933087426.170:7740): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bustype" dev="sysfs" ino=288530 res=0 errno=0 [ 1061.539352][ T30] audit: type=1800 audit(3933087426.200:7741): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=288523 res=0 errno=0 [ 1061.609499][ T30] audit: type=1800 audit(3933087426.200:7742): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288551 res=0 errno=0 [ 1061.690354][ T30] audit: type=1800 audit(3933087426.220:7743): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=288524 res=0 errno=0 [ 1062.643002][T19650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1062.674844][T19650] netlink: 'syz.2.3595': attribute type 25 has an invalid length. [ 1062.709540][T19652] xt_l2tp: invalid flags combination: 4 [ 1062.780228][ T7118] kernel write not supported for file net/rpc/auth.unix.ip/channel (pid: 7118 comm: kworker/0:9) [ 1063.129382][T19670] 9p: Bad value for 'wfdno' [ 1063.182854][ T5724] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1063.212796][T19674] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.261536.12507 [ 1063.267717][T19674] PKCS7: Only support pkcs7_signedData type [ 1063.311282][T19679] FAULT_INJECTION: forcing a failure. [ 1063.311282][T19679] name failslab, interval 1, probability 0, space 0, times 0 [ 1063.344191][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 1063.350094][T19679] CPU: 0 UID: 0 PID: 19679 Comm: syz.4.3612 Tainted: G L syzkaller #0 PREEMPT(full) [ 1063.350114][T19679] Tainted: [L]=SOFTLOCKUP [ 1063.350117][T19679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1063.350124][T19679] Call Trace: [ 1063.350128][T19679] [ 1063.350134][T19679] dump_stack_lvl+0x100/0x190 [ 1063.350151][T19679] should_fail_ex.cold+0x5/0xa [ 1063.350171][T19679] should_failslab+0xc2/0x120 [ 1063.350186][T19679] __kmalloc_cache_noprof+0x91/0x6c0 [ 1063.350207][T19679] ? percpu_ref_init+0xec/0x3f0 [ 1063.350221][T19679] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 1063.350234][T19679] percpu_ref_init+0xec/0x3f0 [ 1063.350245][T19679] ? __init_waitqueue_head+0xca/0x150 [ 1063.350262][T19679] ioctx_alloc+0x3ee/0x21a0 [ 1063.350280][T19679] ? find_held_lock+0x2b/0x80 [ 1063.350290][T19679] ? __pfx_ioctx_alloc+0x10/0x10 [ 1063.350307][T19679] __x64_sys_io_setup+0xc9/0x220 [ 1063.350322][T19679] do_syscall_64+0x115/0x870 [ 1063.350336][T19679] ? clear_bhb_loop+0x40/0x90 [ 1063.350350][T19679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.350361][T19679] RIP: 0033:0x7f6f40f9e019 [ 1063.350371][T19679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.350381][T19679] RSP: 002b:00007f6f41d94028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1063.350393][T19679] RAX: ffffffffffffffda RBX: 00007f6f41225fa0 RCX: 00007f6f40f9e019 [ 1063.350400][T19679] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 1063.350406][T19679] RBP: 00007f6f41d94090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.350413][T19679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.350419][T19679] R13: 00007f6f41226038 R14: 00007f6f41225fa0 R15: 00007fffdc285728 [ 1063.350433][T19679] [ 1063.683266][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.694417][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.704278][ T5724] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1063.713345][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.732823][ T5724] usb 3-1: config 0 descriptor?? [ 1063.743282][ T5724] hub 3-1:0.0: USB hub found [ 1063.950226][ T5724] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1064.406686][ T5724] usbhid 3-1:0.0: can't add hid device: -71 [ 1064.413290][ T5724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1064.449106][ T5724] usb 3-1: USB disconnect, device number 117 [ 1064.544284][T19566] usb 7-1: device descriptor read/64, error -110 [ 1064.784342][T19566] usb 7-1: reset high-speed USB device number 49 using dummy_hcd [ 1064.935022][T19566] usb 7-1: device descriptor read/64, error -32 [ 1065.244022][T19704] 9p: Bad value for 'port' [ 1065.304236][ T5708] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1065.311940][T19566] usb 7-1: reset high-speed USB device number 49 using dummy_hcd [ 1065.334582][T19566] usb 7-1: device descriptor read/8, error -32 [ 1065.468622][ T5708] usb 2-1: not running at top speed; connect to a high speed hub [ 1065.477908][ T5708] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1065.491283][ T5708] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 1065.500987][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.511114][ T5708] usb 2-1: Product: syz [ 1065.515810][ T5708] usb 2-1: Manufacturer: syz [ 1065.520478][ T5708] usb 2-1: SerialNumber: syz [ 1065.527967][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1065.527978][ T30] audit: type=1800 audit(3933087431.100:7757): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288739 res=0 errno=0 [ 1065.560231][ T30] audit: type=1800 audit(3933087431.130:7758): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=288771 res=0 errno=0 [ 1065.583658][ T5708] oti6858 2-1:1.0: oti6858 converter detected [ 1065.593340][T19566] usb 7-1: reset high-speed USB device number 49 using dummy_hcd [ 1065.604336][ T5708] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 1065.613293][ T30] audit: type=1800 audit(3933087431.130:7759): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=288746 res=0 errno=0 [ 1065.657412][T19566] usb 7-1: device descriptor read/8, error -32 [ 1065.669187][ T30] audit: type=1800 audit(3933087431.130:7760): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=288747 res=0 errno=0 [ 1065.720472][ T30] audit: type=1800 audit(3933087431.210:7761): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=288768 res=0 errno=0 [ 1065.744956][ T30] audit: type=1800 audit(3933087431.210:7762): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=288769 res=0 errno=0 [ 1065.767803][ T30] audit: type=1800 audit(3933087431.210:7763): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=288748 res=0 errno=0 [ 1065.840901][T16874] usb 7-1: USB disconnect, device number 49 [ 1065.904059][ T30] audit: type=1800 audit(3933087431.210:7764): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=288770 res=0 errno=0 [ 1065.931163][T19566] raw-gadget.0 gadget.6: failed to queue disconnect event [ 1066.029539][ T30] audit: type=1800 audit(3933087431.210:7765): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288791 res=0 errno=0 [ 1066.120431][ T30] audit: type=1800 audit(3933087431.220:7766): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=288807 res=0 errno=0 [ 1066.197632][ T5724] usb 2-1: USB disconnect, device number 11 [ 1066.210683][ T5724] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 1066.236079][ T5724] oti6858 2-1:1.0: device disconnected [ 1066.504422][T16874] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1066.654228][T16874] usb 7-1: Using ep0 maxpacket: 32 [ 1066.661319][T16874] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 1066.672877][T16874] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1066.686772][T16874] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1066.693440][T16874] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 1066.710847][T16874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.731470][T16874] usb 7-1: config 0 descriptor?? [ 1066.970651][T16874] wacom 0003:056A:00C5.004C: ignoring exceeding usage max [ 1067.056275][T16874] hid_parser_main: 33 callbacks suppressed [ 1067.056290][T16874] wacom 0003:056A:00C5.004C: unknown main item tag 0x6 [ 1067.162866][T16874] wacom 0003:056A:00C5.004C: unknown main item tag 0x0 [ 1068.011187][T16874] wacom 0003:056A:00C5.004C: unknown main item tag 0x0 [ 1068.047683][T19748] siw: device registration error -23 [ 1068.098577][T16874] wacom 0003:056A:00C5.004C: unknown main item tag 0x0 [ 1068.223381][T16874] wacom 0003:056A:00C5.004C: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.6-1/input0 [ 1068.368208][T16874] usb 7-1: USB disconnect, device number 50 [ 1068.469405][T19762] overlayfs: missing 'lowerdir' [ 1068.599471][T19772] fuse: fd is not a fuse device [ 1068.628137][T19762] netlink: 'syz.4.3640': attribute type 49 has an invalid length. [ 1068.669001][T19762] bond0: (slave bond_slave_0): Releasing backup interface [ 1068.708660][T19762] bond_slave_0: entered promiscuous mode [ 1068.714565][T19762] bond_slave_0: entered allmulticast mode [ 1069.177900][T19785] fido_id[19785]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1069.195115][T19790] syzkaller0: entered promiscuous mode [ 1069.239206][T19790] syzkaller0: entered allmulticast mode [ 1069.492789][T19803] netlink: 'syz.2.3652': attribute type 2 has an invalid length. [ 1069.523342][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 1069.635210][T16874] kernel read not supported for file /fb0 (pid: 16874 comm: kworker/0:5) [ 1069.740381][T19791] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' '' [ 1069.936697][T19811] fuse: fd is not a fuse device [ 1070.487678][ T5708] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 1070.533036][ T5708] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1070.553015][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 1070.553027][ T30] audit: type=1800 audit(3933087436.120:7870): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290141 res=0 errno=0 [ 1071.772526][ T4928] Bluetooth: hci5: unexpected event for opcode 0x2000 [ 1071.782025][ T30] audit: type=1800 audit(3933087437.170:7871): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1071.969845][ T30] audit: type=1400 audit(3933087437.200:7872): avc: denied { write } for pid=19827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.130155][T19865] FAULT_INJECTION: forcing a failure. [ 1072.130155][T19865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.172316][ T30] audit: type=1800 audit(3933087437.330:7873): pid=19845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=290128 res=0 errno=0 [ 1072.263263][T19865] CPU: 0 UID: 0 PID: 19865 Comm: syz.4.3665 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.263283][T19865] Tainted: [L]=SOFTLOCKUP [ 1072.263287][T19865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1072.263294][T19865] Call Trace: [ 1072.263298][T19865] [ 1072.263303][T19865] dump_stack_lvl+0x100/0x190 [ 1072.263320][T19865] should_fail_ex.cold+0x5/0xa [ 1072.263334][T19865] _copy_from_user+0x2e/0xd0 [ 1072.263350][T19865] do_ipv6_getsockopt+0x271e/0x3340 [ 1072.263368][T19865] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 1072.263382][T19865] ? find_held_lock+0x2b/0x80 [ 1072.263392][T19865] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1072.263406][T19865] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1072.263420][T19865] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1072.263434][T19865] ? __lock_acquire+0x49f/0x1a40 [ 1072.263448][T19865] ? __pfx_avc_has_perm+0x10/0x10 [ 1072.263467][T19865] ? ipv6_getsockopt+0x12f/0x2a0 [ 1072.263479][T19865] ipv6_getsockopt+0x12f/0x2a0 [ 1072.263494][T19865] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1072.263507][T19865] ? _copy_from_user+0x59/0xd0 [ 1072.263522][T19865] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 1072.263542][T19865] tcp_getsockopt+0xa1/0x110 [ 1072.263564][T19865] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1072.263582][T19865] do_sock_getsockopt+0x50a/0x6e0 [ 1072.263598][T19865] ? __lock_acquire+0x49f/0x1a40 [ 1072.263615][T19865] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1072.263631][T19865] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1072.263645][T19865] ? find_held_lock+0x2b/0x80 [ 1072.263658][T19865] ? __fget_files+0x21f/0x3d0 [ 1072.263673][T19865] __sys_getsockopt+0x148/0x260 [ 1072.263687][T19865] ? xfd_validate_state+0x129/0x190 [ 1072.263705][T19865] ? __x64_sys_getsockopt+0xbd/0x160 [ 1072.263717][T19865] __x64_sys_getsockopt+0xbd/0x160 [ 1072.263730][T19865] ? do_syscall_64+0x90/0x870 [ 1072.263743][T19865] ? lockdep_hardirqs_on+0x78/0x100 [ 1072.263756][T19865] do_syscall_64+0x115/0x870 [ 1072.263768][T19865] ? clear_bhb_loop+0x40/0x90 [ 1072.263782][T19865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.263793][T19865] RIP: 0033:0x7f6f40f9e019 [ 1072.263802][T19865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.263813][T19865] RSP: 002b:00007f6f41d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1072.263824][T19865] RAX: ffffffffffffffda RBX: 00007f6f41225fa0 RCX: 00007f6f40f9e019 [ 1072.263831][T19865] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1072.263837][T19865] RBP: 00007f6f41d94090 R08: 0000200000000040 R09: 0000000000000000 [ 1072.263844][T19865] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1072.263850][T19865] R13: 00007f6f41226038 R14: 00007f6f41225fa0 R15: 00007fffdc285728 [ 1072.263863][T19865] [ 1072.624946][ T30] audit: type=1400 audit(3933087437.600:7874): avc: denied { write } for pid=19856 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.647084][ T30] audit: type=1800 audit(3933087437.800:7875): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1072.738684][ T30] audit: type=1800 audit(3933087438.290:7876): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1073.572635][T19869] ceph: No mds server is up or the cluster is laggy [ 1073.581452][ T30] audit: type=1800 audit(3933087439.160:7877): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290179 res=0 errno=0 [ 1073.680314][ T7118] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1073.731637][ T5708] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1073.739373][T16874] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1073.845709][ T30] audit: type=1800 audit(3933087439.410:7878): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1073.904312][T16874] usb 3-1: Using ep0 maxpacket: 8 [ 1073.918722][T16874] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.949895][ T5708] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1073.961035][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.003062][T16874] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1074.023225][ T5708] usb 2-1: Product: syz [ 1074.054318][ T30] audit: type=1800 audit(3933087439.610:7879): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1074.078086][T16874] usb 3-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00 [ 1074.088969][ T5708] usb 2-1: Manufacturer: syz [ 1074.118373][ T5708] usb 2-1: SerialNumber: syz [ 1074.135370][T16874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.149262][ T5708] usb 2-1: config 0 descriptor?? [ 1074.185822][T16874] usb 3-1: config 0 descriptor?? [ 1074.369998][ T5708] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1074.610283][T16874] thrustmaster 0003:044F:B300.004E: unknown main item tag 0x0 [ 1074.630108][T16874] thrustmaster 0003:044F:B300.004E: unknown main item tag 0x0 [ 1074.657139][T16874] thrustmaster 0003:044F:B300.004E: unknown main item tag 0x0 [ 1074.688328][T16874] thrustmaster 0003:044F:B300.004E: unknown main item tag 0x0 [ 1074.746150][T16874] thrustmaster 0003:044F:B300.004E: unknown main item tag 0x0 [ 1074.778595][T16874] thrustmaster 0003:044F:B300.004E: bogus close delimiter [ 1074.791716][T19910] netlink: 'syz.6.3677': attribute type 2 has an invalid length. [ 1074.808670][T16874] thrustmaster 0003:044F:B300.004E: item 0 0 2 10 parsing failed [ 1074.826784][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3677'. [ 1074.846263][T16874] thrustmaster 0003:044F:B300.004E: parse failed [ 1074.863240][ T10] kernel read not supported for file /fb0 (pid: 10 comm: kworker/0:1) [ 1074.871774][T16874] thrustmaster 0003:044F:B300.004E: probe with driver thrustmaster failed with error -22 [ 1074.926822][T16874] usb 3-1: USB disconnect, device number 118 [ 1075.105011][T19917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1075.114089][T19912] macsec1: entered promiscuous mode [ 1075.126114][T19912] virt_wifi0: entered promiscuous mode [ 1075.796030][ T4928] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1075.808472][ T4928] Bluetooth: hci5: Injecting HCI hardware error event [ 1075.885621][ T4928] Bluetooth: hci5: hardware error 0x00 [ 1076.355788][ T5708] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1076.821452][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1076.821463][ T30] audit: type=1800 audit(3933087442.390:7893): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1077.600939][T19927] binder: 19925:19927 ioctl c0306201 200000000080 returned -14 [ 1077.609451][T19927] binder: BINDER_SET_CONTEXT_MGR already set [ 1077.615840][T19927] binder: 19925:19927 ioctl 4018620d 200000000040 returned -16 [ 1077.623703][T19927] binder: 19925:19927 ioctl c0306201 2000000003c0 returned -14 [ 1077.753422][ T30] audit: type=1800 audit(3933087442.470:7894): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1077.804069][ T10] usb 2-1: USB disconnect, device number 12 [ 1077.918634][ T30] audit: type=1800 audit(3933087442.470:7895): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=290227 res=0 errno=0 [ 1078.062451][ T30] audit: type=1800 audit(3933087442.470:7896): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=290228 res=0 errno=0 [ 1078.199638][ T30] audit: type=1800 audit(3933087442.470:7897): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=290207 res=0 errno=0 [ 1078.342490][ T30] audit: type=1800 audit(3933087442.470:7898): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=290229 res=0 errno=0 [ 1078.373167][ T4928] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1078.503698][ T30] audit: type=1800 audit(3933087442.500:7899): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=290250 res=0 errno=0 [ 1079.464225][ T30] audit: type=1800 audit(3933087444.020:7900): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1079.738806][ T30] audit: type=1800 audit(3933087445.310:7901): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1080.833495][ T4928] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 1081.091349][ T30] audit: type=1800 audit(3933087446.660:7902): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1081.621509][T19974] syzkaller0: entered allmulticast mode [ 1083.198868][T19984] overlayfs: failed to clone upperpath [ 1083.256171][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1083.256181][ T30] audit: type=1800 audit(3933087448.830:7908): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1083.713677][ T30] audit: type=1800 audit(3933087449.220:7909): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1083.882362][ T30] audit: type=1400 audit(3933087449.450:7910): avc: denied { setattr } for pid=19994 comm="syz.5.3702" name="RDS" dev="sockfs" ino=86922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1084.058948][ T30] audit: type=1800 audit(3933087449.530:7911): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1084.221023][ T30] audit: type=1800 audit(3933087449.570:7912): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1084.221051][ T30] audit: type=1800 audit(3933087449.740:7913): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1084.286942][ T30] audit: type=1800 audit(3933087449.840:7914): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1084.330586][ T30] audit: type=1800 audit(3933087449.900:7915): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1084.492298][ T30] audit: type=1800 audit(3933087450.060:7916): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1084.596413][ T30] audit: type=1800 audit(3933087450.170:7917): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1084.772816][T20031] netlink: 'syz.6.3714': attribute type 1 has an invalid length. [ 1084.772832][T20031] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3714'. [ 1085.518482][T20062] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1085.569973][T20060] vti0: entered promiscuous mode [ 1085.619313][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 1085.639245][T20062] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1085.832760][T20062] overlayfs: failed lookup in lower (newroot/158, name='file0', err=-40): overlapping layers [ 1086.094224][ T5708] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1086.956342][ T4928] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 1087.068524][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 1087.149853][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 1087.171125][T20098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3729'. [ 1087.207924][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1087.232833][T20093] bond0: (slave bond_slave_0): Releasing backup interface [ 1087.277650][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1087.323793][T20093] bond0: (slave bond_slave_1): Releasing backup interface [ 1087.351631][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 1088.090352][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1088.133888][T20093] team0: Port device team_slave_0 removed [ 1088.147864][ T5708] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 1088.172631][T20093] team0: Port device team_slave_1 removed [ 1088.192411][ T5708] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1088.243409][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1088.261957][T20093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.274465][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1088.287463][ T5708] usb 3-1: Product: syz [ 1088.301231][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.322086][ T5708] usb 3-1: Manufacturer: syz [ 1088.340442][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1088.340453][ T30] audit: type=1800 audit(3933087453.910:7931): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291105 res=0 errno=0 [ 1088.372547][T20074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1088.383326][T20093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.401038][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.411532][T20074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1088.431365][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1088.446031][T20093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.454012][T20074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1088.472388][T20093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.482106][T20074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1088.489723][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.498124][ T30] audit: type=1800 audit(3933087453.960:7932): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=291136 res=0 errno=0 [ 1088.531576][T20093] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1088.552398][T20074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1088.563393][ T10] usb 2-1: config 0 descriptor?? [ 1088.572283][T20074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1088.583406][ T10] hub 2-1:0.0: USB hub found [ 1088.606296][ T5708] usb 3-1: USB2VGA dongle found at address 119 [ 1088.614390][T20098] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1088.615703][T20099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1088.642319][ T30] audit: type=1800 audit(3933087453.960:7933): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291112 res=0 errno=0 [ 1088.680636][ T5708] usb 3-1: Allocated 8 output buffers [ 1088.706193][ T30] audit: type=1800 audit(3933087453.960:7934): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291113 res=0 errno=0 [ 1088.734187][ T5708] usb 3-1: Failed to early initialize device [ 1088.789447][ T10] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1088.837260][ T5708] usb 3-1: USB disconnect, device number 119 [ 1088.899918][T20103] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1088.909578][T20103] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1088.919348][T20103] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1088.979754][ T30] audit: type=1800 audit(3933087454.170:7935): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291156 res=0 errno=0 [ 1089.142529][ T30] audit: type=1800 audit(3933087454.170:7936): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=291185 res=0 errno=0 [ 1089.208403][T20095] netlink: 'syz.1.3730': attribute type 1 has an invalid length. [ 1089.255201][T20095] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3730'. [ 1089.306307][ T30] audit: type=1800 audit(3933087454.170:7937): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=291163 res=0 errno=0 [ 1089.339440][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1089.362992][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1089.409405][ T30] audit: type=1800 audit(3933087454.170:7938): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=291164 res=0 errno=0 [ 1089.443686][ T10] usb 2-1: USB disconnect, device number 13 [ 1089.528837][ T30] audit: type=1800 audit(3933087454.170:7939): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=291165 res=0 errno=0 [ 1089.560020][T20141] ip6erspan0: entered allmulticast mode [ 1089.596846][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3740'. [ 1089.606951][ T30] audit: type=1800 audit(3933087454.250:7940): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=291213 res=0 errno=0 [ 1089.637585][T20141] ICMPv6: NA: ff:ff:ff:ff:ff:ff advertised our address fe80::aa on syz_tun! [ 1090.032007][T20160] syz.6.3744: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1090.093175][T20160] CPU: 0 UID: 0 PID: 20160 Comm: syz.6.3744 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.093197][T20160] Tainted: [L]=SOFTLOCKUP [ 1090.093201][T20160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1090.093208][T20160] Call Trace: [ 1090.093212][T20160] [ 1090.093217][T20160] dump_stack_lvl+0x100/0x190 [ 1090.093237][T20160] warn_alloc.cold+0x94/0xa8 [ 1090.093249][T20160] ? __pfx_warn_alloc+0x10/0x10 [ 1090.093261][T20160] ? do_syscall_64+0x115/0x870 [ 1090.093274][T20160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.093289][T20160] ? __lock_acquire+0x49f/0x1a40 [ 1090.093305][T20160] ? find_held_lock+0x2b/0x80 [ 1090.093316][T20160] ? avc_has_extended_perms+0x33a/0x1080 [ 1090.093330][T20160] ? avc_has_extended_perms+0x33a/0x1080 [ 1090.093347][T20160] __vmalloc_node_range_noprof+0x136c/0x1630 [ 1090.093368][T20160] ? trace_contention_end+0x126/0x160 [ 1090.093383][T20160] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1090.093408][T20160] ? dvb_demux_do_ioctl+0x929/0x1200 [ 1090.093429][T20160] ? find_held_lock+0x2b/0x80 [ 1090.093440][T20160] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1090.093458][T20160] ? __pfx___mutex_lock+0x10/0x10 [ 1090.093475][T20160] ? tomoyo_path_number_perm+0x188/0x580 [ 1090.093495][T20160] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1090.093513][T20160] __vmalloc_node_noprof+0xad/0xf0 [ 1090.093530][T20160] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1090.093550][T20160] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1090.093569][T20160] ? do_vfs_ioctl+0x226/0x13e0 [ 1090.093587][T20160] dvb_usercopy+0x167/0x340 [ 1090.093602][T20160] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1090.093619][T20160] ? __pfx_dvb_usercopy+0x10/0x10 [ 1090.093641][T20160] ? selinux_file_ioctl+0x13b/0x290 [ 1090.093658][T20160] ? selinux_file_ioctl+0xb6/0x290 [ 1090.093676][T20160] dvb_demux_ioctl+0x29/0x40 [ 1090.093691][T20160] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1090.093707][T20160] __x64_sys_ioctl+0x18e/0x210 [ 1090.093724][T20160] do_syscall_64+0x115/0x870 [ 1090.093737][T20160] ? clear_bhb_loop+0x40/0x90 [ 1090.093750][T20160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.093762][T20160] RIP: 0033:0x7fdc5cd9e019 [ 1090.093772][T20160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.093784][T20160] RSP: 002b:00007fdc5dcbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1090.093795][T20160] RAX: ffffffffffffffda RBX: 00007fdc5d025fa0 RCX: 00007fdc5cd9e019 [ 1090.093802][T20160] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000004 [ 1090.093809][T20160] RBP: 00007fdc5ce3500c R08: 0000000000000000 R09: 0000000000000000 [ 1090.093815][T20160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.093821][T20160] R13: 00007fdc5d026038 R14: 00007fdc5d025fa0 R15: 00007ffd93faa408 [ 1090.093836][T20160] [ 1090.093853][T20160] Mem-Info: [ 1090.556758][T20160] active_anon:3663 inactive_anon:7114 isolated_anon:0 [ 1090.556758][T20160] active_file:22258 inactive_file:40811 isolated_file:0 [ 1090.556758][T20160] unevictable:1769 dirty:206 writeback:0 [ 1090.556758][T20160] slab_reclaimable:12878 slab_unreclaimable:117190 [ 1090.556758][T20160] mapped:32018 shmem:1301 pagetables:1645 [ 1090.556758][T20160] sec_pagetables:0 bounce:0 [ 1090.556758][T20160] kernel_misc_reclaimable:0 [ 1090.556758][T20160] free:1255654 free_pcp:15884 free_cma:0 [ 1090.735092][ T5708] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1090.782176][T20160] Node 0 active_anon:14652kB inactive_anon:29288kB active_file:88920kB inactive_file:163064kB unevictable:5540kB isolated(anon):0kB isolated(file):0kB mapped:128028kB dirty:824kB writeback:0kB shmem:3668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14656kB pagetables:6460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1090.898559][ T5708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1090.908658][ T5708] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.920984][ T5708] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1090.978875][ T5708] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1090.989058][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.025317][ T5708] usb 3-1: Product: syz [ 1091.047647][ T5708] usb 3-1: Manufacturer: syz [ 1091.070264][ T5708] usb 3-1: SerialNumber: syz [ 1091.086348][T20160] Node 1 active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1091.145956][ T5708] usb 3-1: selecting invalid altsetting 1 [ 1091.159174][ T5708] usb 3-1: unit 6 not found! [ 1091.275747][T20184] tmpfs: Unknown parameter 'nr_ino' [ 1091.358543][ T5708] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 1091.432856][ T5708] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1091.462712][T20160] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.542300][T20191] tmpfs: Unknown parameter 'nr_ino' [ 1091.558483][T13775] udevd[13775]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1091.589713][ T5708] usb 3-1: USB disconnect, device number 120 [ 1091.800297][T20160] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1091.835185][T20160] Node 0 DMA32 free:1070832kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14652kB inactive_anon:33756kB active_file:91452kB inactive_file:163080kB unevictable:1584kB writepending:836kB zspages:0kB present:3129332kB managed:2532112kB mlocked:48kB bounce:0kB free_pcp:50864kB local_pcp:50864kB free_cma:0kB [ 1091.912942][T20160] lowmem_reserve[]: 0 0 0 0 0 [ 1091.923766][T20160] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1091.962517][T20160] lowmem_reserve[]: 0 0 0 0 0 [ 1091.968012][T20160] Node 1 Normal free:3931364kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:92kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9628kB local_pcp:9628kB free_cma:0kB [ 1092.001429][T20160] lowmem_reserve[]: 0 0 0 0 0 [ 1092.026379][T20160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1092.051236][T20160] Node 0 DMA32: 3155*4kB (UM) 2595*8kB (UME) 1537*16kB (UME) 905*32kB (UM) 552*64kB (UME) 313*128kB (UME) 127*256kB (UM) 53*512kB (UME) 15*1024kB (UM) 5*2048kB (UM) 201*4096kB (UM) = 1070868kB [ 1092.074035][T20160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1092.086382][T20160] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 3*16kB (UM) 1*32kB (M) 2*64kB (M) 0*128kB 4*256kB (UM) 2*512kB (UM) 5*1024kB (UM) 0*2048kB 958*4096kB (M) = 3931364kB [ 1092.126520][T20160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.150024][T20160] Node 0 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1092.161823][T20160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1092.171784][T20160] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1092.184642][T20160] 65014 total pagecache pages [ 1092.189365][T20160] 4 pages in swap cache [ 1092.193538][T20160] Free swap = 124980kB [ 1092.287166][ T7118] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1092.298328][T20160] Total swap = 124996kB [ 1092.307943][T20160] 2097051 pages RAM [ 1092.315673][T20160] 0 pages HighMem/MovableOnly [ 1092.326083][T20160] 432314 pages reserved [ 1092.338406][T20160] 0 pages cma reserved [ 1092.445402][ T7118] usb 2-1: too many configurations: 24, using maximum allowed: 8 [ 1092.470197][ T7118] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1092.482242][ T7118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.503791][ T7118] usb 2-1: Product: syz [ 1092.521303][ T7118] usb 2-1: Manufacturer: syz [ 1092.534826][ T7118] usb 2-1: SerialNumber: syz [ 1092.569990][ T5724] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1093.100569][ T10] usb 2-1: USB disconnect, device number 14 [ 1093.852365][ T5724] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1093.927765][ T5724] ath9k_htc: Failed to initialize the device [ 1094.949767][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 1095.941076][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1095.941087][ T30] audit: type=1800 audit(3933087461.510:7984): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1096.215478][T20226] FAULT_INJECTION: forcing a failure. [ 1096.215478][T20226] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.228168][T20226] CPU: 0 UID: 0 PID: 20226 Comm: syz.1.3767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1096.228186][T20226] Tainted: [L]=SOFTLOCKUP [ 1096.228190][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1096.228196][T20226] Call Trace: [ 1096.228200][T20226] [ 1096.228205][T20226] dump_stack_lvl+0x100/0x190 [ 1096.228222][T20226] should_fail_ex.cold+0x5/0xa [ 1096.228237][T20226] should_failslab+0xc2/0x120 [ 1096.228251][T20226] kmem_cache_alloc_bulk_noprof+0x77/0x890 [ 1096.228266][T20226] ? __pfx___cant_migrate+0x10/0x10 [ 1096.228286][T20226] xdp_test_run_batch.constprop.0+0x155b/0x1ca0 [ 1096.228310][T20226] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 1096.228328][T20226] ? find_held_lock+0x2b/0x80 [ 1096.228344][T20226] ? ktime_get+0x23e/0x320 [ 1096.228357][T20226] ? ktime_get+0x1a4/0x320 [ 1096.228372][T20226] bpf_test_run_xdp_live+0x367/0x760 [ 1096.228392][T20226] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1096.228408][T20226] ? __mutex_unlock_slowpath+0x6da/0x930 [ 1096.228424][T20226] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1096.228437][T20226] ? find_held_lock+0x2b/0x80 [ 1096.228448][T20226] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1096.228464][T20226] ? bpf_dispatcher_change_prog+0x2d9/0xa50 [ 1096.228485][T20226] ? 0xffffffffa0205480 [ 1096.228495][T20226] ? 0xffffffffa0205480 [ 1096.228503][T20226] ? 0xffffffffa0205480 [ 1096.228511][T20226] ? bpf_dispatcher_change_prog+0x2de/0xa50 [ 1096.228526][T20226] bpf_prog_test_run_xdp+0xd7d/0x1670 [ 1096.228541][T20226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1096.228556][T20226] ? fput+0x79/0x100 [ 1096.228568][T20226] ? __bpf_prog_get+0x97/0x2a0 [ 1096.228582][T20226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1096.228593][T20226] __sys_bpf+0x2a12/0x4e80 [ 1096.228610][T20226] ? __pfx___sys_bpf+0x10/0x10 [ 1096.228621][T20226] ? find_held_lock+0x2b/0x80 [ 1096.228630][T20226] ? get_pid_task+0xfc/0x250 [ 1096.228639][T20226] ? get_pid_task+0xfc/0x250 [ 1096.228653][T20226] ? find_held_lock+0x2b/0x80 [ 1096.228665][T20226] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1096.228676][T20226] ? find_held_lock+0x2b/0x80 [ 1096.228685][T20226] ? ksys_write+0x190/0x250 [ 1096.228701][T20226] ? ksys_write+0x190/0x250 [ 1096.228726][T20226] ? fput+0x79/0x100 [ 1096.228740][T20226] ? __x64_sys_bpf+0xce/0x140 [ 1096.228751][T20226] __x64_sys_bpf+0xce/0x140 [ 1096.228762][T20226] ? do_syscall_64+0x90/0x870 [ 1096.228775][T20226] do_syscall_64+0x115/0x870 [ 1096.228787][T20226] ? clear_bhb_loop+0x40/0x90 [ 1096.228801][T20226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.228812][T20226] RIP: 0033:0x7f42b9f9e019 [ 1096.228822][T20226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1096.228833][T20226] RSP: 002b:00007f42baef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1096.228844][T20226] RAX: ffffffffffffffda RBX: 00007f42ba225fa0 RCX: 00007f42b9f9e019 [ 1096.228851][T20226] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1096.228858][T20226] RBP: 00007f42baef5090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.228864][T20226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1096.228870][T20226] R13: 00007f42ba226038 R14: 00007f42ba225fa0 R15: 00007fffee47f8b8 [ 1096.228884][T20226] [ 1096.581616][ T30] audit: type=1800 audit(3933087461.620:7985): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1096.602865][ T30] audit: type=1800 audit(3933087461.730:7986): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3768" name="online" dev="sysfs" ino=1342 res=0 errno=0 [ 1096.812270][T20240] netlink: 'syz.4.3771': attribute type 83 has an invalid length. [ 1097.077954][T16874] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1097.094201][ T30] audit: type=1800 audit(3933087462.640:7987): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1097.281945][T16874] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.308647][T16874] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1097.346268][T16874] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1097.391638][T16874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.437185][T16874] usb 7-1: config 0 descriptor?? [ 1097.444549][ T30] audit: type=1800 audit(3933087463.010:7988): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292091 res=0 errno=0 [ 1097.475928][T20258] loop6: detected capacity change from 0 to 2640 [ 1097.515084][T13775] buffer_io_error: 25 callbacks suppressed [ 1097.515095][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1097.546819][ T5708] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1097.555254][ T30] audit: type=1800 audit(3933087463.040:7989): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=292120 res=0 errno=0 [ 1097.607849][ T5708] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1097.637670][T20258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1097.676262][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3779'. [ 1097.689796][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1097.710653][ T30] audit: type=1800 audit(3933087463.040:7990): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=292098 res=0 errno=0 [ 1097.747245][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1097.790910][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1097.838797][T20265] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20269] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20265] [ 1097.858770][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1097.867923][ T30] audit: type=1800 audit(3933087463.040:7991): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=292099 res=0 errno=0 [ 1098.002837][ T30] audit: type=1800 audit(3933087463.040:7992): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=292100 res=0 errno=0 [ 1098.028427][T20258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1098.869094][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3770'. [ 1098.895962][ T30] audit: type=1800 audit(3933087463.120:7993): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292165 res=0 errno=0 [ 1098.917968][T20276] netlink: 'syz.5.3781': attribute type 2 has an invalid length. [ 1098.927081][T20261] nbd: must specify an index to disconnect [ 1098.935004][T16874] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1098.952483][T20276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3781'. [ 1098.973203][T20258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1098.996945][T20276] 9p: Bad value for 'rfdno' [ 1099.056408][T20258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1099.115643][T16874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1099.130028][T16874] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1099.161070][T20258] Buffer I/O error on dev loop6, logical block 0, async page read [ 1099.173270][T16874] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1099.212390][T16874] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1099.232041][T16874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1099.245491][T20258] ldm_validate_partition_table(): Disk read failed. [ 1099.260583][T16874] usb 3-1: Product: syz [ 1099.273271][T16874] usb 3-1: Manufacturer: syz [ 1099.285654][T20258] Dev loop6: unable to read RDB block 0 [ 1099.292896][T16874] usb 3-1: SerialNumber: syz [ 1099.319771][T20284] tipc: Enabling of bearer rejected, failed to enable media [ 1099.334020][T20258] loop6: unable to read partition table [ 1099.342382][T20284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3783'. [ 1099.362619][T20258] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1099.595157][T16874] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1099.775929][T20289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3785'. [ 1099.860436][T20272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3780'. [ 1100.106225][T20295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.287579][T16874] usb 7-1: USB disconnect, device number 51 [ 1100.300796][T20295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.087838][ T5708] usb 3-1: USB disconnect, device number 121 [ 1101.175485][ T5708] usblp0: removed [ 1101.200805][ T4977] ldm_validate_partition_table(): Disk read failed. [ 1101.297627][ T4977] Dev loop6: unable to read RDB block 0 [ 1101.318836][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 1101.334318][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1101.347577][T20308] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1101.362092][T20308] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1101.379187][T20308] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1101.392978][T20308] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1101.433360][ T4977] loop6: unable to read partition table [ 1101.466658][T20312] random: crng reseeded on system resumption [ 1101.494244][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1101.494256][ T30] audit: type=1800 audit(3933087467.060:8010): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1101.523011][ T4977] ldm_validate_partition_table(): Disk read failed. [ 1101.573439][ T4977] Dev loop6: unable to read RDB block 0 [ 1101.598558][ T4977] loop6: unable to read partition table [ 1101.743790][ T30] audit: type=1800 audit(3933087467.110:8011): pid=20305 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3789" name="rcu_expedited" dev="sysfs" ino=15 res=0 errno=0 [ 1101.778589][T20318] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3796'. [ 1101.791983][T20320] Restarting kernel threads ... [ 1101.798261][T20320] Done restarting kernel threads. [ 1102.564030][ T30] audit: type=1400 audit(3933087467.370:8012): avc: denied { ioctl } for pid=20311 comm="syz.1.3792" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1102.656707][T13775] buffer_io_error: 43 callbacks suppressed [ 1102.656720][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1102.753741][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1102.782890][ T30] audit: type=1800 audit(3933087468.010:8013): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1102.828945][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1102.933795][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.066395][ T30] audit: type=1800 audit(3933087468.030:8014): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1103.095288][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.257191][T20332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3800'. [ 1103.297988][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1103.347655][ T30] audit: type=1800 audit(3933087468.110:8015): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292675 res=0 errno=0 [ 1103.371237][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.271825][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.592048][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.641233][ T30] audit: type=1800 audit(3933087468.110:8016): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292689 res=0 errno=0 [ 1104.689034][T13775] Buffer I/O error on dev loop6, logical block 0, async page read [ 1104.793193][ T30] audit: type=1800 audit(3933087468.130:8017): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=292642 res=0 errno=0 [ 1104.953454][ T30] audit: type=1800 audit(3933087468.180:8018): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15560 res=0 errno=0 [ 1104.989270][T20361] netlink: 'syz.1.3809': attribute type 4 has an invalid length. [ 1105.068766][ T30] audit: type=1400 audit(3933087468.280:8019): avc: denied { write } for pid=20331 comm="syz.2.3800" name="functions" dev="configfs" ino=8702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1105.121458][T20362] netlink: 'syz.1.3809': attribute type 4 has an invalid length. [ 1105.164411][T16874] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1105.250247][ T4977] ldm_validate_partition_table(): Disk read failed. [ 1105.278045][ T4977] Dev loop6: unable to read RDB block 0 [ 1105.295494][ T4977] loop6: unable to read partition table [ 1105.304663][T16874] usb 3-1: device descriptor read/64, error -71 [ 1105.326307][T20361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.333691][T20361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.415850][ T4977] ldm_validate_partition_table(): Disk read failed. [ 1105.443244][ T4977] Dev loop6: unable to read RDB block 0 [ 1105.457204][ T4977] loop6: unable to read partition table [ 1105.625379][T16874] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1105.743638][T20361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.755261][T16874] usb 3-1: device descriptor read/64, error -71 [ 1105.816354][T20361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.834262][ T10] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1105.875263][T16874] usb usb3-port1: attempt power cycle [ 1105.998813][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 1106.011159][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1106.031635][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.049854][ T10] usb 7-1: Product: syz [ 1106.058098][ T10] usb 7-1: Manufacturer: syz [ 1106.068080][ T10] usb 7-1: SerialNumber: syz [ 1106.224579][T16874] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1106.232351][ T6788] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.256492][ T6788] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.272385][T16874] usb 3-1: device descriptor read/8, error -71 [ 1106.347772][ T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1106.369664][ T6788] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.389396][ T10] usb 7-1: unit 2 not found! [ 1106.401181][ T6788] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.412636][ T10] usb 7-1: unit 6 not found! [ 1106.594607][T16874] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1106.647053][T16874] usb 3-1: device descriptor read/8, error -71 [ 1106.727765][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1106.727776][ T30] audit: type=1800 audit(3933087472.300:8031): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=293104 res=0 errno=0 [ 1106.762942][ T10] usb 7-1: USB disconnect, device number 52 [ 1106.778730][T16874] usb usb3-port1: unable to enumerate USB device [ 1106.930453][ T30] audit: type=1800 audit(3933087472.300:8032): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=293105 res=0 errno=0 [ 1107.005704][T13744] udevd[13744]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1107.083192][ T30] audit: type=1800 audit(3933087472.330:8033): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=293084 res=0 errno=0 [ 1107.210906][ T30] audit: type=1800 audit(3933087472.330:8034): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=293106 res=0 errno=0 [ 1107.296788][ T30] audit: type=1800 audit(3933087472.350:8035): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293205 res=0 errno=0 [ 1107.371809][ T30] audit: type=1800 audit(3933087472.360:8036): pid=13744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293338 res=0 errno=0 [ 1107.446483][ T30] audit: type=1800 audit(3933087472.360:8037): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293229 res=0 errno=0 [ 1107.516974][ T30] audit: type=1800 audit(3933087472.360:8038): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293317 res=0 errno=0 [ 1107.588860][ T30] audit: type=1800 audit(3933087472.390:8039): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293242 res=0 errno=0 [ 1107.665457][ T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1107.692023][ T30] audit: type=1800 audit(3933087472.390:8040): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=293263 res=0 errno=0 [ 1107.838538][ T10] usb 2-1: device descriptor read/64, error -71 [ 1108.124802][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1108.254209][ T10] usb 2-1: device descriptor read/64, error -71 [ 1108.364679][ T10] usb usb2-port1: attempt power cycle [ 1108.704208][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1108.724872][ T10] usb 2-1: device descriptor read/8, error -71 [ 1108.964554][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1109.010059][T20442] 9pnet_fd: Insufficient options for proto=fd [ 1109.019588][ T10] usb 2-1: device descriptor read/8, error -71 [ 1109.102014][T20442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.109318][T20442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.134919][ T10] usb usb2-port1: unable to enumerate USB device [ 1109.220698][T20442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.237123][T20442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.305814][ T6788] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.325470][ T6788] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.365296][ T6788] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.385548][ T6788] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.646813][T20468] syzkaller0: entered promiscuous mode [ 1110.665302][T20468] syzkaller0: entered allmulticast mode [ 1110.695418][T20468] tipc: Enabled bearer , priority 0 [ 1110.725039][T20467] tipc: Resetting bearer [ 1110.841604][T20467] tipc: Disabling bearer [ 1111.051074][T20470] lo speed is unknown, defaulting to 1000 [ 1112.072462][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1112.072472][ T30] audit: type=1800 audit(3933087477.640:8056): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294438 res=0 errno=0 [ 1112.127261][T19921] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1112.144663][T19921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1112.169797][T19921] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1112.183703][T19921] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1112.191359][T19921] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1112.312715][ T30] audit: type=1800 audit(3933087477.680:8057): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294449 res=0 errno=0 [ 1112.408560][ T30] audit: type=1800 audit(3933087477.790:8058): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294468 res=0 errno=0 [ 1112.496294][ T30] audit: type=1800 audit(3933087477.810:8059): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=294479 res=0 errno=0 [ 1112.813332][T20501] netlink: 'syz.5.3849': attribute type 1 has an invalid length. [ 1112.827954][ T30] audit: type=1326 audit(3933087478.400:8060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20495 comm="syz.5.3849" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fb9d9e019 code=0x0 [ 1113.321995][ T30] audit: type=1800 audit(3933087478.890:8061): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1113.479447][ T30] audit: type=1400 audit(3933087478.990:8062): avc: denied { getopt } for pid=20507 comm="syz.1.3851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1113.563303][T20518] vxfs: unable to read disk superblock at 1 [ 1113.638104][ T30] audit: type=1800 audit(3933087479.110:8063): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1113.671749][T20522] (syz.6.3854,20522,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 1113.701725][T20526] FAULT_INJECTION: forcing a failure. [ 1113.701725][T20526] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.746230][T20522] (syz.6.3854,20522,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1113.756003][T20518] vxfs: unable to read disk superblock at 8 [ 1113.789805][T20526] CPU: 0 UID: 0 PID: 20526 Comm: syz.1.3855 Tainted: G L syzkaller #0 PREEMPT(full) [ 1113.789825][T20526] Tainted: [L]=SOFTLOCKUP [ 1113.789829][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1113.789835][T20526] Call Trace: [ 1113.789840][T20526] [ 1113.789845][T20526] dump_stack_lvl+0x100/0x190 [ 1113.789863][T20526] should_fail_ex.cold+0x5/0xa [ 1113.789877][T20526] should_failslab+0xc2/0x120 [ 1113.789892][T20526] __kmalloc_noprof+0xfc/0x820 [ 1113.789906][T20526] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1113.789924][T20526] kernfs_fop_write_iter+0x26a/0x5f0 [ 1113.789940][T20526] vfs_write+0x6ac/0x1050 [ 1113.789957][T20526] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1113.789973][T20526] ? __pfx_vfs_write+0x10/0x10 [ 1113.789998][T20526] ksys_write+0x12a/0x250 [ 1113.790015][T20526] ? __pfx_ksys_write+0x10/0x10 [ 1113.790036][T20526] do_syscall_64+0x115/0x870 [ 1113.790049][T20526] ? clear_bhb_loop+0x40/0x90 [ 1113.790086][T20526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.790097][T20526] RIP: 0033:0x7f42b9f9e019 [ 1113.790107][T20526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.790118][T20526] RSP: 002b:00007f42baef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1113.790129][T20526] RAX: ffffffffffffffda RBX: 00007f42ba225fa0 RCX: 00007f42b9f9e019 [ 1113.790136][T20526] RDX: 000000000000007d RSI: 00002000000007c0 RDI: 0000000000000003 [ 1113.790143][T20526] RBP: 00007f42baef5090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.790149][T20526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.790155][T20526] R13: 00007f42ba226038 R14: 00007f42ba225fa0 R15: 00007fffee47f8b8 [ 1113.790169][T20526] [ 1113.971167][T20518] vxfs: can't find superblock. [ 1113.981245][T20522] (syz.6.3854,20522,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1113.990036][T20522] (syz.6.3854,20522,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1113.998241][ T30] audit: type=1800 audit(3933087479.270:8064): pid=20526 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3855" name="block2mtd" dev="sysfs" ino=59432 res=0 errno=0 [ 1114.020564][T20487] lo speed is unknown, defaulting to 1000 [ 1114.224935][ T30] audit: type=1800 audit(3933087479.790:8065): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=295461 res=0 errno=0 [ 1114.337521][T20489] Bluetooth: hci3: command tx timeout [ 1114.353542][T20534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3858'. [ 1114.377966][T20534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3858'. [ 1114.621830][ T189] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1114.631945][ T5763] bridge_slave_1: left allmulticast mode [ 1114.638139][ T5763] bridge_slave_1: left promiscuous mode [ 1114.657558][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.843469][ T5763] bridge_slave_0: left allmulticast mode [ 1114.863683][ T5763] bridge_slave_0: left promiscuous mode [ 1114.971262][ T189] usb 7-1: Using ep0 maxpacket: 8 [ 1114.981040][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.989335][ T189] usb 7-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.002248][ T189] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1115.012517][ T189] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1115.070154][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.114038][ T189] usb 7-1: config 0 descriptor?? [ 1115.595488][ T5763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1115.638385][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1115.652730][ T5763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1115.671991][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1115.699344][ T5763] bond0 (unregistering): Released all slaves [ 1115.716543][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1115.761463][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1115.816921][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1115.837256][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1115.937119][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1115.983931][T20577] block2mtd: too many arguments [ 1116.073174][T20579] FAULT_INJECTION: forcing a failure. [ 1116.073174][T20579] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.086762][T20579] CPU: 0 UID: 0 PID: 20579 Comm: syz.1.3864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1116.086781][T20579] Tainted: [L]=SOFTLOCKUP [ 1116.086785][T20579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1116.086791][T20579] Call Trace: [ 1116.086795][T20579] [ 1116.086799][T20579] dump_stack_lvl+0x100/0x190 [ 1116.086817][T20579] should_fail_ex.cold+0x5/0xa [ 1116.086832][T20579] should_failslab+0xc2/0x120 [ 1116.086846][T20579] __kmalloc_cache_noprof+0x91/0x6c0 [ 1116.086864][T20579] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 1116.086881][T20579] ? dummy_hrtimer_create+0x45/0x170 [ 1116.086894][T20579] dummy_hrtimer_create+0x45/0x170 [ 1116.086906][T20579] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 1116.086916][T20579] dummy_pcm_open+0xc1/0x5b0 [ 1116.086934][T20579] snd_pcm_open_substream+0xa76/0x1850 [ 1116.086948][T20579] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1116.086962][T20579] ? snd_pcm_oss_open+0x5e5/0x1390 [ 1116.086981][T20579] snd_pcm_oss_open+0x735/0x1390 [ 1116.087002][T20579] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1116.087019][T20579] ? __lock_acquire+0x49f/0x1a40 [ 1116.087033][T20579] ? __pfx_default_wake_function+0x10/0x10 [ 1116.087054][T20579] ? do_raw_spin_lock+0x128/0x260 [ 1116.087070][T20579] ? soundcore_open+0x231/0x5a0 [ 1116.087086][T20579] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1116.087103][T20579] soundcore_open+0x2e3/0x5a0 [ 1116.087119][T20579] ? __pfx_soundcore_open+0x10/0x10 [ 1116.087134][T20579] chrdev_open+0x234/0x6a0 [ 1116.087147][T20579] ? __pfx_chrdev_open+0x10/0x10 [ 1116.087159][T20579] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1116.087176][T20579] do_dentry_open+0x6ab/0x14d0 [ 1116.087186][T20579] ? __pfx_chrdev_open+0x10/0x10 [ 1116.087200][T20579] vfs_open+0x82/0x3f0 [ 1116.087215][T20579] path_openat+0x2873/0x4280 [ 1116.087233][T20579] ? __pfx_path_openat+0x10/0x10 [ 1116.087248][T20579] do_file_open+0x20e/0x430 [ 1116.087265][T20579] ? __pfx_do_file_open+0x10/0x10 [ 1116.087286][T20579] ? alloc_fd+0x471/0x7a0 [ 1116.087299][T20579] ? do_getname+0x191/0x390 [ 1116.087315][T20579] do_sys_openat2+0x10f/0x1e0 [ 1116.087329][T20579] ? __pfx_do_sys_openat2+0x10/0x10 [ 1116.087343][T20579] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1116.087357][T20579] ? __fget_files+0x21f/0x3d0 [ 1116.087371][T20579] __x64_sys_openat+0x12d/0x210 [ 1116.087385][T20579] ? __pfx___x64_sys_openat+0x10/0x10 [ 1116.087398][T20579] ? ksys_write+0x1ac/0x250 [ 1116.087419][T20579] do_syscall_64+0x115/0x870 [ 1116.087432][T20579] ? clear_bhb_loop+0x40/0x90 [ 1116.087445][T20579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.087456][T20579] RIP: 0033:0x7f42b9f9e019 [ 1116.087467][T20579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.087477][T20579] RSP: 002b:00007f42baef5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1116.087489][T20579] RAX: ffffffffffffffda RBX: 00007f42ba225fa0 RCX: 00007f42b9f9e019 [ 1116.087496][T20579] RDX: 0000000000000800 RSI: 0000200000001cc0 RDI: ffffffffffffff9c [ 1116.087503][T20579] RBP: 00007f42baef5090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.087510][T20579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1116.087516][T20579] R13: 00007f42ba226038 R14: 00007f42ba225fa0 R15: 00007fffee47f8b8 [ 1116.087530][T20579] [ 1117.086769][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1117.126654][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1117.149002][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1117.171916][ T189] ryos 0003:1E7D:3138.0050: unknown main item tag 0x0 [ 1117.204075][T20489] Bluetooth: hci3: command tx timeout [ 1117.235680][T20580] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1117.299946][ T189] ryos 0003:1E7D:3138.0050: hidraw0: USB HID v10.02 Device [HID 1e7d:3138] on usb-dummy_hcd.6-1/input0 [ 1117.436890][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1117.436902][ T30] audit: type=1800 audit(3933087483.010:8096): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297081 res=0 errno=0 [ 1117.548036][ T189] usb 7-1: USB disconnect, device number 53 [ 1117.689068][T20591] fido_id[20591]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1117.926239][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1118.018864][T20602] 9p: Bad value for 'rfdno' [ 1118.124548][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1118.129837][ T30] audit: type=1800 audit(3933087483.690:8097): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1118.177658][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.322434][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.108003][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1119.157395][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.195568][ T10] usb 2-1: config 0 descriptor?? [ 1119.227818][ T30] audit: type=1800 audit(3933087484.770:8098): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297137 res=0 errno=0 [ 1119.328061][ T30] audit: type=1800 audit(3933087484.780:8099): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=297166 res=0 errno=0 [ 1119.418666][ T30] audit: type=1800 audit(3933087484.780:8100): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=297144 res=0 errno=0 [ 1119.592973][T20628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.758322][T20628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.829100][ T30] audit: type=1800 audit(3933087484.780:8101): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=297145 res=0 errno=0 [ 1119.871221][T20487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.881793][T20628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1119.937124][T20487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.988278][T20487] bridge_slave_0: entered allmulticast mode [ 1120.012001][ T30] audit: type=1800 audit(3933087484.780:8102): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=297146 res=0 errno=0 [ 1120.042116][T20487] bridge_slave_0: entered promiscuous mode [ 1120.072844][T20487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.111829][T20487] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.132178][ T30] audit: type=1800 audit(3933087484.830:8103): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297186 res=0 errno=0 [ 1120.164835][T20487] bridge_slave_1: entered allmulticast mode [ 1121.165462][T20487] bridge_slave_1: entered promiscuous mode [ 1121.185227][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1122.161999][ T30] audit: type=1400 audit(3933087484.830:8104): avc: denied { write } for pid=20585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1123.165002][ T10] ft260 0003:0403:6030.0051: failed to retrieve chip version [ 1123.197654][ T10] ft260 0003:0403:6030.0051: probe with driver ft260 failed with error -71 [ 1123.343440][ T30] audit: type=1400 audit(3933087485.020:8105): avc: denied { write } for pid=20624 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1123.377212][ T10] usb 2-1: USB disconnect, device number 19 [ 1123.453583][T20487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.576125][T20487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.594968][ T30] audit: type=1800 audit(3933087485.140:8106): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1123.667047][T20651] vlan2: entered promiscuous mode [ 1123.688393][T20651] batadv_slave_1: entered promiscuous mode [ 1123.699181][ T30] audit: type=1800 audit(3933087485.520:8107): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297924 res=0 errno=0 [ 1123.759507][ T5763] hsr_slave_0: left promiscuous mode [ 1123.769454][ T30] audit: type=1800 audit(3933087485.730:8108): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=297980 res=0 errno=0 [ 1123.801017][ T5763] hsr_slave_1: left promiscuous mode [ 1123.806538][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1123.827969][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.849348][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.857247][ T30] audit: type=1800 audit(3933087489.110:8109): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1123.939652][ T30] audit: type=1800 audit(3933087489.370:8110): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=298507 res=0 errno=0 [ 1123.984184][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1123.997185][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.033940][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.082224][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1124.127187][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1124.172293][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1124.218280][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1124.273070][ T5763] team0 (unregistering): Port device team_slave_1 removed [ 1124.313076][ T5763] team0 (unregistering): Port device team_slave_0 removed [ 1124.439354][ T30] audit: type=1800 audit(3933087490.010:8111): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1124.576188][T20662] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3880'. [ 1124.657996][T20487] team0: Port device team_slave_0 added [ 1124.699683][ T30] audit: type=1800 audit(3933087490.270:8112): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1124.732411][T20487] team0: Port device team_slave_1 added [ 1124.827150][ T10] usb 2-1: string descriptor 0 read error: -71 [ 1124.869978][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.882275][T20668] /dev/nullb0: Can't open blockdev [ 1124.913017][ T30] audit: type=1800 audit(3933087490.480:8113): pid=20668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3881" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 1124.936804][T20668] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1124.953561][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.987516][T20667] bond1: option xmit_hash_policy: invalid value (6) [ 1125.007789][ T10] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1125.023625][T20667] bond1 (unregistering): Released all slaves [ 1125.062251][ T30] audit: type=1800 audit(3933087490.600:8114): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=299452 res=0 errno=0 [ 1125.088996][ T10] usb 2-1: no configuration chosen from 1 choice [ 1125.220870][ T10] usb 2-1: USB disconnect, device number 20 [ 1125.240891][T20487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.450194][T20487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.621144][T20487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.475515][T20684] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1126.501440][T20487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.555913][T20487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.786861][T20688] loop6: detected capacity change from 0 to 2640 [ 1128.322835][T20688] buffer_io_error: 42 callbacks suppressed [ 1128.322846][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1130.060582][T20487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.657858][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1131.719622][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1131.783604][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1131.783616][ T30] audit: type=1400 audit(3933087497.350:8121): avc: denied { write } for pid=20700 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1131.829957][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1131.879098][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1131.896990][T20487] hsr_slave_0: entered promiscuous mode [ 1131.952939][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1131.972084][T20487] hsr_slave_1: entered promiscuous mode [ 1132.015655][T20487] debugfs: 'hsr0' already exists in 'hsr' [ 1132.021518][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1132.142760][T20487] Cannot create hsr debugfs directory [ 1132.152872][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1132.177961][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1132.213395][T20688] ldm_validate_partition_table(): Disk read failed. [ 1132.269262][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1132.312604][T20688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1132.377218][T20688] Dev loop6: unable to read RDB block 0 [ 1132.469391][T20688] loop6: unable to read partition table [ 1132.501535][T20688] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1132.576879][T20718] netlink: 'syz.1.3889': attribute type 2 has an invalid length. [ 1132.640632][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3889'. [ 1132.690162][ T30] audit: type=1800 audit(3933087498.250:8122): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1132.721810][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3890'. [ 1132.791880][ T10] kernel read not supported for file /fb0 (pid: 10 comm: kworker/0:1) [ 1132.826374][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3889'. [ 1132.849365][ T30] audit: type=1800 audit(3933087498.260:8123): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1132.973112][T20727] bridge2: port 1(veth0_to_bond) entered blocking state [ 1132.984039][ T30] audit: type=1800 audit(3933087498.480:8124): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1133.012039][T20727] bridge2: port 1(veth0_to_bond) entered disabled state [ 1133.044316][T20727] veth0_to_bond: entered allmulticast mode [ 1133.069199][T20727] veth0_to_bond: entered promiscuous mode [ 1133.090945][ T30] audit: type=1800 audit(3933087498.610:8125): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1133.250928][T20736] FAULT_INJECTION: forcing a failure. [ 1133.250928][T20736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1133.269614][ T30] audit: type=1800 audit(3933087498.700:8126): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1133.312953][T20738] netlink: 'syz.5.3895': attribute type 2 has an invalid length. [ 1133.357332][T20741] netlink: 'syz.1.3896': attribute type 1 has an invalid length. [ 1133.374035][T20736] CPU: 0 UID: 0 PID: 20736 Comm: syz.4.3888 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.374054][T20736] Tainted: [L]=SOFTLOCKUP [ 1133.374058][T20736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1133.374064][T20736] Call Trace: [ 1133.374068][T20736] [ 1133.374072][T20736] dump_stack_lvl+0x100/0x190 [ 1133.374090][T20736] should_fail_ex.cold+0x5/0xa [ 1133.374104][T20736] ? prepare_alloc_pages+0x16d/0x5f0 [ 1133.374121][T20736] should_fail_alloc_page+0xeb/0x140 [ 1133.374136][T20736] prepare_alloc_pages+0x1f0/0x5f0 [ 1133.374151][T20736] ? find_held_lock+0x2b/0x80 [ 1133.374164][T20736] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 1133.374177][T20736] ? is_bpf_text_address+0x94/0x1a0 [ 1133.374194][T20736] ? __lock_acquire+0x49f/0x1a40 [ 1133.374210][T20736] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1133.374228][T20736] ? do_raw_spin_lock+0x128/0x260 [ 1133.374244][T20736] ? find_held_lock+0x2b/0x80 [ 1133.374253][T20736] ? debug_check_no_obj_freed+0x31f/0x630 [ 1133.374270][T20736] ? rcu_is_watching+0x12/0xc0 [ 1133.374289][T20736] ? debug_check_no_obj_freed+0x31f/0x630 [ 1133.374306][T20736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1133.374321][T20736] ? policy_nodemask+0xed/0x4f0 [ 1133.374336][T20736] alloc_pages_mpol+0x1fb/0x540 [ 1133.374352][T20736] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1133.374366][T20736] ? do_raw_spin_unlock+0x145/0x1e0 [ 1133.374381][T20736] ? _raw_spin_unlock+0x28/0x50 [ 1133.374393][T20736] ? __free_frozen_pages+0x751/0x1090 [ 1133.374410][T20736] ? __pfx_vcs_write+0x10/0x10 [ 1133.374420][T20736] alloc_pages_noprof+0x1a/0x160 [ 1133.374437][T20736] get_free_pages_noprof+0x10/0xb0 [ 1133.374451][T20736] vcs_write+0x11a/0xd70 [ 1133.374465][T20736] ? __import_iovec+0x1d2/0x640 [ 1133.374480][T20736] ? avc_policy_seqno+0x9/0x20 [ 1133.374493][T20736] ? __pfx_vcs_write+0x10/0x10 [ 1133.374504][T20736] ? bpf_lsm_file_permission+0x9/0x10 [ 1133.374521][T20736] ? security_file_permission+0x76/0x210 [ 1133.374532][T20736] ? iov_iter_advance+0xac/0x6d0 [ 1133.374546][T20736] ? rw_verify_area+0xce/0x6d0 [ 1133.374562][T20736] ? __pfx_vcs_write+0x10/0x10 [ 1133.374571][T20736] vfs_writev+0x5ed/0xdd0 [ 1133.374591][T20736] ? __pfx_vfs_writev+0x10/0x10 [ 1133.374607][T20736] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1133.374626][T20736] ? __fget_files+0x21f/0x3d0 [ 1133.374640][T20736] ? do_writev+0x13e/0x340 [ 1133.374655][T20736] do_writev+0x13e/0x340 [ 1133.374671][T20736] ? __pfx_do_writev+0x10/0x10 [ 1133.374690][T20736] do_syscall_64+0x115/0x870 [ 1133.374702][T20736] ? clear_bhb_loop+0x40/0x90 [ 1133.374716][T20736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.374727][T20736] RIP: 0033:0x7f6f40f9e019 [ 1133.374737][T20736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.374748][T20736] RSP: 002b:00007f6f41d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1133.374759][T20736] RAX: ffffffffffffffda RBX: 00007f6f41225fa0 RCX: 00007f6f40f9e019 [ 1133.374766][T20736] RDX: 000000000000000e RSI: 0000200000000c40 RDI: 0000000000000003 [ 1133.374773][T20736] RBP: 00007f6f41d94090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.374779][T20736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.374785][T20736] R13: 00007f6f41226038 R14: 00007f6f41225fa0 R15: 00007fffdc285728 [ 1133.374799][T20736] [ 1133.706744][T20743] 9p: Bad value for 'rfdno' [ 1133.712432][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3895'. [ 1133.821025][T20487] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1133.829424][T20747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3896'. [ 1133.838534][ T30] audit: type=1800 audit(3933087498.910:8127): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=24948 res=0 errno=0 [ 1133.860429][ T30] audit: type=1800 audit(3933087498.910:8128): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=24947 res=0 errno=0 [ 1133.882237][ T30] audit: type=1800 audit(3933087498.920:8129): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=301976 res=0 errno=0 [ 1133.977666][T20487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1133.985423][T20487] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1133.992502][ T30] audit: type=1800 audit(3933087499.510:8130): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1134.115745][T20487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1134.193707][T20487] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1134.235999][T20487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1134.265539][T20487] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1134.317512][T20487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1137.134618][T20777] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1137.417552][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1137.417562][ T30] audit: type=1800 audit(3933087502.990:8133): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302661 res=0 errno=0 [ 1137.492862][ T30] audit: type=1800 audit(3933087503.020:8134): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302672 res=0 errno=0 [ 1137.706305][ T30] audit: type=1400 audit(3933087503.130:8135): avc: denied { write } for pid=20778 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.779488][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1137.832289][T20487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.850442][ T30] audit: type=1800 audit(3933087503.200:8136): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1138.561445][ T7118] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1138.630213][T20487] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.743757][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.750900][ T5763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.766887][ T7118] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.797950][ T7118] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1138.842255][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.849436][ T5763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.862523][ T7118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.890170][ T30] audit: type=1800 audit(3933087504.460:8137): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302699 res=0 errno=0 [ 1138.913666][ T7118] usb 7-1: config 0 descriptor?? [ 1138.939767][ T7118] pwc: Askey VC010 type 2 USB webcam detected. [ 1139.027566][ T30] audit: type=1800 audit(3933087504.460:8138): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=302728 res=0 errno=0 [ 1139.156507][ T30] audit: type=1800 audit(3933087504.490:8139): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=302706 res=0 errno=0 [ 1139.272256][ T30] audit: type=1800 audit(3933087504.490:8140): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=302707 res=0 errno=0 [ 1139.382089][ T30] audit: type=1800 audit(3933087504.490:8141): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=302708 res=0 errno=0 [ 1139.478095][T14642] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1139.623456][ T30] audit: type=1800 audit(3933087504.520:8142): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302748 res=0 errno=0 [ 1139.925471][ T5708] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1140.095324][ T5708] usb 2-1: Using ep0 maxpacket: 8 [ 1140.100958][T20834] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3905'. [ 1140.129533][T20487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1140.140595][ T5708] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1140.160537][ T5708] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1140.217530][ T5708] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1140.271478][ T5708] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1140.320004][ T5708] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1140.383975][ T5708] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1140.427878][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.692497][ T5708] usb 2-1: usb_control_msg returned -32 [ 1140.720471][ T5708] usbtmc 2-1:16.0: can't read capabilities [ 1140.738464][T20487] veth0_vlan: entered promiscuous mode [ 1140.785756][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3916'. [ 1140.797087][T20487] veth1_vlan: entered promiscuous mode [ 1140.861172][T20487] veth0_macvtap: entered promiscuous mode [ 1140.909459][T20487] veth1_macvtap: entered promiscuous mode [ 1140.981601][T20487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.040920][T20487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.463208][T20863] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 1141.587330][ T7118] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1141.625444][ T7118] pwc: recv_control_msg error -71 req 02 val 2700 [ 1141.663032][ T10] usb 2-1: USB disconnect, device number 21 [ 1141.688763][ T7118] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1141.749030][ T7118] pwc: recv_control_msg error -71 req 04 val 1000 [ 1141.784901][ T7118] pwc: recv_control_msg error -71 req 04 val 1300 [ 1141.821026][ T7118] pwc: recv_control_msg error -71 req 04 val 1400 [ 1141.890071][ T7118] pwc: recv_control_msg error -71 req 02 val 2000 [ 1141.916131][T20869] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3920'. [ 1141.938605][ T7118] pwc: recv_control_msg error -71 req 02 val 2100 [ 1141.973929][ T7118] pwc: recv_control_msg error -71 req 04 val 1500 [ 1142.035830][ T7118] pwc: recv_control_msg error -71 req 02 val 2500 [ 1142.082577][ T7118] pwc: recv_control_msg error -71 req 02 val 2400 [ 1142.119129][ T7118] pwc: recv_control_msg error -71 req 02 val 2600 [ 1142.156246][ T7118] pwc: recv_control_msg error -71 req 02 val 2900 [ 1142.168444][ T5763] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 1142.200364][ T7118] pwc: recv_control_msg error -71 req 02 val 2800 [ 1142.218787][ T5763] bridge0 (unregistering): left promiscuous mode [ 1142.240244][ T7118] pwc: recv_control_msg error -71 req 04 val 1100 [ 1142.264340][ T5763] bridge0 (unregistering): left allmulticast mode [ 1142.278673][ T7118] pwc: recv_control_msg error -71 req 04 val 1200 [ 1142.328710][ T7118] pwc: Registered as video103. [ 1142.356977][ T7118] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input226 [ 1142.410537][ T5763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.448154][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1142.448171][ T30] audit: type=1800 audit(3933087508.020:8166): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=302988 res=0 errno=0 [ 1142.490042][ T7118] usb 7-1: USB disconnect, device number 54 [ 1142.553681][ T5763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.626230][ T5763] bond0 (unregistering): Released all slaves [ 1142.663129][ T30] audit: type=1800 audit(3933087508.050:8167): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="phys" dev="sysfs" ino=302961 res=0 errno=0 [ 1142.728196][ T5763] bond1 (unregistering): Released all slaves [ 1142.773228][ T5763] bond2 (unregistering): Released all slaves [ 1142.782439][ T30] audit: type=1800 audit(3933087508.160:8168): pid=20892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3925" name="enabled" dev="sysfs" ino=1877 res=0 errno=0 [ 1142.829671][ T5763] bond3 (unregistering): Released all slaves [ 1142.869817][ T5763] bond4 (unregistering): Released all slaves [ 1142.977307][T20860] lo speed is unknown, defaulting to 1000 [ 1143.001321][ T5763] tipc: Left network mode [ 1143.014367][T19094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.074599][T20489] Bluetooth: hci2: command 0x0405 tx timeout [ 1143.085125][ T30] audit: type=1800 audit(3933087508.640:8169): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1143.110617][T19091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.205470][T19091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.332880][ T30] audit: type=1800 audit(3933087508.900:8170): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303545 res=0 errno=0 [ 1143.417751][T19095] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.584007][ T30] audit: type=1800 audit(3933087508.990:8171): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1143.841206][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.859643][T20902] ima: policy update failed [ 1143.875618][ T30] audit: type=1800 audit(3933087509.430:8172): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=303745 res=0 errno=0 [ 1143.928032][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.086641][ T30] audit: type=1802 audit(3933087509.440:8173): pid=20902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.3929" res=0 errno=0 [ 1144.215372][T19091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.235913][ T30] audit: type=1800 audit(3933087509.590:8174): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1144.298354][T19091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.348826][T20921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1144.684553][T20926] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3936'. [ 1145.361933][ T30] audit: type=1800 audit(3933087509.850:8175): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1145.810504][ T5763] hsr_slave_0: left promiscuous mode [ 1145.823825][ T5763] hsr_slave_1: left promiscuous mode [ 1145.861528][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1145.894496][ T5763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1146.378621][ T5763] team0 (unregistering): Port device team_slave_1 removed [ 1146.420056][ T5763] team0 (unregistering): Port device team_slave_0 removed [ 1148.269308][T20954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1148.286382][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1148.286393][ T30] audit: type=1800 audit(3933087513.840:8179): pid=20954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3942" name="wakeup_count" dev="sysfs" ino=1412 res=0 errno=0 [ 1148.629675][ T30] audit: type=1800 audit(3933087513.980:8180): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1148.676701][T19094] smbdirect: ib_dev[syz2] removed [ 1148.844535][ T30] audit: type=1800 audit(3933087513.980:8181): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=32220 res=0 errno=0 [ 1149.005765][ T30] audit: type=1800 audit(3933087514.000:8182): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=32243 res=0 errno=0 [ 1149.227093][ T30] audit: type=1800 audit(3933087514.270:8183): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1149.380125][ T5763] IPVS: stop unused estimator thread 0... [ 1149.402473][ T30] audit: type=1800 audit(3933087514.610:8184): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1149.463895][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3954'. [ 1149.607360][ T30] audit: type=1400 audit(3933087515.180:8185): avc: denied { append } for pid=20997 comm="syz.1.3955" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1149.695537][T21001] netlink: 'syz.1.3955': attribute type 10 has an invalid length. [ 1149.761194][ T30] audit: type=1400 audit(3933087515.230:8186): avc: denied { write } for pid=20962 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1149.823008][T21001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3955'. [ 1150.734229][ T30] audit: type=1800 audit(3933087515.380:8187): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1150.980870][ T30] audit: type=1400 audit(3933087516.300:8188): avc: denied { write } for pid=21008 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.089855][T21001] team0: Port device geneve1 added [ 1151.124457][T19098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.142461][T19098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.258543][T19098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.307848][T19098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.564200][ T5708] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1152.167757][T21031] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3960'. [ 1152.335569][ T5708] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.371395][ T5708] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1152.408439][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.442613][ T5708] usb 7-1: config 0 descriptor?? [ 1152.470139][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 1152.819485][T21063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1154.360761][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1154.360772][ T30] audit: type=1800 audit(3933087519.930:8215): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16175 res=0 errno=0 [ 1154.460621][ T5708] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1154.496596][ T5708] pwc: recv_control_msg error -71 req 02 val 2700 [ 1154.535549][ T30] audit: type=1400 audit(3933087520.000:8216): avc: denied { write } for pid=21086 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1154.574217][ T5708] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1154.608190][ T5708] pwc: recv_control_msg error -71 req 04 val 1000 [ 1154.648977][ T5708] pwc: recv_control_msg error -71 req 04 val 1300 [ 1154.677684][ T30] audit: type=1800 audit(3933087520.210:8217): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1154.707718][ T5708] pwc: recv_control_msg error -71 req 04 val 1400 [ 1154.813920][ T5708] pwc: recv_control_msg error -71 req 02 val 2000 [ 1154.839729][ T5708] pwc: recv_control_msg error -71 req 02 val 2100 [ 1155.114458][ T5708] pwc: recv_control_msg error -71 req 04 val 1500 [ 1155.131167][ T30] audit: type=1800 audit(3933087520.690:8218): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1155.191847][ T5708] pwc: recv_control_msg error -71 req 02 val 2500 [ 1155.246674][ T5708] pwc: recv_control_msg error -71 req 02 val 2400 [ 1155.298565][ T5708] pwc: recv_control_msg error -71 req 02 val 2600 [ 1155.329822][ T30] audit: type=1800 audit(3933087520.860:8219): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1155.376069][ T5708] pwc: recv_control_msg error -71 req 02 val 2900 [ 1155.433008][ T5708] pwc: recv_control_msg error -71 req 02 val 2800 [ 1155.476760][ T5708] pwc: recv_control_msg error -71 req 04 val 1100 [ 1155.530990][ T5708] pwc: recv_control_msg error -71 req 04 val 1200 [ 1155.589042][ T5708] pwc: Registered as video103. [ 1155.602557][ T30] audit: type=1800 audit(3933087521.170:8220): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305011 res=0 errno=0 [ 1155.648131][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input227 [ 1155.759602][ T5708] usb 7-1: USB disconnect, device number 55 [ 1155.798393][ T30] audit: type=1800 audit(3933087521.200:8221): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=305015 res=0 errno=0 [ 1155.988693][ T30] audit: type=1800 audit(3933087521.240:8222): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305028 res=0 errno=0 [ 1156.114443][ T30] audit: type=1800 audit(3933087521.260:8223): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="ev" dev="sysfs" ino=305044 res=0 errno=0 [ 1156.221863][ T30] audit: type=1800 audit(3933087521.260:8224): pid=13745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="abs" dev="sysfs" ino=305047 res=0 errno=0 [ 1156.326520][T21127] Mass Storage Function, version: 2009/09/11 [ 1156.408033][T21127] LUN: removable file: (no medium) [ 1157.358069][T21150] netlink: 'syz.6.3984': attribute type 2 has an invalid length. [ 1157.386193][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3984'. [ 1158.163447][ T5708] kernel read not supported for file /fb0 (pid: 5708 comm: kworker/0:4) [ 1158.731975][T21162] netlink: 'syz.4.3988': attribute type 2 has an invalid length. [ 1158.802159][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3988'. [ 1158.811179][ T10] kernel read not supported for file /fb0 (pid: 10 comm: kworker/0:1) [ 1158.902880][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1159.045608][ T5708] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1159.085600][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1159.139245][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1159.225532][ T5708] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1159.257357][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.265900][T21178] fuse: Bad value for 'fd' [ 1159.323025][ T5708] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 1159.363119][ T5708] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1159.380062][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1159.380074][ T30] audit: type=1800 audit(3933087524.950:8249): pid=13775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=305695 res=0 errno=0 [ 1159.449637][ T5708] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1159.474411][T21181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1159.545529][ T30] audit: type=1800 audit(3933087524.990:8250): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1159.670991][ T30] audit: type=1800 audit(3933087525.210:8251): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1159.782268][ T30] audit: type=1800 audit(3933087525.210:8252): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=306026 res=0 errno=0 [ 1159.874643][T21188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21188 comm=syz.6.3999 [ 1159.913329][ T30] audit: type=1800 audit(3933087525.380:8253): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1160.067728][ T30] audit: type=1800 audit(3933087525.620:8254): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1160.098752][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 1160.116257][T21168] infiniband syz2: set active [ 1160.158144][T21168] infiniband syz2: added vxcan1 [ 1160.167312][T21200] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4002'. [ 1160.217080][T21199] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4002'. [ 1160.358192][T21204] netlink: 'syz.5.4003': attribute type 2 has an invalid length. [ 1160.365970][T21204] netlink: 'syz.5.4003': attribute type 8 has an invalid length. [ 1160.373698][T21204] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4003'. [ 1160.439375][T21168] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1160.478090][T21208] netlink: 'syz.4.4004': attribute type 2 has an invalid length. [ 1160.514043][ T30] audit: type=1800 audit(3933087526.080:8255): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 1160.543353][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4004'. [ 1160.555379][T21168] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1160.593554][ T10] kernel read not supported for file /fb0 (pid: 10 comm: kworker/0:1) [ 1160.632455][ T30] audit: type=1800 audit(3933087526.200:8256): pid=21214 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4006" name="file" dev="configfs" ino=93498 res=0 errno=0 [ 1160.654967][T21168] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1160.676072][T21214] [ 1160.678397][T21214] ====================================================== [ 1160.685385][T21214] WARNING: possible circular locking dependency detected [ 1160.692386][T21214] syzkaller #0 Tainted: G L [ 1160.698345][T21214] ------------------------------------------------------ [ 1160.705333][T21214] syz.6.4006/21214 is trying to acquire lock: [ 1160.711362][T21214] ffff888052590450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 1160.720034][T21214] [ 1160.720034][T21214] but task is already holding lock: [ 1160.727370][T21214] ffff888069581120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1160.736563][T21214] [ 1160.736563][T21214] which lock already depends on the new lock. [ 1160.736563][T21214] [ 1160.746937][T21214] [ 1160.746937][T21214] the existing dependency chain (in reverse order) is: [ 1160.755918][T21214] [ 1160.755918][T21214] -> #3 (&common->filesem){++++}-{4:4}: [ 1160.763619][T21214] lock_acquire+0x1b9/0x370 [ 1160.768621][T21214] down_read+0x99/0x4c0 [ 1160.773278][T21214] fsg_show_file+0x20/0x180 [ 1160.778291][T21214] configfs_read_iter+0x426/0x6f0 [ 1160.783829][T21214] __kernel_read+0x397/0xad0 [ 1160.788933][T21214] integrity_kernel_read+0x7e/0xb0 [ 1160.794549][T21214] ima_calc_file_hash_tfm+0x25e/0x350 [ 1160.800425][T21214] ima_calc_file_hash+0x1e3/0x380 [ 1160.805943][T21214] ima_collect_measurement+0x94f/0xb30 [ 1160.811894][T21214] process_measurement+0xdfe/0x2350 [ 1160.817580][T21214] ima_file_check+0xc3/0x110 [ 1160.822660][T21214] security_file_post_open+0xc4/0x210 [ 1160.828534][T21214] path_openat+0x985/0x4280 [ 1160.833527][T21214] do_file_open+0x20e/0x430 [ 1160.838518][T21214] do_sys_openat2+0x10f/0x1e0 [ 1160.843692][T21214] __x64_sys_openat+0x12d/0x210 [ 1160.849033][T21214] do_syscall_64+0x115/0x870 [ 1160.854120][T21214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.860503][T21214] [ 1160.860503][T21214] -> #2 (&p->frag_sem){++++}-{4:4}: [ 1160.867851][T21214] lock_acquire+0x1b9/0x370 [ 1160.872856][T21214] down_read+0x99/0x4c0 [ 1160.877506][T21214] __configfs_open_file+0xe8/0x9c0 [ 1160.883111][T21214] do_dentry_open+0x6ab/0x14d0 [ 1160.888366][T21214] vfs_open+0x82/0x3f0 [ 1160.892929][T21214] dentry_open+0x71/0xd0 [ 1160.897664][T21214] ima_calc_file_hash+0xe1/0x380 [ 1160.903091][T21214] ima_collect_measurement+0x94f/0xb30 [ 1160.909040][T21214] process_measurement+0xdfe/0x2350 [ 1160.914737][T21214] ima_file_check+0xc3/0x110 [ 1160.919826][T21214] security_file_post_open+0xc4/0x210 [ 1160.925708][T21214] path_openat+0x985/0x4280 [ 1160.930701][T21214] do_file_open+0x20e/0x430 [ 1160.935694][T21214] do_sys_openat2+0x10f/0x1e0 [ 1160.940868][T21214] __x64_sys_openat+0x12d/0x210 [ 1160.946298][T21214] do_syscall_64+0x115/0x870 [ 1160.951380][T21214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1160.957764][T21214] [ 1160.957764][T21214] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1160.966332][T21214] lock_acquire+0x1b9/0x370 [ 1160.971333][T21214] __mutex_lock+0x1a4/0x1bd0 [ 1160.976413][T21214] process_measurement+0x5ab/0x2350 [ 1160.982097][T21214] ima_file_check+0xc3/0x110 [ 1160.987185][T21214] security_file_post_open+0xc4/0x210 [ 1160.993057][T21214] path_openat+0x985/0x4280 [ 1160.998062][T21214] do_file_open+0x20e/0x430 [ 1161.003060][T21214] do_sys_openat2+0x10f/0x1e0 [ 1161.008225][T21214] __x64_sys_openat+0x12d/0x210 [ 1161.013563][T21214] do_syscall_64+0x115/0x870 [ 1161.018642][T21214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.025020][T21214] [ 1161.025020][T21214] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 1161.032374][T21214] check_prev_add+0xeb/0xe60 [ 1161.037459][T21214] __lock_acquire+0x136c/0x1a40 [ 1161.042806][T21214] lock_acquire+0x1b9/0x370 [ 1161.047801][T21214] mnt_want_write+0x6f/0x410 [ 1161.052890][T21214] path_openat+0xad9/0x4280 [ 1161.057891][T21214] do_file_open+0x20e/0x430 [ 1161.062881][T21214] file_open_name+0x1c3/0x3e0 [ 1161.068048][T21214] filp_open+0x2e/0x50 [ 1161.072607][T21214] fsg_lun_open+0x6b/0x7b0 [ 1161.077515][T21214] fsg_store_file+0x1e7/0x450 [ 1161.082690][T21214] configfs_write_iter+0x302/0x4e0 [ 1161.088290][T21214] vfs_write+0x6ac/0x1050 [ 1161.093111][T21214] ksys_write+0x12a/0x250 [ 1161.097942][T21214] do_syscall_64+0x115/0x870 [ 1161.103023][T21214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.109418][T21214] [ 1161.109418][T21214] other info that might help us debug this: [ 1161.109418][T21214] [ 1161.119623][T21214] Chain exists of: [ 1161.119623][T21214] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 1161.119623][T21214] [ 1161.132364][T21214] Possible unsafe locking scenario: [ 1161.132364][T21214] [ 1161.139788][T21214] CPU0 CPU1 [ 1161.145124][T21214] ---- ---- [ 1161.150469][T21214] lock(&common->filesem); [ 1161.154941][T21214] lock(&p->frag_sem); [ 1161.161590][T21214] lock(&common->filesem); [ 1161.168587][T21214] rlock(sb_writers#6); [ 1161.172802][T21214] [ 1161.172802][T21214] *** DEADLOCK *** [ 1161.172802][T21214] [ 1161.180918][T21214] 5 locks held by syz.6.4006/21214: [ 1161.186080][T21214] #0: ffff88804f1c69b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1161.195098][T21214] #1: ffff88801dfa0450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1161.204121][T21214] #2: ffff8880785d4c80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1161.214121][T21214] #3: ffff888051f18070 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1161.223876][T21214] #4: ffff888069581120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x193/0x450 [ 1161.233515][T21214] [ 1161.233515][T21214] stack backtrace: [ 1161.239379][T21214] CPU: 0 UID: 0 PID: 21214 Comm: syz.6.4006 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.239395][T21214] Tainted: [L]=SOFTLOCKUP [ 1161.239398][T21214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1161.239405][T21214] Call Trace: [ 1161.239412][T21214] [ 1161.239418][T21214] dump_stack_lvl+0x100/0x190 [ 1161.239432][T21214] print_circular_bug.cold+0x178/0x1c7 [ 1161.239450][T21214] check_noncircular+0x146/0x160 [ 1161.239462][T21214] ? __lock_acquire+0xd5b/0x1a40 [ 1161.239476][T21214] check_prev_add+0xeb/0xe60 [ 1161.239490][T21214] __lock_acquire+0x136c/0x1a40 [ 1161.239503][T21214] ? try_to_unlazy+0x296/0x910 [ 1161.239519][T21214] lock_acquire+0x1b9/0x370 [ 1161.239531][T21214] ? path_openat+0xad9/0x4280 [ 1161.239542][T21214] ? __pfx___might_resched+0x10/0x10 [ 1161.239557][T21214] mnt_want_write+0x6f/0x410 [ 1161.239566][T21214] ? path_openat+0xad9/0x4280 [ 1161.239577][T21214] path_openat+0xad9/0x4280 [ 1161.239590][T21214] ? __pfx_path_openat+0x10/0x10 [ 1161.239600][T21214] ? kasan_save_stack+0x30/0x50 [ 1161.239613][T21214] ? kasan_save_track+0x14/0x30 [ 1161.239625][T21214] ? __kasan_slab_alloc+0x89/0x90 [ 1161.239637][T21214] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 1161.239649][T21214] ? do_getname_kernel+0x5d/0x250 [ 1161.239661][T21214] ? filp_open+0x1d/0x50 [ 1161.239673][T21214] ? fsg_lun_open+0x6b/0x7b0 [ 1161.239684][T21214] ? fsg_store_file+0x1e7/0x450 [ 1161.239697][T21214] do_file_open+0x20e/0x430 [ 1161.239708][T21214] ? __pfx_do_file_open+0x10/0x10 [ 1161.239725][T21214] ? rcu_is_watching+0x12/0xc0 [ 1161.239742][T21214] file_open_name+0x1c3/0x3e0 [ 1161.239755][T21214] ? __pfx_file_open_name+0x10/0x10 [ 1161.239767][T21214] ? do_getname_kernel+0x5d/0x250 [ 1161.239780][T21214] ? __asan_memcpy+0x3c/0x60 [ 1161.239790][T21214] ? do_getname_kernel+0x1be/0x250 [ 1161.239803][T21214] filp_open+0x2e/0x50 [ 1161.239815][T21214] fsg_lun_open+0x6b/0x7b0 [ 1161.239827][T21214] ? __pfx_down_read+0x10/0x10 [ 1161.239842][T21214] fsg_store_file+0x1e7/0x450 [ 1161.239855][T21214] configfs_write_iter+0x302/0x4e0 [ 1161.239868][T21214] vfs_write+0x6ac/0x1050 [ 1161.239884][T21214] ? __pfx_configfs_write_iter+0x10/0x10 [ 1161.239896][T21214] ? __pfx_vfs_write+0x10/0x10 [ 1161.239916][T21214] ksys_write+0x12a/0x250 [ 1161.239931][T21214] ? __pfx_ksys_write+0x10/0x10 [ 1161.239949][T21214] do_syscall_64+0x115/0x870 [ 1161.239961][T21214] ? clear_bhb_loop+0x40/0x90 [ 1161.239974][T21214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.239985][T21214] RIP: 0033:0x7fdc5cd9e019 [ 1161.239994][T21214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.240005][T21214] RSP: 002b:00007fdc5dcbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1161.240015][T21214] RAX: ffffffffffffffda RBX: 00007fdc5d025fa0 RCX: 00007fdc5cd9e019 [ 1161.240022][T21214] RDX: 0000000000000006 RSI: 0000200000000380 RDI: 0000000000000004 [ 1161.240028][T21214] RBP: 00007fdc5ce3500c R08: 0000000000000000 R09: 0000000000000000 [ 1161.240035][T21214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.240041][T21214] R13: 00007fdc5d026038 R14: 00007fdc5d025fa0 R15: 00007ffd93faa408 [ 1161.240051][T21214] [ 1161.605944][T21168] RDS/IB: syz2: added [ 1161.610010][T21168] smc: adding ib device syz2 with port count 1 [ 1161.616184][T21168] smc: ib device syz2 port 1 has no pnetid [ 1161.622549][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1161.659138][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1161.696418][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1161.732892][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1161.769987][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1161.806614][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1161.843241][T21168] vxcan1 speed is unknown, defaulting to 1000 [ 1161.889327][ T30] audit: type=1800 audit(3933087527.170:8257): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308922 res=0 errno=0 [ 1161.914616][ T189] vxcan1 speed is unknown, defaulting to 1000 [ 1161.930432][ T30] audit: type=1800 audit(3933087527.500:8258): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=308936 res=0 errno=0 [ 1161.986232][T21214] mass_storage.0/lun.0: unable to open backing file: file0