last executing test programs: 10m48.142225272s ago: executing program 32 (id=196): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x1e3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99aea4a4221e753e94bf215e02377273dfb5b0cdc89fcd35", 0x41}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc6fe4280aff3b34", 0x86}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837696da775fb0b6dd87e1c4d21", 0x75}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957ba5e2bc45ca7d4f548d3047668babc1aa77359561ad300aa22747c2c20e931f550338780b4ea9c94cebf4782a806c6597cd580c33aa71e2da2e50bdfa67c555d8d5634e4a3e713031b6f8301a9faca9289841978f0ce2dd429d0909ae0111be62f881c54eaa6061b51cf1957f33168433fa5ae96d30ffa9c64c98b8823199e47a9e69891e8e81f20823e3", 0xb0}, {&(0x7f0000000880)="e11b12d8e463a0b8dd59326154501ecf0819f23ca714d4a23e3be62be279e7e5959106799deb35c7f7fd59d5f8dc617c2a3ed0d80cf9b3d58f951db2fcef39ac57214bcd4508c2e7bde5649852f4d0c652deb438069c18c84f3be99bca40857688", 0x61}], 0x5}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9m41.620590577s ago: executing program 33 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000001000)='./file0\x00') (fail_nth: 2) 9m36.407895574s ago: executing program 34 (id=419): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (fail_nth: 2) 9m36.33875497s ago: executing program 35 (id=416): mount$fuse(0x0, 0x0, 0x0, 0x82, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00', @ANYRESHEX, @ANYBLOB=',rootmode=000000']) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x789041, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, {0xa, 0x4e20, 0x6, @mcast1, 0x9}, r4, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000440)=""/123, 0x7b}], 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9m35.278238565s ago: executing program 36 (id=420): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0x3, @value=0x140000000000}) syz_create_resource$binfmt(&(0x7f00000000c0)='./file1\x00') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={0x0, 0x3}) syz_usb_control_io$hid(r1, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}], 0x1}) 8m29.182557703s ago: executing program 37 (id=651): r0 = socket$l2tp(0x2, 0x2, 0x73) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x0, 0x10f, "6ac4481336c009869cb24a9e3411c679d90972ba9194b3974f79c7d9908d664f", 0xf, 0x0, 0x4, 0x3ff, 0x9, 0x1, 0x2, 0xf, [0xa4d, 0x9, 0x7, 0x10000]}) ioctl$EVIOCSCLOCKID(r1, 0x40084503, &(0x7f0000ffcffc)=0x6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) socket$l2tp(0x2, 0x2, 0x73) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) (async) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x0) (async) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x0, 0x10f, "6ac4481336c009869cb24a9e3411c679d90972ba9194b3974f79c7d9908d664f", 0xf, 0x0, 0x4, 0x3ff, 0x9, 0x1, 0x2, 0xf, [0xa4d, 0x9, 0x7, 0x10000]}) (async) ioctl$EVIOCSCLOCKID(r1, 0x40084503, &(0x7f0000ffcffc)=0x6) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) (async) 7m50.090044371s ago: executing program 38 (id=736): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000044b000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6f, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"851f99f5b576dc35baf53add4aa0a68a88a2d82d85a1e13f64722512e13fce5b149dc098f24112d27b79c2af063e0cf4ac56460b2a454d9e580877f3276e25a7c4a9e6628217ac6bfa0385ec3ee24e84ea0b57c22b7e50d29a24b153a5a088e4a9a85e72cba76cd63fe5e590698357e3d3298ac4bb8d50c66c41bb54a43c08426b5511791a2d1eeeaf120a910f96f8eacce330afa47ae9e5f62a87ab4822d4c337b916a48e48bd1e62d17ffcd1d67eb69b45efce869516ccd4969916aca13ab7568efc345780e37acbc6e2c6e806b4f252263e3db4f8980c42b835177cf0358f65d61591a3cdbf32f4d8c754a177627e778bea3b7dad683541783998d4b32b0ce6501ac4fa10f4c0fe2e9bd06ea97874c9a6052cdd2bde7e4a39a5d612ab74a6633fe2022ecfaf5b5ea2c5963850a5549d3a16a9597d509c22e8b6dda2df5df7d2b3d2cb72c759f548e8e11bfac0529f01ef333faee0d0a8993637611e5f782d1674d7ef7c557f9b9e54d20764962f5e41933905368bfd343c4ad7a41607dc4d29707b3e4b3246c88a2fc5f26b8b4e3e12bb0704b513e681a15ecf426709c746109c4b8b57a167f8feb89c9a818710a9e64de48c27eed645604efe89f3ba7cb0a744fd67103c1b7d380ed383401aa30240db19e04928256a27af37875de3a6d7c53e2b757edf55ccfb0e5783f42e0e46cdb4cc2a52e245b15f98a752fa59fcf7334ac939c048bc85bcd45a9c32b45a23536a9261556df13023f5f8fefd72e36b0f09e8701fdc6e4ab7fad7bc1fc8b99c3199e2434f45e01f5aa12a859fdc018ddb4e34ea1248ef750092cfbe3b8e80f4dbad3d09e790a4c8a860fcbd2f08ded8be9be5e9b58a168a9ed4148201c4e901cfeea25c915d95e40dc466b44733f143fb022b2b47495e78adfef9dee323fb88a4707ba58499d09ed10123ec60903212e8f91e891b627fe085274b0d25b68eb252685e7609a874011caf0c423b096bb95245c0af3394c5162a46df670d4a9d4fda3108b9f5610288bef46278bf495c0e575155330d6716d57c3141461e56cd72bbf5eed0ef67c54cf782b9a0a5c8f146ffe4595b720f00a782df9478297810983d23184fcfd614911c56eb063d6c6cb0b24f9eeae238e7bcf606bbe105b26435914e479d69b7e9b103ec1153ac54581e73472b85100e78d4f722f5cbfd015b7918c589b1987a7d30ee392ba472679a6745f571371adb51a2f643316b67a77da77ec4c8c215940960c443aa262d766b4c40b2f1d02c41b8f487d35a9f04ec878f7e12ac84a997e6816164db9cbd401ace3c763bee6ddd8e1987b21d1dacb33034011c39cc69ec0b1917bd88696c9de3a4262958dbcc89431355efb671d86b68ad4d8c4bf63b31c9016002eaf56ee998c7bf557054eb3b2a8db784e6cd040d886fca5e550b47f3e8b8334c74a950e69cde"}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') fchdir(r4) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m39.376876004s ago: executing program 39 (id=1010): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000080)="359b52651515ed56c23a130f1f84d6fed566b0a2d773c4def23f2d3032561ae2eec1f72d4d81628a72243b2ff3b0f7d8c64ae0f2", 0x34) syz_usb_disconnect(r0) 6m31.010914077s ago: executing program 40 (id=1031): sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1d8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x8b, 0x80, [@challenge={0x10, 0x1, 0x2f}, @rann={0x7e, 0x15, {{0x0, 0x74}, 0x4, 0x87, @device_a, 0x1, 0x1, 0x3}}, @preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x7, 0xbb, 0x369, @broadcast, 0x4, @value=@broadcast, 0x7, 0x2, 0x2, [{{0x0, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @device_a, 0xf}]}}, @tim={0x5, 0x33, {0x3b, 0xed, 0x9, "fce6baa8cafa86aa8cdfd77ed15297be5dbd00501609d1d84443b06c8b7171567f081f1c2dd1f9c3f6d706d4d246513a"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@preq={0x82, 0x6d, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x3, 0x6, 0x9, @device_b, 0xd, @value=@device_b, 0x7, 0xffff, 0x7, [{{0x0, 0x0, 0x1}, @device_b, 0x25}, {{}, @broadcast, 0x100}, {{0x0, 0x0, 0x1}, @device_b, 0x3}, {{0x1}, @device_b, 0x400}, {{0x1}, @broadcast, 0x40}, {{}, @device_b, 0x8}, {{0x1}, @device_a, 0x775}]}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x31, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @erp={0x2a, 0x1, {0x1, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x0, 0x0, {0x4, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x6, 0xd}}]}, @NL80211_ATTR_IE={0x9, 0x2a, [@measure_req={0x26, 0x3, {0x6, 0x51, 0x10}}]}, @NL80211_ATTR_IE={0x69, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xc, 0x38, 0xe9}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x3, 0xe, @device_a, 0x7, 0xe, 0x7}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @peer_mgmt={0x75, 0x16, {0x0, 0x0, @void, @val=0x8, @val="ef27417e763131b37f91a80722b82372"}}, @preq={0x82, 0x1a, {{0x0, 0x1}, 0x8, 0x5, 0x4, @device_a, 0xfffffffe, @void, 0x7fffffff, 0x1}}]}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@peer_mgmt={0x75, 0x8, {0x0, 0x3, @val=0x5, @val=0x8, @void}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x2008810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x170, 0x1, 0x3, 0x201, 0x0, 0x0, {0xd, 0x0, 0x2}, [@NFQA_PAYLOAD={0x60, 0xa, "f97917ff2afdc62c600f0bbdfe634859b466712eeaea1f7834397823c53af50727efa370b88219043c5cdb264e4c0f1aa853fe60ca21239eef7cf94f5c360961a68648c07e6509c1458337b9d00bc43fd3518f074b11d43827f725b6"}, @NFQA_MARK={0x8}, @NFQA_PAYLOAD={0xe8, 0xa, "6d57ae69188bf653c0885affe95491032f49fa1b358dcccf739a3a2a95e582885d1c22ab8ac266cbe946e4a03e394c4873e514a34a97f3ee19b0caf0c1b446777a5f5f739b6e5ca6fe017eb262159ba50ce6df3dfff9bb24549e444a7dc654392b07134c858370be5e1a820891001d7d6277155e68d178cbe071cfc76b6ba0c82acd85838836838064c25116f97885d9a5bceb65f126829e635d0f74e17b6d0a0ee9ad6c60de97bd7cc54f3e142aaf261e57f5125b4a21de3c7a8a384f104a772867e84d863e8f95f5111f60c948aba39b4fe2a6c79f1101bbedc8da7ad1f8515ec2e147"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x355f3e335edaf51, 0x581c31cd}}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x4008080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000015) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m41.390520024s ago: executing program 0 (id=1238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x5) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81006e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x1409, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040005) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0000050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c0005800c0001007061796c6f6164000600028008000740000001010800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, r5, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x41}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:mount_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:random_device_t:s0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004005}, 0x50) 5m41.342132786s ago: executing program 0 (id=1239): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000006c0)={0x4, 0x100003e, 0x8, 0x2, 0x100, &(0x7f0000000040)="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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m40.74699811s ago: executing program 0 (id=1242): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000880)}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x180, 0x29, 0x36, {0x5e, 0x2c, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x70, 0x0, [@mcast2]}}}], 0x208}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m40.216677322s ago: executing program 0 (id=1245): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000006c0)={0x4, 0x1000000, 0x8, 0x2, 0x100, &(0x7f0000000040)="387ed7626d850509a2d6c1aa38f15cd0c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88731b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d461d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb34211619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8ddbf5e20d604413ed2ddf9bcbf881caf811852806175d638909f6234fbcd7a88ae7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90605ff8f3a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a266639438ac5252d9bccff4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd600000013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829ed0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e88597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a9013923167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d000000000000000000000000000000000100"}) (fail_nth: 5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m39.877576746s ago: executing program 0 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) syslog(0x3, &(0x7f0000000080)=""/59, 0x3b) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') syslog(0x0, &(0x7f0000000280)=""/157, 0x9d) 5m39.74875151s ago: executing program 0 (id=1247): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0xffff6a58, 0xae, &(0x7f0000000200)="b254e560742ad943fc89136fd927da114e60cdf0f7218e26b18346247284ecf05c54f8b4b02b621c7c1fdce46ac4e9cec9cf474e6244a3739d09310a0a83814bd8b96456c5421ecf6d8ec3a82d77a10ec010eb17a2a055944400b2f00110674ed8b8bf8e4d33ffac1d4dfeabd5aa2e2dd74bb3ec47281b6f50bc5e73c73a836a3e5c4fbc65fbb4acf4bd9f9dca7de9c42e3bbe57c3965a6ad32fea4d0e017a0a30fa1c746382ea275c4764c02968", 0x1}, {0x8000, 0x19, &(0x7f0000000300)="b784e58eb6eb8dc6a86325b5ebb73bbe338e890b9744056f0f", 0x0, 0x1}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 5m24.693627998s ago: executing program 41 (id=1247): ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0xffff6a58, 0xae, &(0x7f0000000200)="b254e560742ad943fc89136fd927da114e60cdf0f7218e26b18346247284ecf05c54f8b4b02b621c7c1fdce46ac4e9cec9cf474e6244a3739d09310a0a83814bd8b96456c5421ecf6d8ec3a82d77a10ec010eb17a2a055944400b2f00110674ed8b8bf8e4d33ffac1d4dfeabd5aa2e2dd74bb3ec47281b6f50bc5e73c73a836a3e5c4fbc65fbb4acf4bd9f9dca7de9c42e3bbe57c3965a6ad32fea4d0e017a0a30fa1c746382ea275c4764c02968", 0x1}, {0x8000, 0x19, &(0x7f0000000300)="b784e58eb6eb8dc6a86325b5ebb73bbe338e890b9744056f0f", 0x0, 0x1}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c90001"], 0x10) syz_usb_connect(0x2, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 4m32.841156321s ago: executing program 7 (id=1504): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x80, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ce5, 0x1, 0x100000000000008, 0x98c1, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x7, 0x5, 0x5, 0x10049, 0x200003ff, 0x5, 0x0, 0x9, 0x200, 0x7, 0x1be, 0x1000000003, 0x2, 0x2, 0x6, 0x0, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x200000003, 0x8, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0x6, 0xe1, 0x2, 0xe, 0x21, 0x8, 0xe6, 0x2000000000000ff, 0x5, 0x9, 0x66, 0x800, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2002, 0x4, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x4, 0x5, 0x7, 0x8000000000006, 0x4, 0xffff, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0x2, 0xcc, 0x8, 0x1]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) write$sysctl(r0, &(0x7f0000000100)='0\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x9, 0x40, 0x3, '\x00', 0x7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfd000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x83, {"64400f01cab922000040b8b89512bdba000000000f300f20c035040000000f22c0640fc7b60900010048b859bb0000000000000f23c00f21f83501000b000f23f8c442a9f75598420fc798000000000f11bc283b000000c744240081000000c7442402cefe2ef0ff1c24b8010000000f01d9"}}], 0x83}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x6, 0x4, 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x1, 0x0, 0x2, 0xfc, 0x8, 0x99, 0x0, 0x0, 0x9, 0x10, 0x0, 0x20002, 0xf0, 0x68, 0x1, 0x4, 0xfe, '\x00', 0x0, 0x3}) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x1, &(0x7f00000000c0)=']', 0x1, 0x40006, 0x75, 0x6, 0xc, 0x8, 0x0}) ioctl$USBDEVFS_DISCARDURB(r8, 0x550b, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m29.556225838s ago: executing program 7 (id=1511): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 4m27.325522149s ago: executing program 7 (id=1517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="7002ff14e425"}) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) setreuid(0x0, 0xee00) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)={0xbb8, 0x0, 0x5, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x2, 0x8}, 0x56, 0xfc, 0x3, 0x401, 0x9, 'syz0\x00', "1df0277b64f6bb060a6fce8b0a33cbc7762d70f42b76cbd449b503ee9a523558", "0a846a9b2dc3dc4c09cf5c67554aecf694e051915cc9ba06a7f5befc0e39c860", [{0x5, 0xff, {0x1, 0x7ff}}, {0x5, 0x5, {0x1, 0xc}}, {0x4, 0x9, {0x3, 0x7}}, {0x9, 0x7, {0x2}}, {0x6, 0x2, {0x2, 0x2}}, {0x6, 0xf1fa, {0x1, 0x8}}, {0x3, 0x8, {0x0, 0x613}}, {0x3ff, 0xc95f, {0x0, 0x9}}, {0x9, 0x8, {0x0, 0x7}}, {0x9, 0x7b, {0x3, 0x3}}, {0x9, 0x6, {0x0, 0x1}}, {0xfffd, 0x0, {0x2, 0x353e116f}}, {0x9, 0x9, {0x3}}, {0x7, 0x9, {0x0, 0x1e}}, {0x2, 0x1, {0x2, 0x200}}, {0x200, 0x5, {0x2, 0x5}}, {0x8000, 0x7f, {0x1, 0x1}}, {0x4, 0x4, {0x72a6ef3064e42d02, 0xffffffc0}}, {0x73b4, 0x1000, {0x2}}, {0xff80, 0x4, {0x1, 0x83bf}}, {0xa55, 0x2, {0x3, 0x1}}, {0x1, 0x80, {0x1, 0x7fff}}, {0x154a, 0x200, {0x1, 0xf}}, {0x48, 0x5, {0x2, 0x5}}, {0x7d2d, 0x3, {0x2, 0x1}}, {0x4, 0x2, {0x0, 0x2}}, {0x6, 0x4, {0x3, 0x9}}, {0x4, 0x24, {0x74efa3e6c0729708, 0x3}}, {0xcf9, 0xa10, {0x0, 0xff6}}, {0x0, 0x9, {0x3, 0xffff}}, {0x7, 0xfffa, {0x3, 0x922}}, {0x4, 0x81, {0x1, 0x1}}, {0x6, 0x909c, {0x1, 0x9dcc}}, {0x7f, 0x2, {0x2, 0x8}}, {0x7f, 0xfffd, {0x1, 0x6e}}, {0x9, 0x8, {0x1, 0x8}}, {0x5, 0xfff, {0x1, 0x7}}, {0x3, 0x7, {0x3, 0x4}}, {0x3, 0x7f6, {0x1, 0x9}}, {0x1, 0x7, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0x0, 0x8, 0xff0, 0xd5f, 0x20, 'syz1\x00', "2a220a111efa89d778e73ca6a3683b6ec7dbc7b5c029fca8d28ad65ed428abbd", "d404f5cf077e2a3997f0a1ba7991631a68022ceb6ab5c33e11684ef2298bdc17", [{0x8, 0x0, {0x3, 0x3}}, {0x1, 0x4, {0x1, 0x1}}, {0x800, 0x1, {0x1, 0x9bab}}, {0x6, 0x5, {0x1, 0x2}}, {0x2, 0x10, {0x2, 0x4}}, {0x8001, 0x6096, {0x3, 0x10}}, {0x3f82, 0x4}, {0xb, 0x8000, {0x1, 0xdfd}}, {0xff01, 0xffff, {0x2, 0x2}}, {0x3, 0x8b58, {0x3, 0x1}}, {0xfc0, 0x0, {0x2, 0xffffffff}}, {0x10, 0x2, {0x2, 0x8}}, {0xfff9, 0x44, {0x3, 0x7}}, {0x9, 0x2e5e}, {0xa618, 0x4, {0x1, 0x8185}}, {0xfffa, 0x4, {0x0, 0x3}}, {0x4, 0x3, {0x2, 0xa2a}}, {0x401, 0xff, {0x2, 0x4e857609}}, {0x72a8, 0x8, {0x0, 0x4}}, {0x8, 0x9304, {0x3, 0x400}}, {0x4, 0x8, {0x0, 0x7}}, {0x8, 0x5, {0x1, 0x3}}, {0x2, 0x5, {0x0, 0xfffffffd}}, {0x0, 0x5, {0x1, 0xffff}}, {0x5, 0x1, {0x3, 0x185e6b55}}, {0x9, 0x4, {0x2, 0x8}}, {0xff00, 0xa86, {0x1, 0x2}}, {0x7, 0x40, {0x4e89a168c10cdfd6, 0xf37}}, {0xfad6, 0xf76b, {0x0, 0x8}}, {0x0, 0xfff8, {0x2, 0x8db}}, {0x6, 0x6, {0x1, 0x2}}, {0x0, 0xff, {0x2, 0x200}}, {0x3, 0x2, {0x3, 0x2}}, {0x8, 0x6ee6, {0x1, 0x4}}, {0xd00, 0xfe01, {0x0, 0x3}}, {0x5, 0x800, {0x1, 0x2}}, {0x4, 0x0, {0x3, 0xde2c}}, {0x81, 0x6, {0x1, 0x3}}, {0x3ff, 0xe7, {0x3, 0xf}}, {0x4, 0x1, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x3b}, 0x4, 0x3, 0x3, 0x8, 0x1, 'syz1\x00', "decc8cd7a270e9c6fe7a32ebb7254edfd017dfd94d18f61f41e008ec21142dc3", "a6624084d37a2d9ae947506e597ba1d1408b463e5ff6d2d6b05acec68c706c0a", [{0x1000, 0x8000, {0x1, 0x207d}}, {0x9, 0x3, {0x1, 0x133}}, {0x17c6, 0x2, {0x3, 0x400}}, {0x7, 0x3, {0x2, 0x4}}, {0x4, 0x8, {0x1, 0x9}}, {0x1, 0xb, {0x2, 0x6}}, {0xe, 0x5, {0x1, 0x9e8}}, {0x7, 0x3, {0x3, 0x7}}, {0x6, 0xe845, {0x1, 0x5}}, {0x0, 0x9}, {0x9f35, 0x7, {0x2, 0x3}}, {0x1000, 0xcf8a, {0x3, 0x1}}, {0x8, 0x4, {0x3, 0x3}}, {0x5, 0x1, {0x1, 0x1c0}}, {0x7, 0x1, {0x3, 0x8}}, {0x400, 0x7, {0x0, 0x3}}, {0x3f2, 0x1, {0x3, 0x2d0}}, {0x6, 0x74, {0x3, 0xd}}, {0x7, 0x144, {0x2}}, {0x1, 0x8, {0x0, 0x5}}, {0x3, 0x2000, {0x1}}, {0x2, 0x4, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x8e}}, {0x6, 0x6, {0x3, 0x800}}, {0x7, 0x2, {0x0, 0xf}}, {0x7, 0x6, {0x1, 0x76}}, {0x7, 0x4, {0x0, 0xa86}}, {0x4, 0x7, {0x1, 0x1}}, {0x4, 0x2, {0x3, 0x8}}, {0x0, 0x1ff, {0x2, 0x7}}, {0x1, 0x6, {0x2, 0x14a1}}, {0xfff7, 0x2, {0x0, 0x7}}, {0x1, 0x8, {0x1, 0x7fff}}, {0x7, 0x3, {0x1, 0x7}}, {0x1e21, 0x9, {0x2, 0x6}}, {0x6, 0x3ec, {0x2, 0xa1}}, {0x8, 0x4, {0x1, 0x3}}, {0x1, 0x81, {0x0, 0x4}}, {0x0, 0x3, {0x3, 0x7ff}}, {0x3, 0x8, {0x1, 0x7f}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x10, 0x3, 0x8, 0x1, 0xd, 'syz1\x00', "da38e40bab0d6c87be058081bfa4a44462de37187a7ba18080b292c8bab0da4c", "cfe42b38860919ba2e90479f8d3841d72ced80c50fb4b639ef9898a8a02bae74", [{0x5, 0x13, {0x2, 0x7fffffff}}, {0x0, 0x8001, {0x1, 0x1}}, {0xffff, 0x400, {0x0, 0xff}}, {0x1, 0x7fff, {0x0, 0x9}}, {0x4, 0xf, {0x1, 0x81e}}, {0x1ff, 0x4, {0x1, 0x3ff}}, {0x0, 0x40, {0x0, 0xd1}}, {0xd, 0x3, {0x2, 0x6}}, {0x4, 0x0, {0x1, 0x7}}, {0x5, 0xaf96, {0x3, 0x7fff}}, {0x1, 0x9, {0x0, 0xf}}, {0x4b, 0x2, {0x1, 0x40}}, {0x8, 0x200, {0x3, 0x5}}, {0x3, 0x8, {0x0, 0xf}}, {0xb, 0x6684, {0x1, 0x1}}, {0x0, 0x400, {0x0, 0x80000000}}, {0x3, 0x2, {0x2}}, {0x5, 0x4, {0x1, 0x598}}, {0x7, 0x2000, {0x3, 0x6}}, {0xfffd, 0xfff7, {0x3, 0xfffffffa}}, {0x4, 0xf298, {0x3, 0x5}}, {0x2, 0x8, {0x2, 0x100}}, {0x81, 0xa, {0x1, 0x3}}, {0x8, 0x2, {0x2, 0xfffffff9}}, {0x7, 0x5, {0x2, 0x2}}, {0x262, 0x5, {0x3, 0xa99c}}, {0x4, 0xfff7, {0x0, 0x4}}, {0x1, 0x5a8, {0x2, 0x9}}, {0xae1, 0x0, {0x3, 0x1}}, {0xdc, 0x7, {0x0, 0x48}}, {0x6, 0x9, {0x2, 0x9}}, {0x8, 0x3, {0x1}}, {0x5, 0x7fff, {0x2, 0x2}}, {0xe7, 0xef3e, {0x2, 0x7f}}, {0x7, 0x6, {0x1, 0x5}}, {0xe9, 0xfffa, {0x2, 0x4}}, {0x8, 0x8000, {0x3, 0x3}}, {0x1, 0x0, {0x3, 0x8}}, {0x5, 0xc, {0x3, 0x8c7}}, {0x401, 0x7, {0x0, 0x17}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x40, 0x1, 0x4, 0x8, 0xb, 'syz0\x00', "5abbff1580cca1361af832f52491a533e5b041b229fb93d9cc3dcca1e3135ff1", "ea355385f0eb31e8adf0dabba113a4e45f04e86c3aeba593a7b5d71cd286b13a", [{0xc18e, 0x5, {0x3, 0x2}}, {0xb3f0, 0x8, {0x3, 0x5}}, {0x2, 0x3ff, {0x1, 0x4}}, {0x401, 0xfffb, {0x3, 0x4}}, {0x4, 0xfe, {0x2, 0x2}}, {0xb323, 0x0, {0x3, 0xfff}}, {0x9, 0xff6b, {0x0, 0x80000000}}, {0x3, 0x100, {0x2, 0x9}}, {0x8, 0x94d, {0x2, 0x5}}, {0x0, 0x0, {0x1, 0x67}}, {0x80, 0x32, {0x0, 0x5}}, {0x0, 0xfffd, {0x2, 0x4}}, {0x6, 0xd7b, {0x3}}, {0x4, 0x3, {0x3, 0x8}}, {0xf3ec, 0x3, {0x2, 0x4}}, {0x1, 0x7ff, {0x0, 0x6}}, {0x29f7, 0x3d, {0x2, 0x4}}, {0x5, 0x0, {0x0, 0x4}}, {0x8, 0x4c, {0x0, 0xfc}}, {0x3, 0x1, {0x1, 0xf}}, {0x2, 0x2, {0x2, 0x6}}, {0x4, 0x5, {0x2, 0x100}}, {0x7, 0x8, {0x3}}, {0x1, 0x4, {0x0, 0x3ff}}, {0x38c6, 0x9, {0x1, 0x8}}, {0xd, 0xfae, {0x1, 0x5}}, {0x6, 0x0, {0x0, 0x3ff}}, {0x9, 0x12, {0x0, 0x2}}, {0x200, 0x0, {0x3, 0x652}}, {0x6, 0x0, {0x1, 0x1}}, {0x1, 0x5, {0x3, 0x10001}}, {0x2, 0xa, {0x0, 0xb}}, {0x1, 0x8d2e, {0x2, 0x6}}, {0xa, 0x3714, {0x1, 0x5}}, {0x6c7, 0x6be, {0x0, 0x5}}, {0x6, 0x9, {0x1}}, {0x0, 0x40, {0x0, 0xfffffff8}}, {0x73b, 0x1, {0x0, 0x5}}, {0x1, 0x0, {0x2, 0xffffffff}}, {0x2, 0x0, {0x1, 0x9}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4044}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x7fffffff, 0xf, 0xffffffffffffffff, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x200, 0x8, 0x2e, 0x80000005, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x2, 'lo\x00', {0x7}}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r10) sendmsg$NLBL_UNLABEL_C_STATICADD(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="70000035030144b83d26ede90834ea00", @ANYRES16=r12, @ANYBLOB="0100000000000000000004000000"], 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4m26.169819838s ago: executing program 7 (id=1523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x3, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586303, @private=0xffffffff}, 0x10) (async, rerun: 32) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 64) mount$cgroup(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000640), 0x200000, &(0x7f0000000780)={[{@name={'name', 0x3d, '-dev/v4l-subdev#\x00'}}]}) (rerun: 64) 4m25.886746391s ago: executing program 7 (id=1525): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) ptrace(0x4208, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25NOUID(r1, 0x89e3, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 4m24.838203538s ago: executing program 7 (id=1531): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_off}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000000)='./file0/file0\x00', 0x40, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0/../file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x3, 0x9}]}, 0xc, 0xce04f09e29e7d483) 4m9.454348586s ago: executing program 42 (id=1531): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@redirect_dir_off}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000000)='./file0/file0\x00', 0x40, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000200)='./file0/../file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v1={0x1000000, [{0x3, 0x9}]}, 0xc, 0xce04f09e29e7d483) 3m41.210537473s ago: executing program 1 (id=1691): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r1, 0x0, &(0x7f0000fcf000/0x4000)=nil, 0x4000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000640)={0x28, 0x6, 0x0, r1, 0xa, 0x4, 0xb45}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, r1, 0x0, &(0x7f0000fd2000/0x3000)=nil, 0x3000}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000080)={0x0, 0xe000000000000, 0x1}) 3m41.185231751s ago: executing program 1 (id=1693): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x1, [0x6]}, &(0x7f00000002c0)=0x6) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff9) write$char_usb(r2, &(0x7f0000000280)='4', 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, 0x0, 0x590}}], 0x1, 0x8008801) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_disconnect(r1) 3m39.186627501s ago: executing program 1 (id=1699): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r1, 0xc}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x7fffffff}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) write$UHID_CREATE2(r0, 0x0, 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) (async) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r1, 0xc}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x7fffffff}, 0x10) (async) 3m39.185775676s ago: executing program 1 (id=1700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) sendto$x25(r2, &(0x7f0000000340)="f91dc3b48c3cf786e5705467449a92aa7bb6954c7a1bf5bbba6dd0725f788c41e5be5a9fe606d0e78652be38555a847a52ca1906b40e3d3c0dabaf40e280a32dd9c04bcf5a3db2049659bdb84f464a0ad8c9cdd9ae525642402057f997136c024fc0e7ebad4018e0eaac845ef668ac4ed2fe79c52730da165fb2ba55d120efc3985acb1a57aa03f1855aca329fd0f589f639a7a5f8", 0x95, 0x80, &(0x7f0000000140), 0x12) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x40, 0x21, 0x5, {0x5, 0xd, "82616f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x50bd2c, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800003, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x5}, 0x400, 0x0, 0x0, 0x1, 0x2, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4c050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES16=r4, @ANYBLOB="0100feffffff00000000010000001c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c000180d04a0100", @ANYRES32=r5, @ANYBLOB="0c0002"], 0x3c}}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48a41, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r8) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x7) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000240)={0x2f, @empty, 0x4e20, 0x1, 'rr\x00', 0x12, 0x5, 0x55}, 0x2c) read$char_usb(r9, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x345000, 0x0) 3m36.170226503s ago: executing program 1 (id=1710): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x50, r0, 0x6f000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"d43aa878a8fa4bda3d890a6207b33f33", 0x0, 0x0, {0x8, 0x4}, {0x8000000000000003, 0x9e8}, 0xfffffffffffff03f, [0x6, 0x7fff, 0x5, 0x8, 0x4, 0xffffffffffffff00, 0x1901, 0x6, 0x7fff, 0x100000001, 0xffffffffffff0001, 0x7, 0x9, 0x0, 0x800, 0x400000a0d2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000005c0)={"769d35bce526816444ff0f0355199394", 0x0, 0x0, {0x4, 0xa}, {0x7, 0xa}, 0x2, [0x9, 0x6, 0x1, 0x401, 0x2c, 0x7e, 0x6, 0xc, 0x100000000000000, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8000000000000000, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"b3e521afd1c64d122a3ab58219f14d28", r1, r2, {0x5, 0x4}, {0xd07b, 0x3}, 0x7fff, [0x4, 0x8, 0x9, 0x9, 0x9, 0x7, 0x5, 0x0, 0x1, 0x9, 0xd53, 0x8000000000000001, 0x8, 0x1ac, 0x7, 0x9]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000440)=0x3d) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000100), 0x6, 0x800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x24c440, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xa8) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000140)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, 0x0, &(0x7f0000000040)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bf7000fedbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900e6799d1608000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x1, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) read$hidraw(r10, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r9, 0x81, 0x1, &(0x7f0000000140)='\x00') ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344, 0x41424344}, 0x5, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="4de3006d0064000002069078ac1e000164010100861400000000030e1c2cf4f1d0d39618b363be2e9404010007078100000000004e214e23", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="e0c2010190060003080a000000b60000003f1312d9ef48fb3a7748f3732edaef86a90db102089269fad6223102"], 0x6d) 3m34.214065963s ago: executing program 1 (id=1712): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0xfff}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x97) 3m18.947645273s ago: executing program 43 (id=1712): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0xfff}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x97) 2m44.883561285s ago: executing program 8 (id=1896): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0xb2, 0x6, &(0x7f0000000080)={0x16, "247f23e017bb456c5c4b71653300"}}) 2m41.774265006s ago: executing program 8 (id=1912): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000880)}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x70, 0x0, [@mcast2]}}}], 0x228}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m41.381259072s ago: executing program 8 (id=1918): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d440e8b089b3f380068090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b5b070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) recvmmsg(r2, &(0x7f00000003c0)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f0000000440)=""/222, 0xde}, {&(0x7f0000000540)=""/230, 0xe6}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/170, 0xaa}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f00000007c0)=""/97, 0x61}], 0x9}, 0x7}], 0x1, 0x40000020, &(0x7f0000000900)={0x77359400}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000bc0)={[0xd836, 0xa, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x2, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xfffffffffffffffe, 0x40000000009, 0x1, 0x800000065], 0x4, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m40.334153054s ago: executing program 8 (id=1919): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = dup(r0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000640)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRESHEX=r4], 0x7) memfd_create(&(0x7f0000000680)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x05\x00\x00\x00\x00\x00\x00\x00\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\x00\x00\x00\x00\x00\x00\x00\x06b:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1c\x913\xfa8\xac\xd3q\xe4vPGU\x8c\xf1\xd6#\r\xaf\x83\xaa\xee0\xd8\x9dXf|UTx\x01\xbe\xac\b\"\xec\xac\xa1\xe1\xed=\x1cC\xb7\xe6\x14\x10\xf0ZFX\xb9w\x85\xeb\x00\x00\x00\x00\x00\x00', 0x0) r5 = dup(0xffffffffffffffff) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r6 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_get$pid(0x3, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x2b) 2m37.434494893s ago: executing program 8 (id=1934): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x6b) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000100)='Q', 0xff04, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 2m37.244344577s ago: executing program 8 (id=1936): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000500000022d45ec795016966e800000700"/54], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e012000010000100000ab52ed1671515cc0100"/64, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB="e00000020000000000000000000000000000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c"], 0x12e0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r7, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x4}, {0x48}, {0x4}, {0x4}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8b9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x88f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4040}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc6d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x94}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r9, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xb391, 0x7, '9P2000.u'}, 0x15) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000980)={0x1, 0x70, 0x4, &(0x7f0000000940)={0x19, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) 2m21.959217648s ago: executing program 44 (id=1936): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000500000022d45ec795016966e800000700"/54], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e012000010000100000ab52ed1671515cc0100"/64, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB="e00000020000000000000000000000000000000032000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c"], 0x12e0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r7, 0x1, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}]}, {0x4}, {0x48}, {0x4}, {0x4}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8b9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x88f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4040}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc6d}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x94}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r9, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xb391, 0x7, '9P2000.u'}, 0x15) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000980)={0x1, 0x70, 0x4, &(0x7f0000000940)={0x19, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) 1m56.138284705s ago: executing program 5 (id=2077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045003, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f00000016c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_clone3(&(0x7f0000000000)={0x2a1090800, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[r3], 0x1, {r2}}, 0x58) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="b01100001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000f50300000000000000020000000000000000000000000000000104000000000000000000000000000002000000000000000300000000200000000000000000000000000000000000000100000000000000440005007f000001000000000000000000000000000000042b0000000a000000fe8000000000000000000000000000aa0000000004000b000000000000000000000000000c1008000810080000810010"], 0x11b0}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 1m54.783508734s ago: executing program 5 (id=2080): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000880)}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x70, 0x0, [@mcast2]}}}], 0x228}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m54.391960738s ago: executing program 5 (id=2086): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0x13, 0x2, 0x0, "9f76fe92f6d87e3a99080debac1874d47ee2318d4526f2148e84c532d56b46f0"}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x6f, 0x20, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 1m52.953975527s ago: executing program 5 (id=2093): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000340)=0xa00) (async) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000340)=0xa00) syz_usb_connect(0x0, 0x6b, &(0x7f0000000140)=ANY=[], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x6b, &(0x7f0000000140)=ANY=[], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 1m49.929917596s ago: executing program 5 (id=2104): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000880)}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x70, 0x0, [@mcast2]}}}], 0x228}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m49.649969275s ago: executing program 5 (id=2107): r0 = socket$alg(0x26, 0x5, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x10}}, 0x28) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1m34.573593652s ago: executing program 45 (id=2107): r0 = socket$alg(0x26, 0x5, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x1, 0x10}}, 0x28) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 50.671272115s ago: executing program 3 (id=2355): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="00012b00"}) 50.49864281s ago: executing program 3 (id=2356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)={0x20, 0x2e, 0x1, 0x70bd26, 0x25dfdbfd, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40440d9}, 0x20000000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x24, r2, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x24}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004000) 50.385065088s ago: executing program 3 (id=2357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00"/97], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414aa000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000070000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000000000000440005000a010100000000000000000000000000000000003c00000000000000ffffffff00"/161], 0xfc}}, 0x20000088) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01883e000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 50.196498027s ago: executing program 3 (id=2358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close(0x3) signalfd(r0, &(0x7f0000000040)={[0x80]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x90000005}) epoll_pwait(r9, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r7, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r6}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 49.262545605s ago: executing program 3 (id=2363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) (fail_nth: 10) 49.043375547s ago: executing program 3 (id=2365): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_usb_connect(0x0, 0x54, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002b186260843195722d9ad010203010902420001c00382400904"], &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="000200"}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80010000, 0x8, 0xc2, 0x9, 0x3d, 0x0, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x8}, {0xb, 0xaff2, 0x8, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x21ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x8a, 0x1b1, 0x1, 0x3, 0xfffffffffffffffe, 0x4002004c4, 0x400000000000003, 0x6, 0x653a, 0x800000010, 0x1c, 0x0, 0x7ffffffffffdffff, 0x3, 0xfffffffffffffffe], 0x3000, 0x1011c4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x0, 0x10, 0xd3, {0xd3, 0x2a, "527873c5553dc1c1bfb30c7473ff7c2640bcb932c66240a00d1189c780768ab9100969978311242bd54d75777a275245879374bf829e46000a09ec241d3dcfd8922f46aa8a96ad431f491927ce79ff57e5be01e82cc0bddbffe1a5137e4ea3eaf019a90806786eb31766e9cd28ddaf24010098883c13e64853aae3603fce0b7021f13a6c4991a36e38a6d5c1586c4189e47d3d01b1f815525f89bae4292c1ee1cec866d75b214effcf7af28a48b0e4598c094153e07e7fd5bb4f5e35b316434bd28c7466ab5c5ff5ff51ad160fffe50c79"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3842}}, &(0x7f0000000180)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "c616ff87c87deb9ef42eb871e3489dac"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "23efa92ab39b8e9f7dccfece1a37c192"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7e, 0x2, 0xe0}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa4, 0x2, 0x1, 0x86, "afcef72f", "587d14ef"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0xf7, 0x0, 0x0, 0x0, 0xf60e}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x40, 0x5, 0x12, "626e0a16127a2d4a19e46f8c44e1a8d5818e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "5411"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="d178372bf04b"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "6705"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9e}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000900)={'pimreg0\x00', @local}) 48.809964824s ago: executing program 46 (id=2365): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = syz_usb_connect(0x0, 0x54, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002b186260843195722d9ad010203010902420001c00382400904"], &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="000200"}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80010000, 0x8, 0xc2, 0x9, 0x3d, 0x0, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x8}, {0xb, 0xaff2, 0x8, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x21ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x8a, 0x1b1, 0x1, 0x3, 0xfffffffffffffffe, 0x4002004c4, 0x400000000000003, 0x6, 0x653a, 0x800000010, 0x1c, 0x0, 0x7ffffffffffdffff, 0x3, 0xfffffffffffffffe], 0x3000, 0x1011c4}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x842, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x0, 0x10, 0xd3, {0xd3, 0x2a, "527873c5553dc1c1bfb30c7473ff7c2640bcb932c66240a00d1189c780768ab9100969978311242bd54d75777a275245879374bf829e46000a09ec241d3dcfd8922f46aa8a96ad431f491927ce79ff57e5be01e82cc0bddbffe1a5137e4ea3eaf019a90806786eb31766e9cd28ddaf24010098883c13e64853aae3603fce0b7021f13a6c4991a36e38a6d5c1586c4189e47d3d01b1f815525f89bae4292c1ee1cec866d75b214effcf7af28a48b0e4598c094153e07e7fd5bb4f5e35b316434bd28c7466ab5c5ff5ff51ad160fffe50c79"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3842}}, &(0x7f0000000180)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "c616ff87c87deb9ef42eb871e3489dac"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "23efa92ab39b8e9f7dccfece1a37c192"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7e, 0x2, 0xe0}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa4, 0x2, 0x1, 0x86, "afcef72f", "587d14ef"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0xf7, 0x0, 0x0, 0x0, 0xf60e}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440)={0x40, 0x5, 0x12, "626e0a16127a2d4a19e46f8c44e1a8d5818e"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xfe}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "5411"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="d178372bf04b"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "6705"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9e}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x9}}) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000900)={'pimreg0\x00', @local}) 10.098610285s ago: executing program 9 (id=2529): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000300)={0xc000002, 0x0, 0x0, 0x0, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r3, 0xffffffffffffffff, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) (async) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000300)={0xc000002, 0x0, 0x0, 0x0, 0x4}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) 10.075393539s ago: executing program 9 (id=2530): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14100000", @ANYRES16=0x0, @ANYRES64=0x0], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', './file0', [], 0xa, "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"}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r0, 0xffffe000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40080) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='m', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000301010200000000000000000a0000000c00198008000180"], 0x50}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r8 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r9, 0x8, r8) exit(0x1ff) sendmsg$inet(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)='\x00', 0x1}], 0x1}, 0x4044881) close_range(0xffffffffffffffff, r7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 9.038387905s ago: executing program 9 (id=2536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="5e23c70f21ed66b809000f00d0b94a090000b8faffffffbaff7f00000f30c4e109f99f2b0000000f01cbf3ac66ba430066ed67800e416704660f38817e30", 0x3e}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.542669019s ago: executing program 9 (id=2538): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0xb2, 0x6, &(0x7f0000000080)={0x16, "247f23e017bb456c5c4b71653300"}}) 4.84255491s ago: executing program 9 (id=2555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x42, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) syz_usb_connect(0x1, 0x851, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x9c, 0xec, 0xcc, 0x8, 0xbc2, 0x3010, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83f, 0x4, 0x8, 0x9, 0xc0, 0x2, [{{0x9, 0x4, 0x76, 0x4, 0x2, 0x99, 0x5d, 0x6c, 0x3, [], [{{0x9, 0x5, 0x1, 0xc, 0x40, 0x8, 0xfa, 0x3, [@generic={0x78, 0x2, "cc68b7776d5304717f578c8e0ee8a789b3c0f62ddcb8b5a122964375541e55a7477360a2b6cd3abe66cbe6ee69166d9b63a827df4e67cd8a3180f916a3b149bb64cb84f0e7080498e4a5c8359186acb221bb89fb95f0cab8834c18a65edfe767f972fa4d8a1182888888f083eb89a85b40eec68f20c3"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x10, 0x8, 0x3c}}]}}, {{0x9, 0x4, 0x44, 0x3, 0xb, 0x2, 0x6, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x5, 0x8, "", "85"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0xb5c, 0x17, "017016b9"}]}], [{{0x9, 0x5, 0xe, 0x3, 0x10, 0x7, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x1}, @generic={0x60, 0x7, "723fa5a2ed3cc3ac629500451a69b55d35936fc96eb7684b5d990ef2be46de6fb48caec16b0b4bc825b1894428a2ba0d310902f7d63aea452c1e7b926db6e77e127f0fb45cf307cdfd031744862b5187f5d10d91710ac06d8259e6cf75f9"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xd9, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb2, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xa83}]}}, {{0x9, 0x5, 0x9, 0x0, 0x159175530b7fce4e, 0x6, 0x8a, 0x0, [@generic={0x93, 0x2, "07889b087de0f1869821166d0ceb6056a09caa253ed8e9a1ee4c5f0f2ddd5bd500389799bdcde737d09051147c4c39bf108f1d41cca53e51c67de1639be8fba1644a5fb7e4390403db3011380dfec5c9c1bd3aa08ee4d724e8c3f4b9f94e9e3818f2349d8f4d5d805a62d5f392694f1b9114e3850652fda48bcf96df353f0aa08df75be6a6c7c42adfd0f9274ee8ca6b26"}, @generic={0xcd, 0x23, "b409335fe80350356a0f4213139f1e34823b072a0a833c644112e50c0288d28efbdf84663d1f37a7e625f4ded7f5b0c96e2a9d938c7ba27f7592f6478aec58ba38ca1a341ec774726540ae4127a1cd9a923783a3107ecbabd9f114ed8a360e5ea2122196413d57609120e03f081c73d489934a3e0bd928846524bede51a5bff1287a50258923ddc0b4aa478f7e169a0e05b840709642b0187dcc64be73e6d5bcabcf8525c170a582c8c2da188f139f3a0459736bf8551aa3d56119eb7a85157d7518eef0f401f795452640"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x9, 0x6, 0x1, [@generic={0x6f, 0x10, "39bcd7cba87fb0427b331f92095dc470fa39af85837b3a3494e35064afcddc18cefae8a31374b111a1755a0b38c528635c24f6155c1486343a7cfd2b39200464fcb1c70279bc2eeb04d92cc1dcda0cf54f997b24895e8934f1805264cae3d2273031e83696e91b161a14ab267f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7f, 0x34, 0x5, [@generic={0xc0, 0x6, "ae3a2b6fd214b33cafe981cb0783d410271510ff7614b5e322cdf8e6fb246d0c7959b25f23df164a663ec67c712724e12e4cfba265102c7f7d76e90e82f3a4f02f20ed5da23ededef9dc001e3794e224d9504ba193406b6419d72aac69f575086147762e3ff411963bd5ce006dd3fbd216fd713a2f46902349a30a4911419c57c0c749e4faa2321759970d38f4813346ae4a4d3df76f3571343bd4b69f0c88f436414c8da4463e04a768b81f8a384fb6606478a59b17bf824f29ddacd3fb"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x8, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc2, 0xb, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x4, 0xd6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x7aec}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x8, 0x3, 0x4}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x1, 0x1, 0x9}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x2f, 0x0, 0x3, [@generic={0xb2, 0x11, "a8b25c42454d6ab4085015e1ecb95cbc1d91dfad8aae0d70233baf41e3821db023f9f2586a1c7a9073956448a9047db42b9bd8463a06e10213698a05a2f4f3bb253cd2bd3de590d3a78f85bd5cc559677d88514a77b4169ffc6bdf282819986b6e82540e07c1801906a545ecf9c0fb80686084ee019d636d3512e0183a71cca4e8c74da405bdd690d203a4c6bb045b225809ee4e9a56a1797ab5bfb3109d65b86fc5a96e696c35bad49f190a9f9e7962"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x4}]}}]}}, {{0x9, 0x4, 0x3d, 0x2, 0xa, 0xff, 0xff, 0xff, 0xdd, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x4, 0x1b, "7487", "ed82c9"}]}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x4, 0x6, 0x5, "c435e8841705c8"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0xe, 0xb, "20974f09a0aa"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xff, 0x2, 0x2, 0x5, "b352314ef411"}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x2, 0x1, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x8, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe}]}}, {{0x9, 0x5, 0xc, 0xc, 0x3ff, 0x9, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0xe, 0x7}, @generic={0x9b, 0x23, "5d51e396782296b29a3d94f6e51e12acf585f1652248a0b5cfc7270a2dca620b8b6939338b38a850c62314bb16029fc11f384c690b99fc899c9e3e4772039203c12728a5bd0ab4919bd60df42a9c001754ab5a3b018358a02d7aa60e568ac7cfe3df08d4414d1d9c79b5456a6c636928875d4128caf5bc92d25d019716b993afbd5f76b3d66ccffa80f88c456402a69e15f622ba01cda25f1a"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x9, 0xc, 0x9c}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x8, 0x37, 0x6, [@generic={0x69, 0x1, "9732219365ffd0bedfbefb85e8de5234fcbf6cc7d032c763f17d678c36ac4ed4fa1cbf3af85f590eb79f4448b2b23556af420fdbba711146b77599cd08ffebb5f3eeb0c9a85610ed8fd7c9bed4f799aa4c66ccd1c45b9418b3761bd4f1bb4e7111949ca63dca7e"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x8, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x46, 0xe3b}, @generic={0x7b, 0x23, "6780459e7512aed8b269ac0b37c1109e5dd2a9eb031f5ea28bbff78d6d351c4b174fe33c889c5828126cc870fbebb6b2ca7b207e2af2eeab0be36fc1a4cbc86ef929ef6612b2bb4e323417fb77a2ed10aceb296bbaf54a44960ddd7de17c8d9daf84e64e5702ea610281d741dc1b0bfb0c95a5cde818033986"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x428, 0xa, 0x40, 0x3}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0xd, 0x9, 0xe, [@generic={0x1a, 0x1, "190fb9c5a818e13c40635efa24b3f4726b74270adc8482a8"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x40, 0xc8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x8000}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x9, 0x6, 0x6}}]}}, {{0x9, 0x4, 0x0, 0x40, 0x3, 0xa4, 0xb5, 0xa1, 0x2, [], [{{0x9, 0x5, 0x3, 0x19, 0x400, 0x10, 0x80, 0x8}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x1, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x81}, @generic={0xc6, 0x9, "e2486e3b63c111db25ab04a0fe8f53501f9101749f22676db05cfd6eee09d585e21041964e1bfd3f6c65a6a8c1246a1ab73ff3b9feea43c7f8b98399e5c52ea8a1a4b5ccb45d2ebe8502db96cb79ef42fb22a96caea19f2cd4de66b7a5d64d67e956f6319cd257bffa0b04b1c28d35fc88f381300fdf0dfec93365bb984c2f4617d2a37fdff71efe129ba2788e3dcca659fbf3c3b711f3cfe3e00f07785d1d015bd011d9c7cc0ba8f7f7583f04efc5aaae7d180ea21f362d7c8a34b0c0769cd331f2780f"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0xd, 0x7, 0x7f}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0x8, 0xd, 0xff, 0x6}, 0x24, &(0x7f0000000140)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xcf, "0db833bd251b870bebdfb3931cc5e157"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x24, 0xd, 0x7, 0x0, 0x7f}]}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x422}}, {0x79, &(0x7f0000000200)=@string={0x79, 0x3, "75716b7e664826965a9097f60ab46c7678d9cd69ba7e30abb3fe3c0abe83776337fb8f242ba5d49a71d5d4bf4ce30fbccf0003682af43191e1edc810df7a4d14d3c043a0362e0fb962113968561fe8a9774dcfb3967134f57f045acf30a6153e55d92dc30ccaa27d5dcfa9c0fac52eeddf8f4757a2d90a"}}, {0x5f, &(0x7f0000000280)=@string={0x5f, 0x3, "f3b1951303522e295d29b71c57499bddeb18aaf50638c7bef00ba4bc8e1525d85dd8c708e280cbf95dd9380d9d9c65e19df3bf459663e161edc60d9fa5d9c8b3a704ce9092d7b935348b7e5c1631a45d0178bc02ef7212e01d4385730e"}}, {0x1c, &(0x7f0000000300)=@string={0x1c, 0x3, "68735e87b13c7febeb487c42b18543756d67fca3f829f75a8447"}}, {0x90, &(0x7f0000000c00)=@string={0x90, 0x3, "9be973cbfe7effef40121dfefcbf2277227963e57f46f0617789bce5758dd763705a14379d43e721f972eaaa9e41030377061048fc2937c5d05aa14fcf0392454ebfa68749f045634c9d9e3f828df4e5bee004baaa0eaa898c2541563568f86262239a6c0583cb3c8af264045f115999630bd0d6a10973dbdf6d215c55eda7d29668a67b1d5ceeb19ecdce08140c"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x44a}}]}) 3.970302742s ago: executing program 2 (id=2557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000100)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r5, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x6, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000d4d000/0x3000)=nil, 0x339a, &(0x7f00000001c0)=[{0x680f, 0x4, 0x3}], 0x1, 0xfffffffffffffffe, 0x10, 0x64, 0x28, 0x40}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) 3.781680644s ago: executing program 2 (id=2559): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) r1 = syz_usb_connect$uac1(0x5, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x9b, 0xd0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x5}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x2, 0x1, 's'}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x3, 0x4, 0x9}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x6, 0x4, [0x8, 0x0, 0x8, 0x3], 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x9, 0x8}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x4, 'Ow'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x50, 0x4, 0x80, 0x7, 't', "0ff2e9"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xf8, 0x3}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x5, 0x7, "9edb8b"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb, 0x7, 0x4, {0x7, 0x25, 0x1, 0x0, 0xd, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x4, 0x7f}, @as_header={0x7, 0x24, 0x1, 0x45, 0x6, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x19, 0x5, 0x7, {0x7, 0x25, 0x1, 0x180, 0x80, 0x3}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x3, 0x2, 0x6, 0x20, 0xa6}, 0xe3, &(0x7f0000000140)={0x5, 0xf, 0xe3, 0x3, [@generic={0xd1, 0x10, 0x3, "7b30a4b6b773e497d57a2d951ce8f62cbef1eae5045b3930f268fb778e8ade0fd0de4c9d9123d03198e5bfe9a779d2a1f39e8abcd6bfbd7370990ddbb56033a58b0fc5f6456f530bc14af9833ab7f3b94cc21d820cc8776c59b50f2bcaa4814c58a96d890860c03c389d47e3ac4647ca22871748694201057ae79227dd3cf58fd62197566aefb0b180067227fb38816fa6d3c401d969e7815fcf2356ad187ebabdf97d4001fb01f25a929114350dd743e35dbe3d4a538bff7fff4c1087d416369cea6c28e41c26ffa993bb32b237"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0xa5}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1401}}, {0xf2, &(0x7f00000002c0)=@string={0xf2, 0x3, "5e760dca4bf24f643f2c00858d9013761d1dc1ffd93ff3aa321c45b734400c60a2d08c76f68e9536525466cd34f5264ff63e7efc645cc53dbf9b0f2215da6d5735b3823e0fbb19b3c3e72d9a0480aa8db30147cc68fb4352fad015cf423a0148fb36a0b827155a5944e5a6e45148bc92db67d0fe052041d1241d614b8afc0e2fa8e1f2a9a101307e0613b694b1e5f785111d9d20f210acb7bc9692a3d54e291d7563e3598faa8eab97e174103bb2919e88600ac97ffc6c42dedc8685c1be3cf475e7e133a7b8f0bbc61a76faae0c6dab4591f0ed854a38d7c90c8b87f1bb7a4e83512aa0645f974c430eaa9bf3af46b9"}}]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000400)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.316816521s ago: executing program 4 (id=2560): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12, 0x0, 0x29f0}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0x18, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @ni={0x8b, 0x0, 0x0, 0x0, 0xfff8, 0x6}}}}}, 0x4e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRES64=r2], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43aeffe800000000000000000000000000010fffe000000090000000000000000000189"], 0x340a) 2.936466645s ago: executing program 4 (id=2561): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000880)}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x70, 0x0, [@mcast2]}}}], 0x228}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.635261878s ago: executing program 4 (id=2563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000500)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14, 0xe0}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x25, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x11, 0x0, @opaque="87fc4f59a62c5eadc8"}}}, 0x33) 2.458238149s ago: executing program 2 (id=2564): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e22, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd4) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x19) ioctl$TUNSETLINK(r5, 0x400454cd, 0x312) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r6 = socket$inet(0x2, 0xa, 0xfffffffc) ioctl$sock_inet_SIOCDARP(r6, 0x8953, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000003afdd4000fd9379c3ff716c5b3c1d56e8ac81cb67f0f0494804243f1854cad235da696f2ee613113b1c57102317da135098073bb0152396351128316"], &(0x7f0000000000)=0x64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newtaction={0x14c4, 0x31, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xad0, 0x1, [@m_ipt={0x1f4, 0xe, 0x0, 0x0, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x107, 0x6, {0x96b, 'nat\x00', 0x42, 0x7fff, "b042e5041f9882ca4d6a7fed849e59585700f6d90ec4c41f6530c808855727e4c4859a1302d0bf3c1f7bf26fcdaf3d6bc7cbf66653836742585ed82aa628f266ffe27ec4edbc848b5a2abd0efefcc75ef0975a298b67e4dccb5146848f7ccd11bd2fa22fcf8f1385f58233c0b69e7821b4e2f1c0eac9d9518c4985ab44e69482b8cc574f8ec99cb50b937a60fa105443b90b44852850d6efcafdac42003e9c23ce0f9456de124499ec1d232c021dcf88e4d53c643f14d52eb16a81083ccaa1370e17d0e7dacc4c3eb7067329b3555e478a8ef7ce04ef6b0c04a6779c9f"}}]}, {0xc1, 0x6, "c664785b4bf6f4ddf55fc121ec6bb8a5a74a714d5275d43083adc477d7662abcc8284bf45652bd609a67fb170e784e4789dcf5249d17f7e66a5226ba5d3ec5818e751a324dd865bbd5a12032dee5de62cdaa72e418052f9051f28704af0a7fb1475a613dbd66a87cb06cd81e60b0d1bd7c29c26a553c257a3341ebde4d6585e7c993918936a31f16ac12de942dcee68c70c38367adae6d00ac1ca233e561614f51843421acd66bce56f279d7dda807657cdbc7ef3faf3e8de36db64ffa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0xec, 0x15, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x73, 0x6, "81e7c79005d21c0999050212a0bea6edffdeba6fe8f538ceb2c21769057dc71f7a30ef16af92af5d33b139ee2f2130fa4629eb969dab4ef8a84a534e538a9e372e7aeb97687d57785bc65db9c6de57453305d7a34df4cc1d352219d3d23d558bd186b8238e1c1b0364d0694046772c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ipt={0x178, 0x19, 0x0, 0x0, {{0x8}, {0x134, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x11}, @TCA_IPT_TARG={0xf4, 0x6, {0x3, 'security\x00', 0x3, 0x5, "2dfd0d37179330f16e7e71d6c8c08df62c1095b0091248cce8a452816155816cb740df7a1d673a31d065180c85f926b81834ec056e23a90c41791f00a7c3875514809b84059618e9a7596dd819d841512827f63ca95ca6f60c09b58c8f64a7bc833b492d864d5d3a21a72b37a1a5fa33c7a796e5a557718e92d4bc6511b8c7afd5942b0c6f4b59896ac230006ea72b1431cd1964898567c4cc3248f1eb421fc693a84832201f1ea62a9352ab5946366a1444e0292b16fa47f72a9aa702bfc51b459ab6faff185ec3b449"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x1d, 0x6, "d09af9a2542d0099da520b275f11edac728a2ed2c8e27d4020"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x298, 0xd, 0x0, 0x0, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x9e, 0x6, {0x8, 'filter\x00', 0x1, 0x0, "02bc78f3f9fea16e57f0876d3b03475c24fe137ecd05db4e6e8fc183ddcbd71d6be3895657b5693b547baf231e577cf39c741d759203c733130e65d10130acd4d3717aa0937ef45f5af0bfe7e60ed83748d0b2ce035e458c9a886766655b6ecbc0c9c2493f9f75eef6564963527414a2916795b5"}}, @TCA_IPT_TARG={0xa6, 0x6, {0x9, 'raw\x00', 0x6c, 0x8, "6f5b6b7f5b77bc1db4deb6dc919f5865d95bcdef969c6e172df5d12779b6fa820ae2c908dddc62d61b356200674fdf444c549658884bfc18a58d2385c679ba2a88a97a801024c3eee7764a2670a105720e1df915bac19ee86b3450d4e9a23e631e6d42d394d2d798b89bc8f727a0a0489a4eafcc104ac33390240b6a"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x120, 0x6, "d85d3ead1a7d65c45f2fe3e3e51161489447d9b7c9d1454115f0cbd077b610fedcd0c3a4badb8289b45ec4ce00dbe00b55608ef9f76c5530796886a9490b84c302ad42222f3c5e85a60bd4752f95e73195bc2f0dfb4013233158551dfb0587a6bd051ff87e8084edeaf1ff786b107f13887870e4ef9392e6b9e0d2c482ba8605f0951017a39ea07a96624848306135d7d5c37a1d3cf61bad97b50e578f792a387b16c8a598c308f53a258b6543059dc80e704050dd4425991018ad1e36228205928bc481"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x1a0, 0x17, 0x0, 0x0, {{0x8}, {0x174, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xd3e}, @TCA_IPT_TARG={0x5b, 0x6, {0xffff, 'security\x00', 0x5, 0x4, "f244037d40e04909a52d87daefe2e95b70d6d0486f2cba02885ec236e998e64300584ec48e6b2d73589d706ec4ab5af958"}}, @TCA_IPT_TARG={0x9a, 0x6, {0x4, 'mangle\x00', 0xc0, 0x8, "e8456a8c615d9824d8d9517d0376f21899fbe419abf6ac88b00a8636590255e1247675711df90a6084033f9f248e795a7aa190c4670461597450b8e11577c4d77b1ff0dbe7702d6466a68ebdfcbd3f3b28d58c08b6e56fe0f5aecd7e708082df693cba3b556f8bf0609b76ae62010725"}}, @TCA_IPT_TARG={0x6f, 0x6, {0xe, 'mangle\x00', 0x8, 0x0, "6a2e737df7cf2f4890c327d3ca2c865f654f2fb46546dd11e0f5f6b0b807b1bd076ba5121be8b31a0acd39ee57cf4208ac5e25b52ee7ca464d9793fc966b6959113ff9e27c"}}]}, {0x7, 0x6, "bae749"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x1ac, 0xa, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x14}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xffffff80}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x85, 0x6, {0xff16, 'filter\x00', 0x1, 0x401, "3ca5182507faab5b4f608d7b01da953b76ee917a6f4924159f2be83dc5fef1b355242d86a1d8e7bd3e283f608b69ccacf6c1eb7a78093602ed254f217066d43140ffe4e693198acea122dccd76bcae5904071e533e450fc04834f6"}}]}, {0x91, 0x6, "f6be9b497c0fa7f82cf70b5621867b297a0d89cc9cf4db19c40b44eb5069d0d9d85c154964197a18b081ed80255014f2fab02b56c6b1204b386c6b81072a325f55c249fc2601871eeb3c39ced82208dbff977d35e0d5f33b59029e82d255b575e7f79a58a3b8e90425ccfd49b0828e5d85dc2e4b8a9ebf33a9e8eddd8e3222f252c0542e250213f4a72a78b176"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x90, 0xe, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x42, 0x6, "c196d870eecf85280d577a0faa174d59da3733a0e48ea96cd0843b45f4199afa6af186a895c11fb646b8c4bc62b20966b5125040331c4b6b55c247597c13"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}, {0x9b0, 0x1, [@m_ipt={0x28c, 0x1d, 0x0, 0x0, {{0x8}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x82, 0x6, {0x1, 'filter\x00', 0x7, 0x9, "dd25176f7becd2b15f180a2855067a50aee408f3c4fd582181f22cd614edef4c77e88151610f31854d18a24d08e48d05c2fdca28fe084915ff5504414cebdfe933d3179780c793329d02b9f53d7a05b121ba10964429376f"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xa0, 0x6, {0x9, 'mangle\x00', 0x5, 0x8, "b912c5dfd9d7aaad797736579a827d50c915901d5d432b949489694455ac8f03cf686eca174a744399662780ef4a5e6eac531c5c5b5fddcbb60d0d59c7428e511bc958c15ae63cb6a2a0297142606c69d501c0aae77d76394547b894ad11dfbe525a3f78c66f02fb58f77fd1318156ea22ecb23ee529"}}, @TCA_IPT_INDEX={0x8}]}, {0xe0, 0x6, "3ba1111b32cd0231b12275a601e6f150f65f55dd35ead05479a8fd1ca7e39eba8b415301465ca5fa82ef1df17ba91d2df21e3d157aa9ec886e661347fef17742a59a531e5004ec499a5dd0610fb786772cb2a8d8fbd27ef80f913a3fe8942514496bc3464cb5812d284153b94c58bcf29d5118d45d60a69c2cf42a507f61a8f29baff3bc26216397a0f801cc2a6a02a89d396b8e2aa8c87b8c1643fea77105b7d92a00fcd9e02b25423e4e8ae500703044a4798d982ddbfac9db0e4ce8eb191b45ca05c0f5e22c47dc97ad3b905020d0deea081bd05a385a29cd0262"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x1b0, 0x4, 0x0, 0x0, {{0x8}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf9, 0x6, {0x8, 'filter\x00', 0x9, 0x3, "b5f342da58f301120d1360e147d4c8dd89c6c37c5258fd30816b686082c5bd76cdbc5ddea3e1c6aa70cc3a35341e9ca2e6a1a722a937dd47ec62cc6bd020cbb2c39a3dd69ea9b367f9b61532d62510bb9c9cf92aa07a02be1054d683728c31ed15a75be7077a40e4a1c131e6c2b59a1b41d365a9bc9c82f96c9c6b4091266ec68b3ceeb49635a2b1f709a570b3c9574a01d254e038acf0ff3fa686db9c87e41db3df833517c385a4afac7ffa085f14dc0d37eca94e97bdd693c68ffd2a4fcf463e37aef4f126b66f58e90ac7572878"}}]}, {0x8a, 0x6, "112df620aabad7f6405ce4812dbbc5de5a71454e5d3c74e1342226d63ec89efe58d5759c11a657785257b4e24d9355a10fc1b4895053a336133b1fc9439a02db7e894659a89adc82d9bd48191ebccb1f6d327cc460df54f63fcdb7df4a91e2c6ef4b56c18590eb3123f305ea83f56bee6a7b02c2a8a77132e7e4909d6e88c01e5968dfa86529"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ipt={0x108, 0x11, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xe8e0}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xb4, 0x6, "5e58173ef1076872975978e83a6dde88d643c20e56f46e8298d9428b6d5f9b4695e928839ac2ebb264919406972e3415fcdfbb85b99ffcd884e5d7f2193c10a76ffa14683f71b57ea1e1ee6fcd4f02d108a3ad4a41c18fb857705c394739e12a2a2b02dc9f11d4592f3dab51e49657246d68053d0aaa97ec4a2da9638b819515e4cbc921222a91b753c917ae69b96221ec8ad970d54fefbf36a0b594ea78417eca1defec512c2cf49c5a40e8da266af5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x2e4, 0x2, 0x0, 0x0, {{0x8}, {0x290, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xb2, 0x6, {0xef, 'security\x00', 0x0, 0x8, "f785bf573f2857f560d2c650682a9e3cb80022ee2a273175b9bca0179b25583d2eaac13500a807a0cdc75c14317c389b1f8d3f339f7cbcdb96d9eb0f6cc2ecdffa2c407b995f68038bd29d72276af49ec314be6cbedeb5bdfba7b9f95168c57a4010d0beb90726b79b70f62ed250e19a5bc5a9d92c82a8ab31bd7e06219bf37932342b5552c4416e"}}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0xd8, 0x6, {0x7, 'filter\x00', 0x10, 0x10, "f20c49cdc6d5d36c2cb0a0da7d7f97d36d7c07a36a05f83e075c72c6725bccbdcbd14cced2bf8bc60fab754e2f34ca4c0bf864cfdbe1d3fe1fec5ec11f11ffae9977de3cc102d41460e69fee6d70560098c2cdc5c3ed87005dc4de623c0a9dbd9b13953a8ea3393d11edec784f65f3088a29d21f1db95ec2d19c03e080c70b19e10ba47c8e2fbed522358bbf701b2c2294b75df0946425823c5cce1d5ccf05eeec226a2b38ff36a91dc8cef9dca0"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xbc, 0x6, {0x4, 'mangle\x00', 0xff, 0x390e, "4ab225fa0b3dc3bc7864341db15c3ebd16af4360f1940201577933d23003d9389c33884157b41d4cef2b65ad1cf029af1aa4cb89d71200ce6e362470752ab90674e73a462af7f000d648cbc27534acbd432551125fc7d76dfd7c12060ab3bd8975205652e2e3b78b54e832d6070682fee2fb75b1c6f1c86cad6ff43c4d8156b1b44384ef1fbb8c20c301b213cbe30aca97e8"}}]}, {0x30, 0x6, "ca8e9f5277fcb1c150c798fa3545b2369cbc40efa5321eb57aba220f55e9ffc9d13684f4fe3d8ff23449b2e5"}, {0xc}, {0xc, 0x8, {0x6, 0x1}}}}, @m_ipt={0xe8, 0xf, 0x0, 0x0, {{0x8}, {0x4}, {0xbd, 0x6, "a758358c105b9880206729d1597e926a80fb5d331879810f3db9fb5898f1745150d8fa99ac892f6f5d56efe051a5734dc963413b270625b37f1e12eab23f2419dacedf6d154b8583287bc648af47f52e2f31e0be0f583175fd48d29b310e759ba2b7556974e2d0198063cbe730b03d5b5c77fef77b68630034be7ab1904fa35dd533b7fc1cd0b6a9f0b2b44f5c55669ee39804a4c18d51b5f48ef84c74a28c904b7add3713ef17543db2647eb69e9101fa1f34c7820e1e9a58"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x9c, 0x7, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x47, 0x6, "96884ec8bfc922693f9f8726544a987396d49c07d860a0a251b9f0189316baa0aad6a6ac98dae2da71da07c26c1e601342d46cd76e3d22ff00773b63f9958f13677369"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x14c4}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000340)=ANY=[], 0x118) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000240)="09000000e70014000000d97bfbf788a83baa88a80000000000008100000088a8", 0x59, 0x200000c4, &(0x7f00000001c0)={0x11, 0x88a8, r11, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14) 2.06182182s ago: executing program 6 (id=2565): r0 = fsopen(&(0x7f0000000140)='ntfs3\x00', 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='iocharset\xa6\x84i\xf3\xb2\x82mN\xbe\xca\xd7 \x84B\x15\x82S\x01\xd6\x1ag89\xcdA\xc9\xeb\xfd\x92\x1a\xb2\xaf\xce\x9d\x128\x02lg\xc1=P|\xa7\x9c\xed\xbf\xe2\xfc\x04g0\xd4\xcf\xa2i-#(f\\\x94\xf6\xbc\xae\x1a\xfcJ\xa9\xdf\xab0\xe3\x9a\x8d\x7f\xd2\x83zb\xeb\x1cY\x0f\x1d\xdba3[HN\x1e\xb0\xe4\xc0\xac\nW8\x86$N#\x02%\xfee\xa3\xc8W\x13\xaf=\xcc\xea\xf8\x17;\xbc\x8e~\x84T\xb96\x7f\xe1\xa5\x88\xf5\xbb=\x7f/\xc1x>\x04\x1e\xffk\t\x88\x9e\xee\xf7\x1fk8\xd8\x8b\xe50x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000440)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000400)}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x4, 0x0, 0xf0, 0x1ffffffffc, 0x24}, @fda={0x66646185, 0x9, 0x1, 0x21}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.036484663s ago: executing program 6 (id=2570): r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10) shmctl$SHM_UNLOCK(0x0, 0xc) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x45a5, &(0x7f00000001c0)={0x0, 0xeabc, 0x0, 0x3, 0x38}, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0099e8", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x2) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) shmctl$SHM_LOCK(r0, 0xb) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES64=r5, @ANYRESHEX=r5, @ANYRES8, @ANYRES16=0x0, @ANYRES16, @ANYRES32=r4, @ANYRESOCT, @ANYRES32, @ANYBLOB="a242172a8d165cbf6f67d41890498f4753f2d1e1281ee75dfd0ef38c691513fc7ec3bf8a72b0b1f2aaa5c6ca5cfb936da5e107f3f174ba8f5992a10641e5db484242235f9445c564b0e64e376760e913de5bf24ec505ce37e7f6f6b7316914bc449915986e491f15d99b136219f7fc12ab0f8e3f3c3961b037f2435d88438c754bc6bef1e8630c713da9be2d2ad3e065867dbbe672510d6e07804a1ee6f6b5a767dc21d11bef63cc52b32e7be62ca9b221b6da2832f6ddbd"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044801) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x11e02dc89462ea17) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) (async) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="13ff09ee5cdb95cef0686b7e9dfde6f838", @ANYRES16, @ANYRES16=r6], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x414) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xf2, 0xe9, 0x3}) 906.363993ms ago: executing program 4 (id=2571): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000880)}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x6, &(0x7f0000000d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x1a0, 0x29, 0x36, {0x5e, 0x30, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0xffff, 0x966, 0x7, 0xfffffffffffffff7, 0x97c3, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @generic={0x1, 0x41, "9a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e81"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x62}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x3, 0x70, 0x0, [@mcast2]}}}], 0x228}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 784.295807ms ago: executing program 2 (id=2572): close(0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) (async) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000200)="15560c51e7595c94fee8b3acce5c", 0xe}, {&(0x7f0000000300)="c312882ddd7bdb1c51355eefc0f80f3b118068f84421bd06cc0486fa9beeaf5ab68fb34074b21b94f2fdb641d6c0f760be4a77e28deb28c2d0ab4783d948f4e2e58dab3e33555fad80470b623c92dd43f74b38c0543c8283cb6768f11ae801124443e707641a1e9990c96055e6", 0x6d}, {&(0x7f00000003c0)="d5a9e6f6cc8d56cb867884bd470044639dba22734cd7b82b21d343408d71722e3330509b889ee5372e21797bd44e47639b8c164c9b1c4bc21b1a5c399298fab8947d23024a1a1e70ca4daabd059ea39bc2acdfb4bb7942b8caf5e138623a081fa0287cdd27188082", 0x68}, {&(0x7f0000000440)="0a235a418cc4030488644f0dc0f495aa66860320b339fd5fa83de640bfc9b6e6d4550913c2cd09fe51272e07992a92388427f39a674cc87185d211bfeaddf7029f085f99b9564a0df151c28f4c46034d33a89dcb01b37b908439abe476c2f2c4914ef045fb3b3b5b10a358b653da3da77b57a0dafb29bfa56da630a89d199caa6999cb7d3a08a1d299d1d986525c24867335508e6a5162859c10913d24da5093a2f8b898fcde28a695f4752a56e17122c93ec8538ffd4d", 0xb7}, {&(0x7f0000000500)="93b23ab6c0a3f11a50584f3c050ce4261a882c8e1ea7b6fe65fb26f0976fa73935182eb587e7fd63c999c42a4aea43dc6179bd2fd509591546e4864cafd7303cc99b4b194a8fe346748e4e3f94f2bc12fd9669ae6574f73066247667b70c95d3478b7539d3310cd7170a8a96cb33d5b2551890cd08d01c92e2ab4884", 0x7c}], 0x5, 0x7, 0x401, 0x11) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xe}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0xfffd, 0x1, 0xff, 0x8, 0x82, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf6}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x8, 0x4, 0x1}], 0x7}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="b16300002e00090027bd78000000000004000c0008001a80040063ef0480b56d37579e07870100000000000000778c6a62a8078fba7199171ca98ca381db403382c222df83f8934f9b75c56021a89e5494f610c19e00773f6ad79fd3c257cfa9f716dccd9efe316f6d1040b7d1332c0036b393515959a981406e222407f5f5bd1e5d8b1c55b8a3c17f902f7a5bf734c58a28e0494577c9bf027e04a7b11e0aa790"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r4 = socket(0x1d, 0x2, 0x6) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x781, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xf, 0x1}, {0xfff1, 0xffff}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0xa4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 719.781801ms ago: executing program 6 (id=2573): open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb68d755d12873885f886046a2e5550caba204798bc956a8e35b04539a88965838ea21a464cd6511361959341849a8618e0beaa03ad408d943e7f9bbbdb28dde9e33", 0x6f}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f6981d19e1f47a8d118b4e", 0x98}, {&(0x7f0000000600)="d1a75a1596128c62e1a54cdce27b10c886aba86c6984512723139121091f323ea7d8140bf18a01c9c26c276bf48f99f81646de6331281fd9fa888ba2f9edd17442ed87a5543871d04e112b1431283b80844b20f2166819c03d2a8a8d7187ea24b42b9f5f93da1b2f047d36c7911f92b3b86c34ead9e7a50185ebf33763038d853922cd", 0x83}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000880)}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5560afb510a8098491725e7c0", 0xc4}], 0x6, &(0x7f0000000fc0)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000a00100000000000029000000360000005e30000000000000000100000100010800000000000000000738000000030c00ff0fffff00000000000066090000000000000700000000000000f7ffffffffffffffc397000000000000010000000000000007100000000002070600ff7f00000000000008e2c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf463cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8fa5b32a0876185144ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b8101419a348c3c19e341e07ee4adc61d7ea01e5c10989b56b8a6204ece9d7b40c0a8048b5a67b9d9a0001ae722193bf19685e3237a76548d6a2f0207089d2d9fb4647e810000000000180000000000000029000000390000006200000000000000380000000000000029000000390000003a04037000000000ff010000000000000000000000000001ff020000000000000000000000000001cd9663fae7f896497c627baa28857be3eed398d4f8482341de5b34ef36e2969975df9789b6cc6d45dbb6d3ed507e487c9c3817ec3dfc1f31cb2238a994ee5d080df8d8c1135b29b24f44bffa547b141022f3d00171d8d73a61173834eca48535bf06af2e840d6e8eb3f5fbe18ce368738a0678e37d2080bacc582e81a7c45a2297fa7f9e30260f518e5a56b25d6da602d2127c873e971204f49f309ee6feaabc03e172a9fad6"], 0x238}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 600.91703ms ago: executing program 4 (id=2574): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000008c0), &(0x7f0000000140)=0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x8002, 0xfffffffc, @mcast2, 0x80000001}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000405804530100000000000109022400010000000009040000010300000009210000fd0122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000600)="650f015a1fc4e17e7fb4d40800000066baf80cb862b1618def66bafc0c66ed0fae8463050000000fc72bc4e2b1a6f6b8010000000f01c1c4c2c128bb020000000f01c9c4e2212f4800", 0x49}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = socket(0x2, 0x3, 0x5) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r8, 0x355) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a090400000000000000e778316776d6cb2ba99f9d4200020000030900010073797a30000000000900020073797a3200000000200004801c0001800b00010065787468647200000c0002800800064000000003"], 0x74}, 0x1, 0x0, 0x0, 0x8081}, 0x0) syz_clone(0x1200, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 382.440516ms ago: executing program 6 (id=2575): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x100}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x1, 0x4) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 96.019307ms ago: executing program 6 (id=2576): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000046"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x4, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) sendto$inet(r4, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 2 (id=2577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000010403000000000000000000050000030a00020000000000010000000a00020000000006010000000500010001"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)=@fd={0x9, 0x0, 0x4, 0x0, 0x4, {0x0, 0x2710}, {0x3, 0x1, 0x5, 0xf, 0x9, 0x1, "be078d60"}, 0x1ff, 0x4, {}, 0x7}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000003c0)=@fd={0x9, 0x0, 0x4, 0x0, 0x4, {0x0, 0x2710}, {0x3, 0x1, 0x5, 0xf, 0x9, 0x1, "be078d60"}, 0x1ff, 0x4, {}, 0x7}) kernel console output (not intermixed with test programs): er 119 using dummy_hcd [ 732.732018][ T5930] usb 4-1: device descriptor read/64, error -71 [ 732.843081][ T5930] usb usb4-port1: attempt power cycle [ 733.192008][ T5930] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 733.212705][ T5930] usb 4-1: device descriptor read/8, error -71 [ 733.452038][ T5930] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 733.477297][ T5930] usb 4-1: device descriptor read/8, error -71 [ 733.485957][T16547] syzkaller1: entered promiscuous mode [ 733.491504][T16547] syzkaller1: entered allmulticast mode [ 733.603108][ T5930] usb usb4-port1: unable to enumerate USB device [ 733.892097][ T5836] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 733.991979][ T8149] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 734.045987][ T5836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.057448][ T5836] usb 10-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 734.066918][ T5836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.077821][ T5836] usb 10-1: config 0 descriptor?? [ 734.172045][ T8149] usb 5-1: Using ep0 maxpacket: 16 [ 734.182539][ T8149] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 734.193441][ T8149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.202164][ T8149] usb 5-1: Product: syz [ 734.206432][ T8149] usb 5-1: Manufacturer: syz [ 734.211190][ T8149] usb 5-1: SerialNumber: syz [ 734.220713][ T8149] r8152-cfgselector 5-1: Unknown version 0x0000 [ 734.227207][ T8149] r8152-cfgselector 5-1: config 0 descriptor?? [ 734.442145][T16553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.451457][T16553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.462323][T16553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.472592][T16553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.515613][ T5836] hid_mf 0003:0079:1846.0052: item fetching failed at offset 5/7 [ 734.524203][ T5836] hid_mf 0003:0079:1846.0052: HID parse failed. [ 734.530509][ T5836] hid_mf 0003:0079:1846.0052: probe with driver hid_mf failed with error -22 [ 734.688818][ T5836] r8152-cfgselector 5-1: USB disconnect, device number 125 [ 735.117301][T16556] syzkaller1: entered promiscuous mode [ 735.123285][T16556] syzkaller1: entered allmulticast mode [ 735.138303][T16556] FAULT_INJECTION: forcing a failure. [ 735.138303][T16556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.152369][T16556] CPU: 1 UID: 0 PID: 16556 Comm: syz.3.2352 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.152403][T16556] Tainted: [L]=SOFTLOCKUP [ 735.152411][T16556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.152423][T16556] Call Trace: [ 735.152432][T16556] [ 735.152442][T16556] dump_stack_lvl+0x189/0x250 [ 735.152470][T16556] ? __pfx____ratelimit+0x10/0x10 [ 735.152493][T16556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.152516][T16556] ? __pfx__printk+0x10/0x10 [ 735.152548][T16556] ? __might_fault+0xb0/0x130 [ 735.152589][T16556] should_fail_ex+0x414/0x560 [ 735.152620][T16556] _copy_from_iter+0x1cd/0x1630 [ 735.152665][T16556] ? __pfx__copy_from_iter+0x10/0x10 [ 735.152689][T16556] ? sock_alloc_send_pskb+0x86b/0x980 [ 735.152723][T16556] ? __pfx__copy_from_iter+0x10/0x10 [ 735.152752][T16556] ? page_copy_sane+0x16a/0x280 [ 735.152782][T16556] copy_page_from_iter+0xdd/0x170 [ 735.152813][T16556] skb_copy_datagram_from_iter+0x306/0x720 [ 735.152854][T16556] tun_get_user+0x1683/0x3dc0 [ 735.152887][T16556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 735.152926][T16556] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 735.152949][T16556] ? aa_file_perm+0x44c/0x1530 [ 735.152977][T16556] ? __pfx_tun_get_user+0x10/0x10 [ 735.153013][T16556] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 735.153043][T16556] ? kstrtoull+0x12f/0x1d0 [ 735.153074][T16556] ? ref_tracker_alloc+0x318/0x460 [ 735.153099][T16556] ? tun_get+0x157/0x2f0 [ 735.153117][T16556] ? tun_chr_write_iter+0x60/0x210 [ 735.153137][T16556] ? ksys_write+0x145/0x250 [ 735.153167][T16556] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 735.153199][T16556] ? tun_get+0x1c/0x2f0 [ 735.153227][T16556] ? tun_get+0x1c/0x2f0 [ 735.153247][T16556] ? tun_get+0x1c/0x2f0 [ 735.153274][T16556] tun_chr_write_iter+0x113/0x210 [ 735.153299][T16556] vfs_write+0x5c9/0xb30 [ 735.153333][T16556] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 735.153356][T16556] ? __pfx_vfs_write+0x10/0x10 [ 735.153397][T16556] ? __fget_files+0x2a/0x420 [ 735.153430][T16556] ksys_write+0x145/0x250 [ 735.153463][T16556] ? __pfx_ksys_write+0x10/0x10 [ 735.153497][T16556] ? do_syscall_64+0xbe/0xf80 [ 735.153524][T16556] do_syscall_64+0xfa/0xf80 [ 735.153549][T16556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.153570][T16556] ? clear_bhb_loop+0x60/0xb0 [ 735.153596][T16556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.153617][T16556] RIP: 0033:0x7fb00858f749 [ 735.153637][T16556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.153655][T16556] RSP: 002b:00007fb0093d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 735.153678][T16556] RAX: ffffffffffffffda RBX: 00007fb0087e5fa0 RCX: 00007fb00858f749 [ 735.153693][T16556] RDX: 000000000000fdef RSI: 0000200000001800 RDI: 0000000000000003 [ 735.153707][T16556] RBP: 00007fb0093d3090 R08: 0000000000000000 R09: 0000000000000000 [ 735.153720][T16556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.153733][T16556] R13: 00007fb0087e6038 R14: 00007fb0087e5fa0 R15: 00007ffd0dc99bf8 [ 735.153768][T16556] [ 735.761371][T16562] syzkaller0: mtu greater than device maximum [ 735.771996][ T5930] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 735.874044][T16564] netlink: 'syz.3.2356': attribute type 12 has an invalid length. [ 735.933288][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 735.941699][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 735.950484][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 735.960575][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 735.971521][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 735.982119][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.995414][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 736.012095][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.058748][T16567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2357'. [ 736.241631][T16569] binder: BINDER_SET_CONTEXT_MGR already set [ 736.250346][ T5930] usb 5-1: GET_CAPABILITIES returned 0 [ 736.259005][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 736.259356][T16569] binder: 16568:16569 ioctl 4018620d 200000000100 returned -16 [ 736.396319][T16570] binder: BINDER_SET_CONTEXT_MGR already set [ 736.402485][T16570] binder: 16568:16570 ioctl 4018620d 2000000002c0 returned -16 [ 736.454471][T16558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.463635][T16558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.486377][T16558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.495848][T16558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.505976][T16558] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.544862][T16558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.558107][T16558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.605528][ T5930] usb 5-1: USB disconnect, device number 126 [ 736.670722][ T5836] usb 10-1: USB disconnect, device number 65 [ 736.760866][T16576] binder: 16574:16576 ioctl c0306201 200000000680 returned -14 [ 736.814897][T16578] usb usb8: check_ctrlrecip: process 16578 (syz.9.2361) requesting ep 01 but needs 81 [ 736.826757][T16578] usb usb8: usbfs: process 16578 (syz.9.2361) did not claim interface 0 before use [ 737.413221][ T7165] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.508405][ T7165] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.523374][ T5930] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 737.600815][ T7165] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.663582][ T7165] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.696702][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 737.710889][ T5930] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.722710][ T5930] usb 5-1: config 0 has no interface number 0 [ 737.730606][ T5930] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 737.752584][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.754145][ T5930] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 737.776879][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 737.786999][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 737.797264][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 737.805352][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.806939][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.868569][ T5930] usb 5-1: config 0 descriptor?? [ 737.924093][ T5930] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 737.997252][ T7165] bridge_slave_1: left allmulticast mode [ 738.007066][ T7165] bridge_slave_1: left promiscuous mode [ 738.014252][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.026298][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.584757][ T7165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 738.599497][ T7165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.623430][ T7165] bond0 (unregistering): Released all slaves [ 738.740592][ T7165] tipc: Disabling bearer [ 738.750010][ T7165] tipc: Left network mode [ 738.994302][T16613] PM: Enabling pm_trace changes system date and time during resume. [ 738.994302][T16613] PM: Correct system time has to be restored manually after resume. [ 739.181754][T16587] chnl_net:caif_netlink_parms(): no params data found [ 739.258418][ T7165] hsr_slave_0: left promiscuous mode [ 739.264944][ T7165] hsr_slave_1: left promiscuous mode [ 739.271650][ T7165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.293376][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.302480][ T7165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.314117][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.322017][ T5836] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 739.345708][ T7165] veth1_macvtap: left promiscuous mode [ 739.351353][ T7165] veth0_macvtap: left promiscuous mode [ 739.357841][ T7165] veth1_vlan: left promiscuous mode [ 739.478632][ T5836] usb 10-1: unable to get BOS descriptor or descriptor too short [ 739.496230][ T5836] usb 10-1: not running at top speed; connect to a high speed hub [ 739.518777][ T5836] usb 10-1: config 2 has an invalid interface number: 51 but max is 0 [ 739.547848][ T5836] usb 10-1: config 2 has no interface number 0 [ 739.554321][ T5836] usb 10-1: config 2 interface 51 has no altsetting 0 [ 739.564037][ T5836] usb 10-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=10.57 [ 739.574377][ T5836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.582918][ T5836] usb 10-1: Product: syz [ 739.587420][ T5836] usb 10-1: Manufacturer: syz [ 739.592672][ T5836] usb 10-1: SerialNumber: syz [ 739.842502][ T5838] Bluetooth: hci3: command tx timeout [ 740.273179][ T9] usb 5-1: USB disconnect, device number 127 [ 740.359153][ T7165] team0 (unregistering): Port device team_slave_1 removed [ 740.430385][ T7165] team0 (unregistering): Port device team_slave_0 removed [ 741.497163][T16587] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.506333][T16587] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.514288][T16587] bridge_slave_0: entered allmulticast mode [ 741.523449][T16587] bridge_slave_0: entered promiscuous mode [ 741.534125][T16587] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.541684][T16587] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.551147][T16587] bridge_slave_1: entered allmulticast mode [ 741.561783][T16587] bridge_slave_1: entered promiscuous mode [ 741.735335][T16587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.787053][T16587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.923124][ T5838] Bluetooth: hci3: command tx timeout [ 742.056404][T16587] team0: Port device team_slave_0 added [ 742.070024][ T5836] keyspan 10-1:2.51: Keyspan - (without firmware) converter detected [ 742.090806][T16587] team0: Port device team_slave_1 added [ 742.115899][ T5836] usb 10-1: USB disconnect, device number 66 [ 742.142667][ T5836] keyspan 10-1:2.51: device disconnected [ 742.230806][T16662] FAULT_INJECTION: forcing a failure. [ 742.230806][T16662] name failslab, interval 1, probability 0, space 0, times 0 [ 742.280148][T16587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.288873][T16662] CPU: 0 UID: 0 PID: 16662 Comm: syz.9.2376 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.288910][T16662] Tainted: [L]=SOFTLOCKUP [ 742.288918][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.288932][T16662] Call Trace: [ 742.288941][T16662] [ 742.288950][T16662] dump_stack_lvl+0x189/0x250 [ 742.288978][T16662] ? __pfx____ratelimit+0x10/0x10 [ 742.289000][T16662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.289022][T16662] ? __pfx__printk+0x10/0x10 [ 742.289060][T16662] ? __pfx___might_resched+0x10/0x10 [ 742.289089][T16662] ? fs_reclaim_acquire+0x7d/0x100 [ 742.289115][T16662] should_fail_ex+0x414/0x560 [ 742.289147][T16662] should_failslab+0xa8/0x100 [ 742.289173][T16662] __kmalloc_noprof+0xdf/0x800 [ 742.289204][T16662] ? tomoyo_encode+0x28b/0x550 [ 742.289235][T16662] tomoyo_encode+0x28b/0x550 [ 742.289268][T16662] tomoyo_realpath_from_path+0x58d/0x5d0 [ 742.289306][T16662] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 742.289329][T16662] tomoyo_path_number_perm+0x1e8/0x5a0 [ 742.289354][T16662] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 742.289385][T16662] ? __ia32_sys_rt_sigreturn+0x743/0x860 [ 742.289444][T16662] ? __fget_files+0x2a/0x420 [ 742.289474][T16662] ? __fget_files+0x3a0/0x420 [ 742.289496][T16662] ? __fget_files+0x2a/0x420 [ 742.289524][T16662] security_file_ioctl+0xcb/0x2d0 [ 742.289560][T16662] __se_sys_ioctl+0x47/0x170 [ 742.289601][T16662] do_syscall_64+0xfa/0xf80 [ 742.289626][T16662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.289647][T16662] ? clear_bhb_loop+0x60/0xb0 [ 742.289673][T16662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.289694][T16662] RIP: 0033:0x7febef18f749 [ 742.289714][T16662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.289732][T16662] RSP: 002b:00007febf0060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.289755][T16662] RAX: ffffffffffffffda RBX: 00007febef3e5fa0 RCX: 00007febef18f749 [ 742.289771][T16662] RDX: 00002000000000c0 RSI: 0000000000005403 RDI: 0000000000000005 [ 742.289785][T16662] RBP: 00007febf0060090 R08: 0000000000000000 R09: 0000000000000000 [ 742.289798][T16662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 742.289811][T16662] R13: 00007febef3e6038 R14: 00007febef3e5fa0 R15: 00007ffe96d2c2b8 [ 742.289846][T16662] [ 742.291319][T16662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 742.300828][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.635436][T16587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.657481][T16673] binder: BINDER_SET_CONTEXT_MGR already set [ 742.658901][T16587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.670569][T16587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.697618][T16673] binder: 16671:16673 ioctl 4018620d 2000000000c0 returned -16 [ 742.711542][T16673] binder: BINDER_SET_CONTEXT_MGR already set [ 742.723842][T16673] binder: 16671:16673 ioctl 4018620d 200000000040 returned -16 [ 742.731928][T16587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.740241][T16673] binder: 16671:16673 ioctl c0306201 200000000240 returned -11 [ 742.752176][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 742.839165][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2379'. [ 742.889822][T16587] hsr_slave_0: entered promiscuous mode [ 742.902017][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 742.910625][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.916196][T16587] hsr_slave_1: entered promiscuous mode [ 742.939304][ T5930] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 742.953116][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.953536][T16587] debugfs: 'hsr0' already exists in 'hsr' [ 742.968587][ T5930] usb 5-1: Product: syz [ 742.973579][ T5930] usb 5-1: Manufacturer: syz [ 742.978374][ T5930] usb 5-1: SerialNumber: syz [ 742.985942][T16587] Cannot create hsr debugfs directory [ 742.997585][ T5930] usb 5-1: config 0 descriptor?? [ 743.017398][ T5930] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 743.025428][ T5930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 743.035302][ T5930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 743.049075][ T5930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 743.059679][ T5930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 743.069837][ T5930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 743.077964][ T5930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 743.111342][ T5930] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 743.122198][ T5836] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 743.132690][ T5930] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 743.272716][ T5836] usb 10-1: Using ep0 maxpacket: 32 [ 743.283711][ T5836] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 743.293598][ T5836] usb 10-1: config 0 has no interface number 0 [ 743.299876][ T5836] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 743.327124][ T5836] usb 10-1: config 0 interface 85 has no altsetting 0 [ 743.349125][ T5836] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 743.358879][ T5836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.370731][ T5836] usb 10-1: Product: syz [ 743.386089][ T5836] usb 10-1: Manufacturer: syz [ 743.396813][ T5836] usb 10-1: SerialNumber: syz [ 743.429116][ T5836] usb 10-1: config 0 descriptor?? [ 743.617520][T16685] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 743.624214][T16685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 743.666281][T16685] vhci_hcd vhci_hcd.0: Device attached [ 743.850055][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 743.850077][ T30] audit: type=1326 audit(1766218432.947:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 743.853375][T13809] usb 5-1: USB disconnect, device number 2 [ 743.872295][ T30] audit: type=1326 audit(1766218432.957:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 743.928037][T13809] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 743.937813][ T5948] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 743.959023][T13809] keyspan 5-1:0.0: device disconnected [ 743.996983][ T30] audit: type=1326 audit(1766218432.957:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.034209][ T5838] Bluetooth: hci3: command tx timeout [ 744.046288][ T30] audit: type=1326 audit(1766218432.957:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.069815][ T30] audit: type=1326 audit(1766218432.957:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.094562][ T30] audit: type=1326 audit(1766218432.957:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.125103][ T5836] appletouch 10-1:0.85: Geyser mode initialized. [ 744.153216][ T5836] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input120 [ 744.180783][ T30] audit: type=1326 audit(1766218432.957:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.243860][ T30] audit: type=1326 audit(1766218432.957:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.289658][ T30] audit: type=1326 audit(1766218432.957:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.332053][ T30] audit: type=1326 audit(1766218432.957:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16666 comm="syz.4.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8a78f749 code=0x7fc00000 [ 744.377096][ T5836] usb 10-1: USB disconnect, device number 67 [ 744.436283][ T5836] appletouch 10-1:0.85: input: appletouch disconnected [ 744.564588][T16587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 744.590628][T16587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 744.606870][T16587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 744.641023][T16587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 744.824078][T16587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.864854][T16587] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.884826][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.892191][ T6476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.919203][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.926612][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.998031][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 745.010319][T16713] netlink: 'syz.4.2383': attribute type 9 has an invalid length. [ 745.019908][T16713] netlink: 'syz.4.2383': attribute type 11 has an invalid length. [ 745.033120][T16713] netlink: 'syz.4.2383': attribute type 12 has an invalid length. [ 745.046469][T16587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 745.069183][T16713] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2383'. [ 745.082756][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 745.164991][T16718] binder: BINDER_SET_CONTEXT_MGR already set [ 745.171083][T16718] binder: 16717:16718 ioctl 4018620d 200000000100 returned -16 [ 745.201231][T16718] binder: BINDER_SET_CONTEXT_MGR already set [ 745.216874][T16718] binder: 16717:16718 ioctl 4018620d 2000000002c0 returned -16 [ 745.236556][T16721] netlink: 'syz.4.2385': attribute type 21 has an invalid length. [ 745.439995][T16587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.512527][T13809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 745.513364][T16587] veth0_vlan: entered promiscuous mode [ 745.546163][T16587] veth1_vlan: entered promiscuous mode [ 745.599054][T16587] veth0_macvtap: entered promiscuous mode [ 745.618603][T16587] veth1_macvtap: entered promiscuous mode [ 745.624565][ T5930] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 745.658455][T16587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.672075][T13809] usb 5-1: Using ep0 maxpacket: 8 [ 745.679488][T13809] usb 5-1: config 218 has too many interfaces: 244, using maximum allowed: 32 [ 745.691748][T16587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.702145][T13809] usb 5-1: config 218 has 1 interface, different from the descriptor's value: 244 [ 745.722223][T13809] usb 5-1: config 218 has no interface number 0 [ 745.732504][ T7150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.739376][T13809] usb 5-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 745.770585][ T7150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.773871][T13809] usb 5-1: config 218 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 745.783161][ T5930] usb 10-1: Using ep0 maxpacket: 16 [ 745.816421][ T7150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.826116][T13809] usb 5-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 745.839818][ T5930] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.840696][ T9265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.863975][ T5930] usb 10-1: config 0 interface 0 has no altsetting 0 [ 745.875362][ T5930] usb 10-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00 [ 745.877207][T13809] usb 5-1: config 218 interface 95 has no altsetting 0 [ 745.897348][T13809] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 745.902398][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.907866][T13809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.926924][T13809] usb 5-1: Product: syz [ 745.931152][T13809] usb 5-1: Manufacturer: syz [ 745.958183][ T5930] usb 10-1: config 0 descriptor?? [ 745.978390][T13809] usb 5-1: SerialNumber: syz [ 746.048044][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.069958][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.082301][ T5838] Bluetooth: hci3: command tx timeout [ 746.123070][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.130994][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.233988][T16721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.243632][T16721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.283924][T13809] usbtouchscreen 5-1:218.95: probe with driver usbtouchscreen failed with error -71 [ 746.338653][T13809] usb 5-1: USB disconnect, device number 3 [ 746.401437][T16728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.415029][T16728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.438505][T16728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.453950][T16728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.626172][T16686] vhci_hcd: connection reset by peer [ 746.651256][ T6059] vhci_hcd vhci_hcd.6: stop threads [ 746.670062][ T6059] vhci_hcd vhci_hcd.6: release socket [ 746.688796][ T5930] usbhid 10-1:0.0: can't add hid device: -71 [ 746.698916][ T6059] vhci_hcd vhci_hcd.6: disconnect device [ 746.711070][ T5930] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 746.744908][T16751] binder: BINDER_SET_CONTEXT_MGR already set [ 746.751764][ T5930] usb 10-1: USB disconnect, device number 68 [ 746.777462][T16751] binder: 16750:16751 ioctl 4018620d 200000000100 returned -16 [ 746.828814][T16751] binder: 16750:16751 ioctl 4008af03 2000000008c0 returned -22 [ 746.841723][T16754] tipc: Started in network mode [ 746.844035][T16751] binder: BINDER_SET_CONTEXT_MGR already set [ 746.848087][T16754] tipc: Node identity 40400000000000000000000000000001, cluster identity 4711 [ 746.863142][T16751] binder: 16750:16751 ioctl 4018620d 2000000002c0 returned -16 [ 746.888297][T16754] tipc: Enabling of bearer rejected, failed to enable media [ 747.009123][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801dfcc400: rx timeout, send abort [ 747.492064][T13809] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 747.517666][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88801dfcc400: abort rx timeout. Force session deactivation [ 747.571218][ T5930] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 747.642033][T13809] usb 3-1: device descriptor read/64, error -71 [ 747.732955][ T5930] usb 10-1: Using ep0 maxpacket: 8 [ 747.740136][ T5930] usb 10-1: config 0 has an invalid interface number: 244 but max is 0 [ 747.751490][ T5930] usb 10-1: config 0 has no interface number 0 [ 747.774997][ T5930] usb 10-1: config 0 interface 244 has no altsetting 0 [ 747.794978][ T5930] usb 10-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 747.810764][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.819281][ T5930] usb 10-1: Product: syz [ 747.833457][ T5930] usb 10-1: Manufacturer: syz [ 747.838246][ T5930] usb 10-1: SerialNumber: syz [ 747.877369][ T5930] usb 10-1: config 0 descriptor?? [ 747.892949][T13809] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 747.930764][T16789] FAULT_INJECTION: forcing a failure. [ 747.930764][T16789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.944604][T16789] CPU: 0 UID: 0 PID: 16789 Comm: syz.4.2394 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.944640][T16789] Tainted: [L]=SOFTLOCKUP [ 747.944649][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.944663][T16789] Call Trace: [ 747.944672][T16789] [ 747.944682][T16789] dump_stack_lvl+0x189/0x250 [ 747.944713][T16789] ? __pfx____ratelimit+0x10/0x10 [ 747.944736][T16789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.944758][T16789] ? __pfx__printk+0x10/0x10 [ 747.944790][T16789] ? __might_fault+0xb0/0x130 [ 747.944830][T16789] should_fail_ex+0x414/0x560 [ 747.944861][T16789] _copy_from_iter+0x1cd/0x1630 [ 747.944901][T16789] ? __pfx__copy_from_iter+0x10/0x10 [ 747.944925][T16789] ? sock_alloc_send_pskb+0x86b/0x980 [ 747.944970][T16789] ? __pfx__copy_from_iter+0x10/0x10 [ 747.945000][T16789] ? page_copy_sane+0x16a/0x280 [ 747.945036][T16789] copy_page_from_iter+0xdd/0x170 [ 747.945068][T16789] skb_copy_datagram_from_iter+0x306/0x720 [ 747.945110][T16789] tun_get_user+0x1683/0x3dc0 [ 747.945143][T16789] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 747.945171][T16789] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 747.945193][T16789] ? aa_file_perm+0x44c/0x1530 [ 747.945220][T16789] ? __pfx_tun_get_user+0x10/0x10 [ 747.945249][T16789] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 747.945278][T16789] ? kstrtoull+0x12f/0x1d0 [ 747.945311][T16789] ? ref_tracker_alloc+0x318/0x460 [ 747.945335][T16789] ? tun_get+0x157/0x2f0 [ 747.945353][T16789] ? tun_chr_write_iter+0x60/0x210 [ 747.945372][T16789] ? ksys_write+0x145/0x250 [ 747.945415][T16789] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 747.945446][T16789] ? tun_get+0x1c/0x2f0 [ 747.945472][T16789] ? tun_get+0x1c/0x2f0 [ 747.945492][T16789] ? tun_get+0x1c/0x2f0 [ 747.945516][T16789] tun_chr_write_iter+0x113/0x210 [ 747.945541][T16789] vfs_write+0x5c9/0xb30 [ 747.945576][T16789] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 747.945598][T16789] ? __pfx_vfs_write+0x10/0x10 [ 747.945638][T16789] ? __fget_files+0x2a/0x420 [ 747.945672][T16789] ksys_write+0x145/0x250 [ 747.945704][T16789] ? __pfx_ksys_write+0x10/0x10 [ 747.945738][T16789] ? do_syscall_64+0xbe/0xf80 [ 747.945766][T16789] do_syscall_64+0xfa/0xf80 [ 747.945790][T16789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.945812][T16789] ? clear_bhb_loop+0x60/0xb0 [ 747.945838][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.945859][T16789] RIP: 0033:0x7fbf8a78f749 [ 747.945879][T16789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.945899][T16789] RSP: 002b:00007fbf8b6b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.945922][T16789] RAX: ffffffffffffffda RBX: 00007fbf8a9e5fa0 RCX: 00007fbf8a78f749 [ 747.945937][T16789] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 747.945951][T16789] RBP: 00007fbf8b6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 747.945964][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.945977][T16789] R13: 00007fbf8a9e6038 R14: 00007fbf8a9e5fa0 R15: 00007ffd390300b8 [ 747.946020][T16789] [ 748.129846][T13809] usb 3-1: device descriptor read/64, error -71 [ 748.220227][ T5930] radioshark 10-1:0.244: Invalid radioSHARK device [ 748.220260][ T5930] radioshark 10-1:0.244: probe with driver radioshark failed with error -22 [ 748.220600][ T5930] usbhid 10-1:0.244: couldn't find an input interrupt endpoint [ 748.229745][ T5930] usb 10-1: USB disconnect, device number 69 [ 748.458168][T13809] usb usb3-port1: attempt power cycle [ 748.812605][T13809] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 748.833431][T13809] usb 3-1: device descriptor read/8, error -71 [ 749.032148][ T5948] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 749.074780][T13809] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 749.133562][T13809] usb 3-1: device descriptor read/8, error -71 [ 749.276224][T13809] usb usb3-port1: unable to enumerate USB device [ 749.592488][T16824] sctp: [Deprecated]: syz.9.2399 (pid 16824) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.592488][T16824] Use struct sctp_sack_info instead [ 749.892002][ T5930] usb 10-1: new low-speed USB device number 70 using dummy_hcd [ 750.052026][ T5930] usb 10-1: Invalid ep0 maxpacket: 32 [ 750.202232][ T5930] usb 10-1: new low-speed USB device number 71 using dummy_hcd [ 750.339367][T16843] netlink: 'syz.2.2401': attribute type 10 has an invalid length. [ 750.359501][T16843] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.372175][ T5930] usb 10-1: Invalid ep0 maxpacket: 32 [ 750.378923][T16843] bond0: (slave team0): Enslaving as an active interface with an up link [ 750.389483][ T5930] usb usb10-port1: attempt power cycle [ 750.536349][T16850] x_tables: unsorted underflow at hook 1 [ 750.660053][T16860] FAULT_INJECTION: forcing a failure. [ 750.660053][T16860] name failslab, interval 1, probability 0, space 0, times 0 [ 750.682691][T16860] CPU: 0 UID: 0 PID: 16860 Comm: syz.2.2407 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.682727][T16860] Tainted: [L]=SOFTLOCKUP [ 750.682735][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 750.682749][T16860] Call Trace: [ 750.682758][T16860] [ 750.682768][T16860] dump_stack_lvl+0x189/0x250 [ 750.682795][T16860] ? __pfx____ratelimit+0x10/0x10 [ 750.682817][T16860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.682839][T16860] ? __pfx__printk+0x10/0x10 [ 750.682874][T16860] ? __pfx___might_resched+0x10/0x10 [ 750.682907][T16860] ? fs_reclaim_acquire+0x7d/0x100 [ 750.682932][T16860] should_fail_ex+0x414/0x560 [ 750.682963][T16860] should_failslab+0xa8/0x100 [ 750.682989][T16860] __kmalloc_node_noprof+0xe7/0x820 [ 750.683021][T16860] ? crypto_create_tfm_node+0x83/0x3f0 [ 750.683051][T16860] crypto_create_tfm_node+0x83/0x3f0 [ 750.683080][T16860] crypto_ahash_init_tfm+0x162/0x770 [ 750.683111][T16860] crypto_create_tfm_node+0x18c/0x3f0 [ 750.683139][T16860] crypto_alloc_tfm_node+0x172/0x3f0 [ 750.683165][T16860] ? ah_init_state+0x117/0x650 [ 750.683191][T16860] ah_init_state+0x140/0x650 [ 750.683218][T16860] __xfrm_init_state+0xac9/0x1460 [ 750.683238][T16860] ? __xfrm_init_state+0x842/0x1460 [ 750.683264][T16860] xfrm_add_sa+0x3057/0x4220 [ 750.683306][T16860] ? __pfx_xfrm_add_sa+0x10/0x10 [ 750.683335][T16860] ? apparmor_capable+0x137/0x1a0 [ 750.683371][T16860] ? __nla_parse+0x40/0x60 [ 750.683404][T16860] xfrm_user_rcv_msg+0x7a3/0xab0 [ 750.683443][T16860] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 750.683514][T16860] ? __pfx___mutex_trylock_common+0x10/0x10 [ 750.683543][T16860] ? rcu_is_watching+0x15/0xb0 [ 750.683566][T16860] ? trace_contention_end+0x39/0x100 [ 750.683597][T16860] ? __mutex_lock+0x335/0x1350 [ 750.683630][T16860] netlink_rcv_skb+0x208/0x470 [ 750.683659][T16860] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 750.683693][T16860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 750.683746][T16860] ? netlink_deliver_tap+0x2e/0x1b0 [ 750.683772][T16860] ? netlink_deliver_tap+0x2e/0x1b0 [ 750.683801][T16860] xfrm_netlink_rcv+0x79/0x90 [ 750.683833][T16860] netlink_unicast+0x82f/0x9e0 [ 750.683867][T16860] ? __pfx_netlink_unicast+0x10/0x10 [ 750.683893][T16860] ? netlink_sendmsg+0x642/0xb30 [ 750.683918][T16860] ? skb_put+0x11b/0x210 [ 750.683944][T16860] netlink_sendmsg+0x805/0xb30 [ 750.683969][T16860] ? aa_sk_perm+0x15f/0x920 [ 750.684000][T16860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.684030][T16860] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 750.684067][T16860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.684092][T16860] sock_sendmsg_nosec+0x18f/0x1d0 [ 750.684126][T16860] ____sys_sendmsg+0x577/0x880 [ 750.684160][T16860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 750.684196][T16860] ? import_iovec+0x74/0xa0 [ 750.684229][T16860] ___sys_sendmsg+0x21f/0x2a0 [ 750.684257][T16860] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.684289][T16860] ? rcu_read_lock_any_held+0xb3/0x120 [ 750.684343][T16860] ? __fget_files+0x2a/0x420 [ 750.684366][T16860] ? __fget_files+0x3a0/0x420 [ 750.684401][T16860] __x64_sys_sendmsg+0x19b/0x260 [ 750.684429][T16860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 750.684465][T16860] ? __pfx_ksys_write+0x10/0x10 [ 750.684499][T16860] ? do_syscall_64+0xbe/0xf80 [ 750.684527][T16860] do_syscall_64+0xfa/0xf80 [ 750.684552][T16860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.684573][T16860] ? clear_bhb_loop+0x60/0xb0 [ 750.684605][T16860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.684627][T16860] RIP: 0033:0x7f4afc58f749 [ 750.684646][T16860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.684665][T16860] RSP: 002b:00007f4afd4cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.684687][T16860] RAX: ffffffffffffffda RBX: 00007f4afc7e5fa0 RCX: 00007f4afc58f749 [ 750.684703][T16860] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 750.684717][T16860] RBP: 00007f4afd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 750.684730][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.684743][T16860] R13: 00007f4afc7e6038 R14: 00007f4afc7e5fa0 R15: 00007ffed2ae2ce8 [ 750.684779][T16860] [ 751.122702][T16863] binder: BINDER_SET_CONTEXT_MGR already set [ 751.128876][T16863] binder: 16862:16863 ioctl 4018620d 200000000100 returned -16 [ 751.140247][T16863] binder: BINDER_SET_CONTEXT_MGR already set [ 751.146377][T16863] binder: 16862:16863 ioctl 4018620d 2000000002c0 returned -16 [ 751.177123][ T5930] usb 10-1: new low-speed USB device number 72 using dummy_hcd [ 751.204033][ T5930] usb 10-1: Invalid ep0 maxpacket: 32 [ 751.332130][ T5930] usb 10-1: new low-speed USB device number 73 using dummy_hcd [ 751.352763][ T5930] usb 10-1: Invalid ep0 maxpacket: 32 [ 751.358774][ T5930] usb usb10-port1: unable to enumerate USB device [ 751.796334][T16882] fuse: Unknown parameter 'd0x0000000000000003' [ 752.215438][T16904] binder: BINDER_SET_CONTEXT_MGR already set [ 752.221621][T16904] binder: 16903:16904 ioctl 4018620d 200000000100 returned -16 [ 752.232835][T16904] binder: BINDER_SET_CONTEXT_MGR already set [ 752.238881][T16904] binder: 16903:16904 ioctl 4018620d 2000000002c0 returned -16 [ 752.392322][ T44] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 752.552181][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 752.576047][ T44] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 752.603578][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.620220][ T44] usb 3-1: Product: syz [ 752.626391][ T44] usb 3-1: Manufacturer: syz [ 752.631049][ T44] usb 3-1: SerialNumber: syz [ 752.643817][ T44] usb 3-1: config 0 descriptor?? [ 752.728293][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.736643][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.911949][T14451] usb 10-1: new low-speed USB device number 74 using dummy_hcd [ 752.988005][ T44] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 752.997965][ T44] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 753.014177][ T44] usb 3-1: USB disconnect, device number 41 [ 753.096699][T14451] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 753.122296][T14451] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 753.154880][T14451] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 12292, setting to 8 [ 753.166424][T14451] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 753.187701][T14451] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 753.207100][T14451] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.229762][T14451] usb 10-1: config 0 descriptor?? [ 753.245702][T16917] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 753.372003][ T5930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 753.493069][ T847] usb 10-1: USB disconnect, device number 74 [ 753.535783][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.566816][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.612364][ T5930] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1808, setting to 1024 [ 753.654693][ T5930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 753.692431][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.700508][ T5930] usb 5-1: Product: syz [ 753.723018][ T5930] usb 5-1: Manufacturer: syz [ 753.742425][ T5930] usb 5-1: SerialNumber: syz [ 753.771312][T16929] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 753.920025][T16953] kvm: pic: non byte write [ 754.009719][ T5930] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 754.031624][ T5930] cdc_ncm 5-1:1.0: bind() failure [ 754.069754][ T5930] usb 5-1: USB disconnect, device number 4 [ 754.219829][T16969] overlayfs: missing 'lowerdir' [ 754.622065][ T847] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 754.782065][ T847] usb 3-1: Using ep0 maxpacket: 16 [ 754.793939][ T847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.823817][ T847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 754.834293][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 754.840831][ T847] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 754.894614][ T847] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 754.923946][ T847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.947964][ T847] usb 3-1: config 0 descriptor?? [ 755.042105][ T5930] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 755.205150][ T5930] usb 10-1: Using ep0 maxpacket: 16 [ 755.214280][ T5930] usb 10-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 755.233394][ T5930] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 755.245869][ T5930] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 755.256054][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.264920][ T5930] usb 10-1: Product: syz [ 755.269377][ T5930] usb 10-1: Manufacturer: syz [ 755.274793][ T5930] usb 10-1: SerialNumber: syz [ 755.396275][ T847] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0053/input/input122 [ 755.512347][ T847] appleir 0003:05AC:8241.0053: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 755.563079][T16994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.586348][T16994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.616671][ T847] usb 3-1: USB disconnect, device number 42 [ 755.659619][ T5930] usb 10-1: USB disconnect, device number 75 [ 755.687316][T17016] fido_id[17016]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 756.255632][T17036] binder: BINDER_SET_CONTEXT_MGR already set [ 756.262193][T17036] binder: 17034:17036 ioctl 4018620d 200000000100 returned -16 [ 756.278849][T17036] binder: BINDER_SET_CONTEXT_MGR already set [ 756.285157][T17036] binder: 17034:17036 ioctl 4018620d 2000000002c0 returned -16 [ 756.607376][T17042] binder: 17041:17042 ioctl 40046205 0 returned -22 [ 757.025860][ T5930] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 757.182325][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 757.190768][ T5930] usb 3-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 757.213411][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 757.226315][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 757.241150][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 240, changing to 11 [ 757.255537][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 49986, setting to 1024 [ 757.268174][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.287683][ T5930] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 757.299845][ T5930] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 757.322115][ T5930] usb 3-1: Manufacturer: syz [ 757.339666][ T5930] usb 3-1: config 0 descriptor?? [ 757.394929][ T847] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 757.559851][ T847] usb 5-1: device descriptor read/64, error -71 [ 757.812099][ T847] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 757.953739][ T847] usb 5-1: device descriptor read/64, error -71 [ 758.082503][ T847] usb usb5-port1: attempt power cycle [ 758.194574][ T5930] rc_core: IR keymap rc-hauppauge not found [ 758.200593][ T5930] Registered IR keymap rc-empty [ 758.206238][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.233217][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.253855][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 758.268081][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input123 [ 758.292475][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.312421][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.323660][ T6013] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 758.335043][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.362560][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.382329][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.402570][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.422324][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.432097][ T847] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 758.442931][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.452960][ T847] usb 5-1: device descriptor read/8, error -71 [ 758.462367][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.487310][ T5930] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 758.498008][ T6013] usb 10-1: Using ep0 maxpacket: 16 [ 758.506370][ T6013] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.517680][ T6013] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.529872][ T5930] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 758.538055][ T6013] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 758.552316][ T5930] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 758.562753][ T6013] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 758.581507][ T6013] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.591479][ T5930] usb 3-1: USB disconnect, device number 43 [ 758.625344][ T6013] usb 10-1: config 0 descriptor?? [ 758.702046][ T847] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 758.722870][ T847] usb 5-1: device descriptor read/8, error -71 [ 758.832625][ T847] usb usb5-port1: unable to enumerate USB device [ 758.942076][ T5930] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 759.059718][ T6013] input: HID 05ac:8241 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.0054/input/input124 [ 759.094102][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 759.105614][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 759.118921][ T5930] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 759.130785][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.153962][ T5930] usb 3-1: config 0 descriptor?? [ 759.171930][ T6013] appleir 0003:05AC:8241.0054: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.9-1/input0 [ 759.189131][T17099] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 759.258531][ T6013] usb 10-1: USB disconnect, device number 76 [ 759.284465][T17102] fido_id[17102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:05AC:8241.0054/report_descriptor': No such device [ 759.420760][T17099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.429836][T17099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.439984][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 759.447045][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 759.470616][ T5930] usb 3-1: USB disconnect, device number 44 [ 759.892115][ T847] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 760.042171][ T847] usb 3-1: Using ep0 maxpacket: 32 [ 760.051489][ T847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 760.062859][ T847] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 760.076092][ T847] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 760.085428][ T847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.097763][ T847] usb 3-1: config 0 descriptor?? [ 760.107150][ T847] hub 3-1:0.0: bad descriptor, ignoring hub [ 760.113971][ T847] hub 3-1:0.0: probe with driver hub failed with error -5 [ 760.510957][ T847] hid_parser_main: 8 callbacks suppressed [ 760.511012][ T847] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 760.526657][ T847] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 760.534502][ T847] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 760.542725][ T847] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 760.550856][ T847] hid-multitouch 0003:0EEF:72C4.0055: unknown main item tag 0x0 [ 760.561654][ T847] hid-multitouch 0003:0EEF:72C4.0055: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 760.763557][T17104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.776459][T17104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.197178][T17110] binder: BINDER_SET_CONTEXT_MGR already set [ 761.242364][T17110] binder: 17108:17110 ioctl 4018620d 200000000100 returned -16 [ 761.260440][T17110] binder: BINDER_SET_CONTEXT_MGR already set [ 761.271488][T17110] binder: 17108:17110 ioctl 4018620d 2000000002c0 returned -16 [ 761.432096][ T44] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 761.512013][T13809] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 761.584468][ T44] usb 5-1: config 4 has an invalid interface number: 64 but max is 0 [ 761.594563][ T44] usb 5-1: config 4 has no interface number 0 [ 761.604523][ T44] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 761.614463][ T5910] usb 3-1: USB disconnect, device number 45 [ 761.621955][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.633425][ T44] usb 5-1: Product: syz [ 761.640637][ T44] usb 5-1: Manufacturer: syz [ 761.648234][ T44] usb 5-1: SerialNumber: syz [ 761.677011][T13809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.691175][T13809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.702173][T13809] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 761.711361][T13809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.728016][T13809] usb 10-1: config 0 descriptor?? [ 761.869672][ T5910] usb 5-1: USB disconnect, device number 9 [ 762.173782][T13809] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 762.191692][T13809] cp2112 0003:10C4:EA90.0056: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0 [ 762.360639][T13809] cp2112 0003:10C4:EA90.0056: Part Number: 0x82 Device Version: 0xFE [ 762.457546][T17128] autofs: Unknown parameter 'vd' [ 762.532159][ T5910] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 762.562865][T13809] cp2112 0003:10C4:EA90.0056: error requesting SMBus config [ 762.578721][T13809] cp2112 0003:10C4:EA90.0056: probe with driver cp2112 failed with error -32 [ 762.694445][ T5910] usb 3-1: not running at top speed; connect to a high speed hub [ 762.704027][ T5910] usb 3-1: config 1 interface 0 has no altsetting 0 [ 762.713797][ T5910] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.40 [ 762.724963][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.742249][ T5910] usb 3-1: Product: 䝇쎢孫ꂔ邓セ䊽鶆ᮯ霜垄뢻杴ࢊ扳驭荙曧ኪ挈Ҋ䁐佼䞱䒎㓞⸾ⷨ磨ﵶ钒⮦푰ᕫ៏߁廬齛闤琏㠲왁쐉鈮ꊼ존)㶣嬁쪺뻇䬦눟࣋ሆ綌և뱣矅譮슯⍺聯㕀兪㰑꛵齧Ꞙᇶ雄㓤ꌀ孂靨蛻暺䅧豊拙㯑랝敹१彨䊖憥 [ 762.792150][ T5910] usb 3-1: Manufacturer: Щ [ 762.799091][ T5910] usb 3-1: SerialNumber: ᠉ [ 762.898895][T17139] netlink: 42496 bytes leftover after parsing attributes in process `syz.4.2458'. [ 763.000724][T17142] FAULT_INJECTION: forcing a failure. [ 763.000724][T17142] name failslab, interval 1, probability 0, space 0, times 0 [ 763.014699][T17142] CPU: 1 UID: 0 PID: 17142 Comm: syz.6.2459 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.014740][T17142] Tainted: [L]=SOFTLOCKUP [ 763.014748][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 763.014761][T17142] Call Trace: [ 763.014771][T17142] [ 763.014789][T17142] dump_stack_lvl+0x189/0x250 [ 763.014818][T17142] ? __pfx____ratelimit+0x10/0x10 [ 763.014844][T17142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.014865][T17142] ? __pfx__printk+0x10/0x10 [ 763.014903][T17142] ? __pfx___might_resched+0x10/0x10 [ 763.014938][T17142] should_fail_ex+0x414/0x560 [ 763.014967][T17142] should_failslab+0xa8/0x100 [ 763.014994][T17142] __kmalloc_noprof+0xdf/0x800 [ 763.015026][T17142] ? security_inode_init_security+0xfc/0x3d0 [ 763.015052][T17142] ? __pfx___get_acl+0x10/0x10 [ 763.015076][T17142] security_inode_init_security+0xfc/0x3d0 [ 763.015103][T17142] ? __pfx_shmem_initxattrs+0x10/0x10 [ 763.015127][T17142] ? __pfx_security_inode_init_security+0x10/0x10 [ 763.015154][T17142] ? set_cached_acl+0xd2/0x180 [ 763.015184][T17142] ? simple_acl_create+0x184/0x1b0 [ 763.015211][T17142] shmem_mknod+0x1fe/0x360 [ 763.015228][T17142] ? bpf_lsm_inode_mknod+0x9/0x20 [ 763.015260][T17142] vfs_mknod+0x448/0x610 [ 763.015299][T17142] ovl_cleanup_and_whiteout+0x258/0x9e0 [ 763.015326][T17142] ? __d_lookup+0x6df/0x780 [ 763.015357][T17142] ? __pfx_ovl_cleanup_and_whiteout+0x10/0x10 [ 763.015389][T17142] ? d_lookup+0x80/0xa0 [ 763.015415][T17142] ? lookup_one_unlocked+0xea/0x210 [ 763.015443][T17142] ovl_do_remove+0x774/0xd50 [ 763.015466][T17142] ? vfs_unlink+0xed/0x6c0 [ 763.015492][T17142] ? __pfx_ovl_do_remove+0x10/0x10 [ 763.015520][T17142] ? down_write+0x162/0x1f0 [ 763.015546][T17142] ? __pfx_down_write+0x10/0x10 [ 763.015576][T17142] ? try_break_deleg+0x5b/0x180 [ 763.015607][T17142] vfs_unlink+0x272/0x6c0 [ 763.015635][T17142] do_unlinkat+0x3ac/0x5d0 [ 763.015661][T17142] ? __pfx_do_unlinkat+0x10/0x10 [ 763.015683][T17142] ? strncpy_from_user+0x150/0x2c0 [ 763.015713][T17142] ? getname_flags+0x1e5/0x540 [ 763.015740][T17142] __x64_sys_unlink+0x47/0x50 [ 763.015760][T17142] do_syscall_64+0xfa/0xf80 [ 763.015794][T17142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.015817][T17142] ? clear_bhb_loop+0x60/0xb0 [ 763.015844][T17142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.015866][T17142] RIP: 0033:0x7f1729b8f749 [ 763.015887][T17142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 763.015906][T17142] RSP: 002b:00007f172a991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 763.015929][T17142] RAX: ffffffffffffffda RBX: 00007f1729de5fa0 RCX: 00007f1729b8f749 [ 763.015945][T17142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 763.015959][T17142] RBP: 00007f172a991090 R08: 0000000000000000 R09: 0000000000000000 [ 763.015972][T17142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 763.015985][T17142] R13: 00007f1729de6038 R14: 00007f1729de5fa0 R15: 00007fff1bd44798 [ 763.016022][T17142] [ 763.388216][ T5910] usbhid 3-1:1.0: can't add hid device: -71 [ 763.398671][ T5910] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 763.415416][ T5910] usb 3-1: USB disconnect, device number 46 [ 764.302646][ T44] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 764.310530][ T5910] usb 10-1: USB disconnect, device number 77 [ 764.375801][T17169] FAULT_INJECTION: forcing a failure. [ 764.375801][T17169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 764.391451][T17169] CPU: 1 UID: 0 PID: 17169 Comm: syz.9.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.391476][T17169] Tainted: [L]=SOFTLOCKUP [ 764.391482][T17169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.391492][T17169] Call Trace: [ 764.391498][T17169] [ 764.391504][T17169] dump_stack_lvl+0x189/0x250 [ 764.391526][T17169] ? __pfx____ratelimit+0x10/0x10 [ 764.391542][T17169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 764.391557][T17169] ? __pfx__printk+0x10/0x10 [ 764.391582][T17169] ? fs_reclaim_acquire+0x7d/0x100 [ 764.391603][T17169] should_fail_ex+0x414/0x560 [ 764.391626][T17169] prepare_alloc_pages+0x22b/0x650 [ 764.391646][T17169] __alloc_frozen_pages_noprof+0x123/0x370 [ 764.391665][T17169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 764.391688][T17169] ? policy_nodemask+0x27c/0x720 [ 764.391709][T17169] alloc_pages_mpol+0x232/0x4a0 [ 764.391730][T17169] vma_alloc_folio_noprof+0xe4/0x200 [ 764.391749][T17169] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 764.391775][T17169] folio_prealloc+0x30/0x180 [ 764.391798][T17169] do_wp_page+0x1231/0x5750 [ 764.391869][T17169] ? __pfx_do_wp_page+0x10/0x10 [ 764.391892][T17169] ? do_raw_spin_lock+0x121/0x290 [ 764.391920][T17169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 764.391955][T17169] handle_mm_fault+0x14c5/0x32b0 [ 764.391981][T17169] ? __pte_offset_map_lock+0x13e/0x210 [ 764.392021][T17169] ? handle_mm_fault+0xdb/0x32b0 [ 764.392059][T17169] ? __pfx_handle_mm_fault+0x10/0x10 [ 764.392088][T17169] ? follow_page_pte+0xd03/0x13e0 [ 764.392125][T17169] ? __pfx_follow_page_pte+0x10/0x10 [ 764.392155][T17169] ? check_vma_flags+0x50d/0x580 [ 764.392188][T17169] __get_user_pages+0x1650/0x29f0 [ 764.392249][T17169] __gup_longterm_locked+0xde4/0x1660 [ 764.392289][T17169] ? sanity_check_pinned_pages+0x123a/0x1300 [ 764.392323][T17169] gup_fast_fallback+0x1d6b/0x22d0 [ 764.392391][T17169] ? __pfx_gup_fast_fallback+0x10/0x10 [ 764.392415][T17169] ? stack_trace_save+0x9c/0xe0 [ 764.392446][T17169] ? stack_depot_save_flags+0x40/0x850 [ 764.392480][T17169] ? pin_user_pages_fast+0x4d/0xb0 [ 764.392508][T17169] iov_iter_extract_pages+0x35f/0x5e0 [ 764.392548][T17169] extract_iter_to_sg+0xe46/0x24e0 [ 764.392591][T17169] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 764.392637][T17169] ? __asan_memset+0x22/0x50 [ 764.392669][T17169] af_alg_get_rsgl+0x436/0x810 [ 764.392724][T17169] aead_recvmsg+0x4d5/0x13b0 [ 764.392746][T17169] ? __lock_acquire+0x6b6/0x2cf0 [ 764.392799][T17169] ? __pfx_aead_recvmsg+0x10/0x10 [ 764.392821][T17169] ? __lock_acquire+0x6b6/0x2cf0 [ 764.392857][T17169] ? __pfx_aead_recvmsg+0x10/0x10 [ 764.392883][T17169] sock_recvmsg_nosec+0x186/0x1c0 [ 764.392917][T17169] ____sys_recvmsg+0x21e/0x4c0 [ 764.392953][T17169] ? __pfx_____sys_recvmsg+0x10/0x10 [ 764.392996][T17169] ? import_iovec+0x74/0xa0 [ 764.393028][T17169] ___sys_recvmsg+0x1b5/0x510 [ 764.393060][T17169] ? __pfx____sys_recvmsg+0x10/0x10 [ 764.393114][T17169] ? __fget_files+0x3a0/0x420 [ 764.393150][T17169] do_recvmmsg+0x307/0x770 [ 764.393185][T17169] ? __pfx_do_recvmmsg+0x10/0x10 [ 764.393226][T17169] ? _copy_from_user+0x94/0xb0 [ 764.393273][T17169] __x64_sys_recvmmsg+0x1af/0x240 [ 764.393303][T17169] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 764.393335][T17169] ? do_syscall_64+0xbe/0xf80 [ 764.393371][T17169] do_syscall_64+0xfa/0xf80 [ 764.393396][T17169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.393418][T17169] ? clear_bhb_loop+0x60/0xb0 [ 764.393444][T17169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.393465][T17169] RIP: 0033:0x7febef18f749 [ 764.393486][T17169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.393505][T17169] RSP: 002b:00007febf0060038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 764.393528][T17169] RAX: ffffffffffffffda RBX: 00007febef3e5fa0 RCX: 00007febef18f749 [ 764.393544][T17169] RDX: 0000000000000002 RSI: 00002000000008c0 RDI: 0000000000000004 [ 764.393558][T17169] RBP: 00007febf0060090 R08: 0000200000008000 R09: 0000000000000000 [ 764.393573][T17169] R10: 00000000000000cb R11: 0000000000000246 R12: 0000000000000002 [ 764.393586][T17169] R13: 00007febef3e6038 R14: 00007febef3e5fa0 R15: 00007ffe96d2c2b8 [ 764.393623][T17169] [ 764.905688][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.917573][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.931086][ T44] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 764.940637][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.955079][ T44] usb 3-1: config 0 descriptor?? [ 764.993511][T17173] FAULT_INJECTION: forcing a failure. [ 764.993511][T17173] name failslab, interval 1, probability 0, space 0, times 0 [ 765.006609][T17173] CPU: 0 UID: 0 PID: 17173 Comm: syz.4.2466 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.006641][T17173] Tainted: [L]=SOFTLOCKUP [ 765.006647][T17173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.006656][T17173] Call Trace: [ 765.006663][T17173] [ 765.006689][T17173] dump_stack_lvl+0x189/0x250 [ 765.006718][T17173] ? __pfx____ratelimit+0x10/0x10 [ 765.006740][T17173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.006762][T17173] ? __pfx__printk+0x10/0x10 [ 765.006795][T17173] ? __pfx_get_random_u32+0x10/0x10 [ 765.006823][T17173] should_fail_ex+0x414/0x560 [ 765.006866][T17173] should_failslab+0xa8/0x100 [ 765.006892][T17173] kmem_cache_alloc_noprof+0x88/0x710 [ 765.006921][T17173] ? sctp_get_port_local+0x6d0/0x1700 [ 765.006948][T17173] sctp_get_port_local+0x6d0/0x1700 [ 765.006973][T17173] ? __pfx_sctp_get_port_local+0x10/0x10 [ 765.007007][T17173] ? sctp_bind_addr_match+0x28b/0x2b0 [ 765.007043][T17173] sctp_do_bind+0x4ef/0x9d0 [ 765.007078][T17173] sctp_connect_new_asoc+0x25c/0x690 [ 765.007104][T17173] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 765.007119][T17173] ? __local_bh_enable_ip+0x12d/0x1c0 [ 765.007160][T17173] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 765.007181][T17173] ? security_sctp_bind_connect+0x7e/0x2e0 [ 765.007217][T17173] sctp_sendmsg+0x155c/0x2840 [ 765.007259][T17173] ? __pfx_sctp_sendmsg+0x10/0x10 [ 765.007288][T17173] ? __pfx_aa_sk_perm+0x10/0x10 [ 765.007317][T17173] ? sock_rps_record_flow+0x19/0x410 [ 765.007350][T17173] ? inet_sendmsg+0x2f4/0x370 [ 765.007380][T17173] sock_sendmsg_nosec+0x128/0x1d0 [ 765.007414][T17173] __sys_sendto+0x3ce/0x540 [ 765.007432][T17173] ? __pfx___sys_sendto+0x10/0x10 [ 765.007445][T17173] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 765.007495][T17173] ? __fget_files+0x3a0/0x420 [ 765.007531][T17173] ? ksys_write+0x22a/0x250 [ 765.007563][T17173] ? __pfx_ksys_write+0x10/0x10 [ 765.007594][T17173] __x64_sys_sendto+0xde/0x100 [ 765.007611][T17173] do_syscall_64+0xfa/0xf80 [ 765.007645][T17173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.007668][T17173] ? clear_bhb_loop+0x60/0xb0 [ 765.007693][T17173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.007713][T17173] RIP: 0033:0x7fbf8a78f749 [ 765.007736][T17173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.007750][T17173] RSP: 002b:00007fbf8b6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 765.007767][T17173] RAX: ffffffffffffffda RBX: 00007fbf8a9e5fa0 RCX: 00007fbf8a78f749 [ 765.007778][T17173] RDX: 000000000000ff04 RSI: 0000200000000100 RDI: 0000000000000004 [ 765.007805][T17173] RBP: 00007fbf8b6b7090 R08: 0000200000000280 R09: 0000000000000010 [ 765.007820][T17173] R10: 00000000000000c1 R11: 0000000000000246 R12: 0000000000000001 [ 765.007833][T17173] R13: 00007fbf8a9e6038 R14: 00007fbf8a9e5fa0 R15: 00007ffd390300b8 [ 765.007867][T17173] [ 765.367150][T17175] syzkaller1: entered promiscuous mode [ 765.373005][T17175] syzkaller1: entered allmulticast mode [ 765.383536][T17175] FAULT_INJECTION: forcing a failure. [ 765.383536][T17175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 765.397080][T17175] CPU: 0 UID: 0 PID: 17175 Comm: syz.4.2467 Tainted: G L syzkaller #0 PREEMPT(full) [ 765.397115][T17175] Tainted: [L]=SOFTLOCKUP [ 765.397121][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.397131][T17175] Call Trace: [ 765.397138][T17175] [ 765.397145][T17175] dump_stack_lvl+0x189/0x250 [ 765.397185][T17175] ? __pfx____ratelimit+0x10/0x10 [ 765.397207][T17175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 765.397228][T17175] ? __pfx__printk+0x10/0x10 [ 765.397259][T17175] ? __might_fault+0xb0/0x130 [ 765.397300][T17175] should_fail_ex+0x414/0x560 [ 765.397339][T17175] _copy_from_iter+0x1cd/0x1630 [ 765.397379][T17175] ? __pfx__copy_from_iter+0x10/0x10 [ 765.397421][T17175] tun_get_user+0x48b/0x3dc0 [ 765.397451][T17175] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 765.397469][T17175] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 765.397502][T17175] ? aa_file_perm+0x44c/0x1530 [ 765.397531][T17175] ? __pfx_tun_get_user+0x10/0x10 [ 765.397558][T17175] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 765.397593][T17175] ? kstrtoull+0x12f/0x1d0 [ 765.397615][T17175] ? ref_tracker_alloc+0x318/0x460 [ 765.397633][T17175] ? tun_get+0x157/0x2f0 [ 765.397665][T17175] ? tun_chr_write_iter+0x60/0x210 [ 765.397685][T17175] ? ksys_write+0x145/0x250 [ 765.397714][T17175] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 765.397748][T17175] ? tun_get+0x1c/0x2f0 [ 765.397767][T17175] ? tun_get+0x1c/0x2f0 [ 765.397781][T17175] ? tun_get+0x1c/0x2f0 [ 765.397815][T17175] tun_chr_write_iter+0x113/0x210 [ 765.397841][T17175] vfs_write+0x5c9/0xb30 [ 765.397875][T17175] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 765.397897][T17175] ? __pfx_vfs_write+0x10/0x10 [ 765.397932][T17175] ? __fget_files+0x2a/0x420 [ 765.397971][T17175] ksys_write+0x145/0x250 [ 765.398005][T17175] ? __pfx_ksys_write+0x10/0x10 [ 765.398038][T17175] ? do_syscall_64+0xbe/0xf80 [ 765.398066][T17175] do_syscall_64+0xfa/0xf80 [ 765.398084][T17175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.398099][T17175] ? clear_bhb_loop+0x60/0xb0 [ 765.398134][T17175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.398157][T17175] RIP: 0033:0x7fbf8a78f749 [ 765.398177][T17175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.398195][T17175] RSP: 002b:00007fbf8b6b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.398219][T17175] RAX: ffffffffffffffda RBX: 00007fbf8a9e5fa0 RCX: 00007fbf8a78f749 [ 765.398231][T17175] RDX: 000000000000fdef RSI: 0000200000001800 RDI: 0000000000000003 [ 765.398241][T17175] RBP: 00007fbf8b6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 765.398250][T17175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.398259][T17175] R13: 00007fbf8a9e6038 R14: 00007fbf8a9e5fa0 R15: 00007ffd390300b8 [ 765.398315][T17175] [ 765.698470][ T44] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 765.712243][ T44] cp2112 0003:10C4:EA90.0057: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 765.880196][ T44] cp2112 0003:10C4:EA90.0057: error requesting version [ 765.889800][ T44] cp2112 0003:10C4:EA90.0057: probe with driver cp2112 failed with error -32 [ 765.951427][T17182] tmpfs: User quota block hardlimit too large. [ 766.072031][ T5836] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 766.224191][ T5836] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 766.232744][ T5836] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 766.247115][ T5836] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 766.260308][ T5836] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 766.271642][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7B, changing to 0xB [ 766.283524][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB is Bulk; changing to Interrupt [ 766.293715][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 766.303527][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 766.320133][ T5836] usb 5-1: string descriptor 0 read error: -22 [ 766.327168][ T5836] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 766.336556][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.349900][ T5836] usb 5-1: config 0 descriptor?? [ 766.375465][ T5836] hub 5-1:0.0: bad descriptor, ignoring hub [ 766.382068][ T5836] hub 5-1:0.0: probe with driver hub failed with error -5 [ 766.592537][T17180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.616987][T17180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.630362][T17180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 766.640558][T17180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 766.762324][T14451] usb 5-1: USB disconnect, device number 10 [ 767.550217][T17226] loop6: detected capacity change from 0 to 524287999 [ 767.675975][ T5930] usb 3-1: USB disconnect, device number 47 [ 767.835350][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2475'. [ 768.043372][T17237] team0: Port device team_slave_0 removed [ 768.171123][T17246] binder: BINDER_SET_CONTEXT_MGR already set [ 768.180669][T17246] binder: 17245:17246 ioctl 4018620d 200000000100 returned -16 [ 768.202389][T17246] binder: BINDER_SET_CONTEXT_MGR already set [ 768.208573][T17246] binder: 17245:17246 ioctl 4018620d 200000004a80 returned -16 [ 769.028901][T17271] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2485'. [ 769.301983][ T5930] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 769.466208][ T5930] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.477279][ T5930] usb 10-1: config 0 has no interfaces? [ 769.490545][ T5930] usb 10-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 769.501414][ T5930] usb 10-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 769.511629][ T5930] usb 10-1: Manufacturer: syz [ 769.528483][ T5930] usb 10-1: SerialNumber: syz [ 769.543724][ T5930] usb 10-1: config 0 descriptor?? [ 769.764566][T17271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.797094][T17271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 769.815664][ T5930] usb 10-1: USB disconnect, device number 78 [ 770.162197][ T5930] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 770.322064][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 770.329394][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.344943][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.359855][ T5930] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 770.369422][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.388487][ T5930] usb 5-1: config 0 descriptor?? [ 770.491943][T16737] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 770.654129][T16737] usb 3-1: config index 0 descriptor too short (expected 7175, got 36) [ 770.662614][T16737] usb 3-1: config 192 has too many interfaces: 149, using maximum allowed: 32 [ 770.671545][T16737] usb 3-1: config 192 has an invalid descriptor of length 222, skipping remainder of the config [ 770.682144][T16737] usb 3-1: config 192 has 0 interfaces, different from the descriptor's value: 149 [ 770.691544][T16737] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 770.700888][T16737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.817446][ T5930] ft260 0003:0403:6030.0058: unknown main item tag 0x7 [ 770.930955][T17312] FAULT_INJECTION: forcing a failure. [ 770.930955][T17312] name failslab, interval 1, probability 0, space 0, times 0 [ 770.944130][T17312] CPU: 1 UID: 0 PID: 17312 Comm: syz.9.2498 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.944170][T17312] Tainted: [L]=SOFTLOCKUP [ 770.944179][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.944193][T17312] Call Trace: [ 770.944202][T17312] [ 770.944212][T17312] dump_stack_lvl+0x189/0x250 [ 770.944239][T17312] ? __pfx____ratelimit+0x10/0x10 [ 770.944263][T17312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 770.944286][T17312] ? __pfx__printk+0x10/0x10 [ 770.944325][T17312] ? __pfx___might_resched+0x10/0x10 [ 770.944354][T17312] ? fs_reclaim_acquire+0x7d/0x100 [ 770.944382][T17312] should_fail_ex+0x414/0x560 [ 770.944415][T17312] should_failslab+0xa8/0x100 [ 770.944440][T17312] kmem_cache_alloc_noprof+0x88/0x710 [ 770.944471][T17312] ? security_file_alloc+0x34/0x330 [ 770.944508][T17312] security_file_alloc+0x34/0x330 [ 770.944541][T17312] init_file+0x93/0x2f0 [ 770.944571][T17312] alloc_empty_file+0x6e/0x1d0 [ 770.944597][T17312] dentry_open+0x44/0xa0 [ 770.944621][T17312] ovl_dir_read+0x85/0x480 [ 770.944655][T17312] ? __pfx_ovl_dir_read+0x10/0x10 [ 770.944678][T17312] ? ovl_path_upper+0x105/0x170 [ 770.944704][T17312] ? ovl_path_next+0x23c/0x470 [ 770.944741][T17312] ovl_dir_read_merged+0x3bf/0x4b0 [ 770.944770][T17312] ? __pfx_ovl_dir_read_merged+0x10/0x10 [ 770.944798][T17312] ? __pfx_ovl_fill_merge+0x10/0x10 [ 770.944837][T17312] ? __kasan_kmalloc+0x93/0xb0 [ 770.944859][T17312] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 770.944890][T17312] ? ovl_iterate+0xdc7/0x2320 [ 770.944920][T17312] ovl_iterate+0xe8e/0x2320 [ 770.944969][T17312] ? __pfx_ovl_iterate+0x10/0x10 [ 770.944999][T17312] ? __lock_acquire+0x6b6/0x2cf0 [ 770.945078][T17312] ? wrap_directory_iterator+0x5a/0xe0 [ 770.945116][T17312] ? __up_read+0x25d/0x670 [ 770.945145][T17312] ? down_write+0x162/0x1f0 [ 770.945170][T17312] ? __pfx_down_write+0x10/0x10 [ 770.945197][T17312] ? wrap_directory_iterator+0x52/0xe0 [ 770.945228][T17312] ? __pfx_ovl_iterate+0x10/0x10 [ 770.945257][T17312] wrap_directory_iterator+0x96/0xe0 [ 770.945291][T17312] iterate_dir+0x399/0x570 [ 770.945327][T17312] __se_sys_getdents+0xe4/0x250 [ 770.945361][T17312] ? __pfx___se_sys_getdents+0x10/0x10 [ 770.945390][T17312] ? ksys_write+0x22a/0x250 [ 770.945417][T17312] ? __pfx_filldir+0x10/0x10 [ 770.945449][T17312] ? __pfx_ksys_write+0x10/0x10 [ 770.945483][T17312] ? do_syscall_64+0xbe/0xf80 [ 770.945512][T17312] do_syscall_64+0xfa/0xf80 [ 770.945537][T17312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.945558][T17312] ? clear_bhb_loop+0x60/0xb0 [ 770.945584][T17312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.945605][T17312] RIP: 0033:0x7febef18f749 [ 770.945625][T17312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.945644][T17312] RSP: 002b:00007febf0060038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 770.945667][T17312] RAX: ffffffffffffffda RBX: 00007febef3e5fa0 RCX: 00007febef18f749 [ 770.945682][T17312] RDX: 4ef31de551c3e7ca RSI: 0000200000000040 RDI: 0000000000000005 [ 770.945697][T17312] RBP: 00007febf0060090 R08: 0000000000000000 R09: 0000000000000000 [ 770.945710][T17312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 770.945723][T17312] R13: 00007febef3e6038 R14: 00007febef3e5fa0 R15: 00007ffe96d2c2b8 [ 770.945758][T17312] [ 771.297629][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 771.353757][ T5930] ft260 0003:0403:6030.0058: chip code: 6524 8100 [ 771.416836][T17318] binder: BINDER_SET_CONTEXT_MGR already set [ 771.423244][T17318] binder: 17317:17318 ioctl 4018620d 200000000300 returned -16 [ 771.436396][T17318] binder: BINDER_SET_CONTEXT_MGR already set [ 771.442649][T17318] binder: 17317:17318 ioctl 4018620d 200000000040 returned -16 [ 771.543884][T17320] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.554974][ T5930] ft260 0003:0403:6030.0058: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 771.755879][ T5930] ft260 0003:0403:6030.0058: failed to retrieve status: -32, no wakeup [ 771.766309][ T5930] ft260 0003:0403:6030.0058: failed to retrieve status: -5 [ 771.981073][ T5930] ft260 0003:0403:6030.0058: failed to reset I2C controller: -71 [ 772.010154][ T5930] usb 5-1: USB disconnect, device number 11 [ 772.530950][T17342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.542932][T17342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.556075][T17342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.573272][T17342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.582098][ T5910] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 772.743700][ T5910] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.754197][ T5910] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 772.773423][ T5910] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 772.783036][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.791209][ T5910] usb 10-1: Product: syz [ 772.797026][ T5910] usb 10-1: Manufacturer: syz [ 772.801788][ T5910] usb 10-1: SerialNumber: syz [ 773.013450][T17338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.023149][T17338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.040669][ T5910] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 773.061326][ T5910] usb 10-1: USB disconnect, device number 79 [ 773.160056][ T5838] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 773.299216][T17356] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 773.481007][ T5948] hid (null): invalid report_count 17421 [ 773.512282][ T5948] hid-generic 0003:0004:0051.0059: unexpected long global item [ 773.525492][ T5948] hid-generic 0003:0004:0051.0059: probe with driver hid-generic failed with error -22 [ 773.552008][ T5910] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 773.722114][ T5910] usb 10-1: Using ep0 maxpacket: 8 [ 773.731313][ T5910] usb 10-1: config index 0 descriptor too short (expected 301, got 72) [ 773.741584][ T5910] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 773.755695][ T5910] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.767947][ T5910] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.783819][ T5910] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 773.794697][ T5910] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 773.806245][ T5910] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33552, setting to 1024 [ 773.820092][ T5910] usb 10-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.834993][ T5910] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 773.874908][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.068901][T17374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.089135][T17374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.102528][ T5910] usb 10-1: usb_control_msg returned -32 [ 774.108599][ T5910] usbtmc 10-1:16.0: can't read capabilities [ 774.115930][ C1] usbtmc 10-1:16.0: overflow with length 1024, actual length is 1024 [ 774.130579][T17374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 774.142502][T17374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 774.271556][T17377] FAULT_INJECTION: forcing a failure. [ 774.271556][T17377] name failslab, interval 1, probability 0, space 0, times 0 [ 774.285902][T17377] CPU: 0 UID: 0 PID: 17377 Comm: syz.4.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.285939][T17377] Tainted: [L]=SOFTLOCKUP [ 774.285947][T17377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.285959][T17377] Call Trace: [ 774.285969][T17377] [ 774.285984][T17377] dump_stack_lvl+0x189/0x250 [ 774.286005][T17377] ? __pfx____ratelimit+0x10/0x10 [ 774.286022][T17377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.286057][T17377] ? __pfx__printk+0x10/0x10 [ 774.286096][T17377] ? __pfx___might_resched+0x10/0x10 [ 774.286132][T17377] should_fail_ex+0x414/0x560 [ 774.286163][T17377] should_failslab+0xa8/0x100 [ 774.286181][T17377] kmem_cache_alloc_noprof+0x88/0x710 [ 774.286223][T17377] ? security_inode_alloc+0x39/0x330 [ 774.286255][T17377] security_inode_alloc+0x39/0x330 [ 774.286282][T17377] inode_init_always_gfp+0x9ed/0xdc0 [ 774.286313][T17377] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 774.286333][T17377] alloc_inode+0x82/0x1b0 [ 774.286348][T17377] ? __pfx_fuse_inode_eq+0x10/0x10 [ 774.286386][T17377] ? __pfx_fuse_inode_set+0x10/0x10 [ 774.286410][T17377] iget5_locked+0x4a/0xa0 [ 774.286437][T17377] fuse_iget+0x381/0x9b0 [ 774.286472][T17377] ? __pfx_fuse_iget+0x10/0x10 [ 774.286490][T17377] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 774.286527][T17377] ? __pfx___mutex_trylock_common+0x10/0x10 [ 774.286560][T17377] fuse_lookup_name+0x713/0x860 [ 774.286601][T17377] ? __pfx_fuse_lookup_name+0x10/0x10 [ 774.286630][T17377] ? fuse_lock_inode+0xd3/0x120 [ 774.286660][T17377] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 774.286711][T17377] fuse_lookup+0x1f0/0x480 [ 774.286750][T17377] ? __pfx_fuse_lookup+0x10/0x10 [ 774.286781][T17377] ? d_alloc_parallel+0x14ac/0x1610 [ 774.286820][T17377] fuse_atomic_open+0x196/0x430 [ 774.286868][T17377] ? __pfx_fuse_atomic_open+0x10/0x10 [ 774.286896][T17377] atomic_open+0x14f/0x370 [ 774.286939][T17377] path_openat+0x10d7/0x3840 [ 774.286996][T17377] ? kasan_save_track+0x3e/0x80 [ 774.287033][T17377] ? __pfx_path_openat+0x10/0x10 [ 774.287090][T17377] do_filp_open+0x1fa/0x410 [ 774.287114][T17377] ? __pfx_do_filp_open+0x10/0x10 [ 774.287173][T17377] ? _raw_spin_unlock+0x28/0x50 [ 774.287193][T17377] ? alloc_fd+0x64c/0x6c0 [ 774.287227][T17377] do_sys_openat2+0x121/0x200 [ 774.287258][T17377] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.287279][T17377] ? ksys_write+0x22a/0x250 [ 774.287319][T17377] ? __pfx_ksys_write+0x10/0x10 [ 774.287352][T17377] __x64_sys_openat+0x138/0x170 [ 774.287383][T17377] do_syscall_64+0xfa/0xf80 [ 774.287412][T17377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.287427][T17377] ? clear_bhb_loop+0x60/0xb0 [ 774.287445][T17377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.287477][T17377] RIP: 0033:0x7fbf8a78f749 [ 774.287498][T17377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.287517][T17377] RSP: 002b:00007fbf8b696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.287538][T17377] RAX: ffffffffffffffda RBX: 00007fbf8a9e6090 RCX: 00007fbf8a78f749 [ 774.287553][T17377] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 774.287573][T17377] RBP: 00007fbf8b696090 R08: 0000000000000000 R09: 0000000000000000 [ 774.287582][T17377] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 774.287591][T17377] R13: 00007fbf8a9e6128 R14: 00007fbf8a9e6090 R15: 00007ffd390300b8 [ 774.287633][T17377] [ 774.665945][ T5930] usb 10-1: USB disconnect, device number 80 [ 775.014254][ T5910] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 775.029612][T17383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.039358][T17383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.184442][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.196299][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.208471][ T5910] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 775.217986][ T5910] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 775.226167][ T5910] usb 5-1: Manufacturer: syz [ 775.234857][ T5910] usb 5-1: config 0 descriptor?? [ 775.763409][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 101 > 2 [ 776.050467][T17397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.065987][T17397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.098776][ T5910] uclogic 0003:256C:006D.005A: failed retrieving Huion firmware version: -71 [ 776.098878][ T5910] uclogic 0003:256C:006D.005A: failed probing parameters: -71 [ 776.099022][ T5910] uclogic 0003:256C:006D.005A: probe with driver uclogic failed with error -71 [ 776.127911][ T5910] usb 5-1: USB disconnect, device number 12 [ 776.354631][T17405] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2530'. [ 776.414185][T16737] usb 3-1: string descriptor 0 read error: -32 [ 776.792219][T17414] netlink: 'syz.2.2534': attribute type 11 has an invalid length. [ 776.851164][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 776.851237][ T30] audit: type=1326 audit(1766218465.947:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 776.875880][T17416] FAULT_INJECTION: forcing a failure. [ 776.875880][T17416] name failslab, interval 1, probability 0, space 0, times 0 [ 776.893519][T17416] CPU: 0 UID: 0 PID: 17416 Comm: syz.2.2535 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.893553][T17416] Tainted: [L]=SOFTLOCKUP [ 776.893562][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 776.893575][T17416] Call Trace: [ 776.893584][T17416] [ 776.893594][T17416] dump_stack_lvl+0x189/0x250 [ 776.893621][T17416] ? __pfx____ratelimit+0x10/0x10 [ 776.893645][T17416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.893666][T17416] ? __pfx__printk+0x10/0x10 [ 776.893715][T17416] should_fail_ex+0x414/0x560 [ 776.893747][T17416] should_failslab+0xa8/0x100 [ 776.893773][T17416] kmem_cache_alloc_noprof+0x88/0x710 [ 776.893803][T17416] ? skb_clone+0x212/0x3a0 [ 776.893835][T17416] skb_clone+0x212/0x3a0 [ 776.893858][T17416] ? skb_realloc_headroom+0x72/0x110 [ 776.893889][T17416] skb_realloc_headroom+0x83/0x110 [ 776.893918][T17416] pptp_xmit+0x37f/0x1be0 [ 776.893955][T17416] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 776.893977][T17416] ? lockdep_hardirqs_on+0x98/0x140 [ 776.894002][T17416] ? __pfx_pptp_xmit+0x10/0x10 [ 776.894023][T17416] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 776.894058][T17416] ? skb_dequeue+0x10e/0x150 [ 776.894092][T17416] __ppp_channel_push+0xf7/0x1a0 [ 776.894117][T17416] ? ppp_channel_push+0x1d/0x7c0 [ 776.894141][T17416] ppp_channel_push+0x1fd/0x7c0 [ 776.894163][T17416] ? skb_queue_tail+0x30/0xf0 [ 776.894197][T17416] ppp_write+0x2b0/0x400 [ 776.894226][T17416] vfs_writev+0x4b6/0x960 [ 776.894253][T17416] ? __pfx_ppp_write+0x10/0x10 [ 776.894281][T17416] ? __pfx_vfs_writev+0x10/0x10 [ 776.894321][T17416] ? __fget_files+0x2a/0x420 [ 776.894351][T17416] ? __fget_files+0x3a0/0x420 [ 776.894374][T17416] ? __fget_files+0x2a/0x420 [ 776.894407][T17416] do_writev+0x14d/0x2d0 [ 776.894434][T17416] ? __pfx_do_writev+0x10/0x10 [ 776.894456][T17416] ? __secure_computing+0xe2/0x2a0 [ 776.894501][T17416] do_syscall_64+0xfa/0xf80 [ 776.894527][T17416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.894549][T17416] ? clear_bhb_loop+0x60/0xb0 [ 776.894575][T17416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.894596][T17416] RIP: 0033:0x7f4afc58f749 [ 776.894617][T17416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.894636][T17416] RSP: 002b:00007f4afd4cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 776.894659][T17416] RAX: ffffffffffffffda RBX: 00007f4afc7e5fa0 RCX: 00007f4afc58f749 [ 776.894674][T17416] RDX: 0000000000000002 RSI: 0000200000000640 RDI: 0000000000000004 [ 776.894687][T17416] RBP: 00007f4afd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 776.894700][T17416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.894713][T17416] R13: 00007f4afc7e6038 R14: 00007f4afc7e5fa0 R15: 00007ffed2ae2ce8 [ 776.894749][T17416] [ 776.897218][ T30] audit: type=1326 audit(1766218465.947:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 776.898945][ T5930] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 776.914965][ T30] audit: type=1326 audit(1766218465.947:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.141846][ C0] hrtimer: interrupt took 208386 ns [ 777.162699][ T30] audit: type=1326 audit(1766218465.957:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.205296][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 777.218303][ T30] audit: type=1326 audit(1766218465.957:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.272686][ T5930] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 777.323161][ T5930] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 777.333444][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 777.347089][ T5930] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 777.357543][ T5930] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.372357][ T5930] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 777.381475][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.392010][ T30] audit: type=1326 audit(1766218465.967:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.448073][ T30] audit: type=1326 audit(1766218465.967:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.470810][ T30] audit: type=1326 audit(1766218465.967:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.494483][ T30] audit: type=1326 audit(1766218465.967:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.569690][ T30] audit: type=1326 audit(1766218465.967:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17415 comm="syz.2.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 777.619392][ T5930] usb 5-1: usb_control_msg returned -32 [ 777.626057][T17410] ptrace attach of "./syz-executor exec"[11778] was attempted by "./syz-executor exec"[17410] [ 777.649364][ T5930] usbtmc 5-1:16.0: can't read capabilities [ 778.022093][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.031366][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.072091][ T5870] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 778.235430][ T5870] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.247952][ T5870] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.261933][T17430] usbtmc 5-1:16.0: control status returned 0 [ 778.268583][ T5870] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 778.278647][ T5870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.301651][ T5870] usb 10-1: config 0 descriptor?? [ 778.315278][ T5870] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 778.414036][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.423055][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.465517][ T5910] usb 5-1: USB disconnect, device number 13 [ 779.225577][T17441] netlink: 'syz.2.2542': attribute type 11 has an invalid length. [ 779.236464][T17441] FAULT_INJECTION: forcing a failure. [ 779.236464][T17441] name failslab, interval 1, probability 0, space 0, times 0 [ 779.251123][T17441] CPU: 0 UID: 0 PID: 17441 Comm: syz.2.2542 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.251148][T17441] Tainted: [L]=SOFTLOCKUP [ 779.251154][T17441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.251164][T17441] Call Trace: [ 779.251170][T17441] [ 779.251177][T17441] dump_stack_lvl+0x189/0x250 [ 779.251198][T17441] ? __pfx____ratelimit+0x10/0x10 [ 779.251214][T17441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 779.251229][T17441] ? __pfx__printk+0x10/0x10 [ 779.251257][T17441] ? __pfx___might_resched+0x10/0x10 [ 779.251279][T17441] ? fs_reclaim_acquire+0x7d/0x100 [ 779.251306][T17441] should_fail_ex+0x414/0x560 [ 779.251328][T17441] should_failslab+0xa8/0x100 [ 779.251346][T17441] kmem_cache_alloc_noprof+0x88/0x710 [ 779.251369][T17441] ? security_inode_alloc+0x39/0x330 [ 779.251391][T17441] security_inode_alloc+0x39/0x330 [ 779.251412][T17441] inode_init_always_gfp+0x9ed/0xdc0 [ 779.251433][T17441] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 779.251457][T17441] alloc_inode+0x82/0x1b0 [ 779.251474][T17441] new_inode+0x22/0x170 [ 779.251495][T17441] __debugfs_create_file+0xb8/0x400 [ 779.251520][T17441] debugfs_create_file_full+0x3f/0x60 [ 779.251546][T17441] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 779.251566][T17441] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 779.251645][T17441] ? trace_kmalloc+0x1f/0xb0 [ 779.251672][T17441] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 779.251709][T17441] ? __raw_spin_lock_init+0x45/0x100 [ 779.251737][T17441] alloc_netdev_mqs+0x2b9/0x1200 [ 779.251766][T17441] ? __pfx_ieee80211_if_setup+0x10/0x10 [ 779.251802][T17441] ieee80211_if_add+0x45c/0x1370 [ 779.251853][T17441] ? __build_skb_around+0x22d/0x3c0 [ 779.251878][T17441] ieee80211_add_iface+0xb5/0x5a0 [ 779.251911][T17441] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 779.251935][T17441] ? nla_memcpy+0x5b/0xc0 [ 779.251974][T17441] nl80211_new_interface+0x883/0x1130 [ 779.252013][T17441] ? __pfx_nl80211_new_interface+0x10/0x10 [ 779.252044][T17441] ? nl80211_pre_doit+0x4df/0x8e0 [ 779.252077][T17441] genl_family_rcv_msg_doit+0x215/0x300 [ 779.252119][T17441] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 779.252165][T17441] ? bpf_lsm_capable+0x9/0x20 [ 779.252187][T17441] ? security_capable+0x7e/0x2e0 [ 779.252218][T17441] genl_rcv_msg+0x60e/0x790 [ 779.252259][T17441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.252297][T17441] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 779.252319][T17441] ? __pfx_nl80211_new_interface+0x10/0x10 [ 779.252344][T17441] ? __pfx_nl80211_post_doit+0x10/0x10 [ 779.252403][T17441] netlink_rcv_skb+0x208/0x470 [ 779.252432][T17441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.252466][T17441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.252515][T17441] ? down_read+0x274/0x2e0 [ 779.252539][T17441] ? genl_rcv+0xd/0x40 [ 779.252573][T17441] genl_rcv+0x28/0x40 [ 779.252601][T17441] netlink_unicast+0x82f/0x9e0 [ 779.252636][T17441] ? __pfx_netlink_unicast+0x10/0x10 [ 779.252663][T17441] ? netlink_sendmsg+0x642/0xb30 [ 779.252687][T17441] ? skb_put+0x11b/0x210 [ 779.252714][T17441] netlink_sendmsg+0x805/0xb30 [ 779.252739][T17441] ? aa_sk_perm+0x15f/0x920 [ 779.252773][T17441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.252803][T17441] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 779.252842][T17441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.252868][T17441] sock_sendmsg_nosec+0x18f/0x1d0 [ 779.252902][T17441] ____sys_sendmsg+0x577/0x880 [ 779.252938][T17441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.252974][T17441] ? import_iovec+0x74/0xa0 [ 779.253009][T17441] ___sys_sendmsg+0x21f/0x2a0 [ 779.253036][T17441] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.253069][T17441] ? rcu_read_lock_any_held+0xb3/0x120 [ 779.253122][T17441] ? __fget_files+0x2a/0x420 [ 779.253139][T17441] ? __fget_files+0x3a0/0x420 [ 779.253164][T17441] __x64_sys_sendmsg+0x19b/0x260 [ 779.253192][T17441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.253218][T17441] ? __pfx_ksys_write+0x10/0x10 [ 779.253250][T17441] ? do_syscall_64+0xbe/0xf80 [ 779.253271][T17441] do_syscall_64+0xfa/0xf80 [ 779.253293][T17441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.253316][T17441] ? clear_bhb_loop+0x60/0xb0 [ 779.253335][T17441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.253349][T17441] RIP: 0033:0x7f4afc58f749 [ 779.253365][T17441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.253378][T17441] RSP: 002b:00007f4afd4cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.253395][T17441] RAX: ffffffffffffffda RBX: 00007f4afc7e5fa0 RCX: 00007f4afc58f749 [ 779.253406][T17441] RDX: 0000000000000000 RSI: 0000200000000e40 RDI: 0000000000000004 [ 779.253415][T17441] RBP: 00007f4afd4cd090 R08: 0000000000000000 R09: 0000000000000000 [ 779.253424][T17441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 779.253433][T17441] R13: 00007f4afc7e6038 R14: 00007f4afc7e5fa0 R15: 00007ffed2ae2ce8 [ 779.253458][T17441] [ 779.747854][ T6013] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 779.762122][T17441] debugfs: out of free dentries, can not create file 'netdev@ffff888058304628' [ 779.886885][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.898255][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.922518][ T6013] usb 5-1: Using ep0 maxpacket: 32 [ 779.929965][ T6013] usb 5-1: unable to get BOS descriptor or descriptor too short [ 779.939165][ T6013] usb 5-1: config 3 has an invalid interface number: 254 but max is 0 [ 779.948679][ T6013] usb 5-1: config 3 has no interface number 0 [ 779.955118][ T6013] usb 5-1: config 3 interface 254 has no altsetting 0 [ 779.969280][ T6013] usb 5-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=7e.a2 [ 779.978697][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.987605][ T6013] usb 5-1: Product: syz [ 779.992109][ T6013] usb 5-1: Manufacturer: syz [ 779.996791][ T6013] usb 5-1: SerialNumber: syz [ 780.211662][ T6013] sierra 5-1:3.254: Sierra USB modem converter detected [ 780.222986][ T6013] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 780.233541][ T6013] usb 5-1: USB disconnect, device number 14 [ 780.243996][ T6013] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 780.253747][ T6013] sierra 5-1:3.254: device disconnected [ 781.142544][T17467] kvm: apic: phys broadcast and lowest prio [ 781.149143][ T5838] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 781.475601][T17474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.486609][T17474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.531263][ T847] usb 10-1: USB disconnect, device number 81 [ 781.580505][T17477] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2554'. [ 781.611489][T17479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2555'. [ 781.624766][T17479] netlink: 'syz.9.2555': attribute type 11 has an invalid length. [ 781.952005][ T847] usb 10-1: new low-speed USB device number 82 using dummy_hcd [ 782.105446][ T847] usb 10-1: No LPM exit latency info found, disabling LPM. [ 782.129638][ T847] usb 10-1: config 8 has an invalid interface number: 118 but max is 3 [ 782.147032][ T847] usb 10-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 782.162419][ T847] usb 10-1: config 8 has an invalid interface number: 68 but max is 3 [ 782.171010][ T847] usb 10-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 782.186253][ T847] usb 10-1: config 8 has an invalid interface number: 61 but max is 3 [ 782.194660][ T847] usb 10-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 782.203649][ T847] usb 10-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 782.216536][ T847] usb 10-1: config 8 has no interface number 1 [ 782.226649][ T847] usb 10-1: config 8 has no interface number 2 [ 782.233197][ T847] usb 10-1: config 8 has no interface number 3 [ 782.240282][ T847] usb 10-1: config 8 interface 118 altsetting 4 endpoint 0x1 has invalid maxpacket 64, setting to 8 [ 782.257120][ T847] usb 10-1: config 8 interface 118 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 8 [ 782.276555][ T847] usb 10-1: config 8 interface 68 altsetting 3 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 782.288682][ T847] usb 10-1: config 8 interface 68 altsetting 3 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 782.326468][ T847] usb 10-1: config 8 interface 68 altsetting 3 endpoint 0x9 has invalid maxpacket 52814, setting to 8 [ 782.352091][ T847] usb 10-1: config 8 interface 68 altsetting 3 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 782.375444][ T847] usb 10-1: config 8 interface 68 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 782.404672][ T847] usb 10-1: config 8 interface 68 altsetting 3 endpoint 0xB has invalid maxpacket 64, setting to 8 [ 782.449349][ T847] usb 10-1: config 8 interface 68 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 782.471026][ T847] usb 10-1: config 8 interface 68 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 782.490925][ T847] usb 10-1: config 8 interface 68 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 782.503602][ T847] usb 10-1: config 8 interface 68 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 782.529765][ T847] usb 10-1: config 8 interface 61 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 782.570613][ T847] usb 10-1: config 8 interface 61 altsetting 2 has a duplicate endpoint with address 0xE, skipping [ 782.590424][ T847] usb 10-1: config 8 interface 61 altsetting 2 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 782.602676][ T847] usb 10-1: config 8 interface 61 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 8 [ 782.615019][ T847] usb 10-1: config 8 interface 61 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 782.629988][ T847] usb 10-1: config 8 interface 61 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 782.644617][ T847] usb 10-1: config 8 interface 61 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 782.655549][ T847] usb 10-1: config 8 interface 61 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 782.667008][T17488] FAULT_INJECTION: forcing a failure. [ 782.667008][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 782.686149][ T847] usb 10-1: config 8 interface 61 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 782.697055][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.4.2558 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.697091][T17488] Tainted: [L]=SOFTLOCKUP [ 782.697098][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.697110][T17488] Call Trace: [ 782.697119][T17488] [ 782.697127][T17488] dump_stack_lvl+0x189/0x250 [ 782.697152][T17488] ? __pfx____ratelimit+0x10/0x10 [ 782.697173][T17488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.697195][T17488] ? __pfx__printk+0x10/0x10 [ 782.697223][T17488] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 782.697274][T17488] should_fail_ex+0x414/0x560 [ 782.697306][T17488] should_failslab+0xa8/0x100 [ 782.697332][T17488] kmem_cache_alloc_noprof+0x88/0x710 [ 782.697361][T17488] ? sk_filter_trim_cap+0x1e1/0xd60 [ 782.697389][T17488] ? skb_clone+0x212/0x3a0 [ 782.697420][T17488] skb_clone+0x212/0x3a0 [ 782.697450][T17488] __netlink_deliver_tap+0x424/0x8b0 [ 782.697494][T17488] ? netlink_deliver_tap+0x2e/0x1b0 [ 782.697522][T17488] netlink_deliver_tap+0x19c/0x1b0 [ 782.697551][T17488] netlink_dump+0x92b/0xe90 [ 782.697591][T17488] ? __pfx_netlink_dump+0x10/0x10 [ 782.697635][T17488] ? genl_start+0x499/0x6c0 [ 782.697677][T17488] __netlink_dump_start+0x5cb/0x7e0 [ 782.697712][T17488] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 782.697750][T17488] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 782.697781][T17488] ? genl_get_cmd+0x7d9/0x910 [ 782.697818][T17488] ? __pfx_genl_start+0x10/0x10 [ 782.697848][T17488] ? __pfx_genl_dumpit+0x10/0x10 [ 782.697876][T17488] ? __pfx_genl_done+0x10/0x10 [ 782.697914][T17488] ? trim_netdev_trace+0x2a3/0x3d0 [ 782.697952][T17488] genl_rcv_msg+0x5da/0x790 [ 782.697999][T17488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 782.698032][T17488] ? __pfx_nl80211_dump_scan+0x10/0x10 [ 782.698080][T17488] netlink_rcv_skb+0x208/0x470 [ 782.698107][T17488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 782.698141][T17488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 782.698187][T17488] ? down_read+0x274/0x2e0 [ 782.698213][T17488] ? genl_rcv+0xd/0x40 [ 782.698245][T17488] genl_rcv+0x28/0x40 [ 782.698274][T17488] netlink_unicast+0x82f/0x9e0 [ 782.698309][T17488] ? __pfx_netlink_unicast+0x10/0x10 [ 782.698335][T17488] ? netlink_sendmsg+0x642/0xb30 [ 782.698360][T17488] ? skb_put+0x11b/0x210 [ 782.698386][T17488] netlink_sendmsg+0x805/0xb30 [ 782.698412][T17488] ? aa_sk_perm+0x15f/0x920 [ 782.698445][T17488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.698474][T17488] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 782.698512][T17488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.698538][T17488] sock_sendmsg_nosec+0x18f/0x1d0 [ 782.698571][T17488] ____sys_sendmsg+0x577/0x880 [ 782.698607][T17488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.698642][T17488] ? import_iovec+0x74/0xa0 [ 782.698676][T17488] ___sys_sendmsg+0x21f/0x2a0 [ 782.698704][T17488] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.698737][T17488] ? rcu_read_lock_any_held+0xb3/0x120 [ 782.698792][T17488] ? __fget_files+0x2a/0x420 [ 782.698816][T17488] ? __fget_files+0x3a0/0x420 [ 782.698852][T17488] __x64_sys_sendmsg+0x19b/0x260 [ 782.698881][T17488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.698917][T17488] ? __pfx_ksys_write+0x10/0x10 [ 782.698953][T17488] ? do_syscall_64+0xbe/0xf80 [ 782.698981][T17488] do_syscall_64+0xfa/0xf80 [ 782.699012][T17488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.699035][T17488] ? clear_bhb_loop+0x60/0xb0 [ 782.699062][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.699084][T17488] RIP: 0033:0x7fbf8a78f749 [ 782.699105][T17488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.699124][T17488] RSP: 002b:00007fbf8b6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.699147][T17488] RAX: ffffffffffffffda RBX: 00007fbf8a9e5fa0 RCX: 00007fbf8a78f749 [ 782.699163][T17488] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 782.699177][T17488] RBP: 00007fbf8b6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 782.699190][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 782.699202][T17488] R13: 00007fbf8a9e6038 R14: 00007fbf8a9e5fa0 R15: 00007ffd390300b8 [ 782.699239][T17488] [ 782.702189][ T847] usb 10-1: config 8 interface 61 altsetting 2 endpoint 0xD has invalid maxpacket 512, setting to 8 [ 782.781178][T17490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 782.785938][ T847] usb 10-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x3, skipping [ 782.946228][T17490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 782.954647][ T847] usb 10-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0xA, skipping [ 783.185629][T17490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.201975][ T847] usb 10-1: config 8 interface 0 altsetting 64 has a duplicate endpoint with address 0x3, skipping [ 783.213226][ T847] usb 10-1: config 8 interface 118 has no altsetting 0 [ 783.220138][ T847] usb 10-1: config 8 interface 68 has no altsetting 0 [ 783.227103][ T847] usb 10-1: config 8 interface 61 has no altsetting 0 [ 783.230490][T17490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.234156][ T847] usb 10-1: config 8 interface 0 has no altsetting 0 [ 783.253403][ T847] usb 10-1: Dual-Role OTG device on HNP port [ 783.260010][ T847] usb 10-1: New USB device found, idVendor=0bc2, idProduct=3010, bcdDevice= 0.00 [ 783.269935][ T847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.278503][ T847] usb 10-1: Product: 煵繫䡦阦遚됊癬槍纺ꬰﺳ਼莾捷﬷⒏ꔫ體핱뿔및Ï栃鄱჈竟ᑍ샓ꁃ⸶뤏ᅢ根ὖꧨ䵷돏熖ѿ콚꘰㸕쌭쨌綢콝삩엺迟均 [ 783.299105][ T847] usb 10-1: Manufacturer: Т [ 783.304034][ T847] usb 10-1: SerialNumber: 뇳᎕刃⤮⥝Ჷ䥗ᣫ㠆뻇௰벤ᖎࣇ胢溜സ鲝䖿掖懡웭鼍돈ҧ郎힒㖹謴屾ㄖ嶤码ʼ狯䌝玅 [ 783.533839][ T847] usb-storage 10-1:8.118: USB Mass Storage device detected [ 783.565522][ T847] usb-storage 10-1:8.118: Quirks match for vid 0bc2 pid 3010: 8000 [ 783.654288][ T847] usb 10-1: bad CDC descriptors [ 783.665883][ T847] usb-storage 10-1:8.68: USB Mass Storage device detected [ 783.689388][ T847] usb-storage 10-1:8.68: Quirks match for vid 0bc2 pid 3010: 8000 [ 783.803335][ T847] usb-storage 10-1:8.61: USB Mass Storage device detected [ 783.857526][T17502] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2562'. [ 783.868209][ T847] usb-storage 10-1:8.61: Quirks match for vid 0bc2 pid 3010: 8000 [ 783.914053][T17506] syzkaller1: entered promiscuous mode [ 783.946617][T17506] syzkaller1: entered allmulticast mode [ 783.955994][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 783.956013][ T30] audit: type=1326 audit(1766218473.037:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 783.996500][ T847] usb-storage 10-1:8.0: USB Mass Storage device detected [ 784.017341][ T30] audit: type=1326 audit(1766218473.037:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.041094][ T30] audit: type=1326 audit(1766218473.037:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.085281][ T847] usb-storage 10-1:8.0: Quirks match for vid 0bc2 pid 3010: 8000 [ 784.104343][ T30] audit: type=1326 audit(1766218473.037:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.127597][ T30] audit: type=1326 audit(1766218473.037:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.150404][ T30] audit: type=1326 audit(1766218473.037:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.175277][ T30] audit: type=1326 audit(1766218473.037:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.198380][ T30] audit: type=1326 audit(1766218473.117:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.221052][ T30] audit: type=1326 audit(1766218473.117:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.268991][ T847] usb 10-1: USB disconnect, device number 82 [ 784.286999][ T30] audit: type=1326 audit(1766218473.167:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4afc58f749 code=0x7ffc0000 [ 784.399009][T17510] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 784.424595][T17510] syzkaller1: linktype set to 786 [ 784.455810][T17518] syzkaller1: entered promiscuous mode [ 784.533460][T17518] syzkaller1: entered allmulticast mode [ 784.620129][T17523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.673271][T17523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.688654][T17525] FAULT_INJECTION: forcing a failure. [ 784.688654][T17525] name failslab, interval 1, probability 0, space 0, times 0 [ 784.701874][T17525] CPU: 0 UID: 0 PID: 17525 Comm: syz.6.2568 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.701908][T17525] Tainted: [L]=SOFTLOCKUP [ 784.701916][T17525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.701930][T17525] Call Trace: [ 784.701939][T17525] [ 784.701947][T17525] dump_stack_lvl+0x189/0x250 [ 784.701974][T17525] ? __pfx____ratelimit+0x10/0x10 [ 784.701995][T17525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 784.702017][T17525] ? __pfx__printk+0x10/0x10 [ 784.702052][T17525] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 784.702088][T17525] should_fail_ex+0x414/0x560 [ 784.702119][T17525] should_failslab+0xa8/0x100 [ 784.702142][T17525] ? __pfx_ip6_dst_gc+0x10/0x10 [ 784.702172][T17525] kmem_cache_alloc_noprof+0x88/0x710 [ 784.702201][T17525] ? ip6_pol_route+0x162/0x1180 [ 784.702222][T17525] ? dst_alloc+0x105/0x170 [ 784.702249][T17525] ? __pfx_ip6_dst_gc+0x10/0x10 [ 784.702280][T17525] dst_alloc+0x105/0x170 [ 784.702313][T17525] ip6_pol_route+0xa21/0x1180 [ 784.702335][T17525] ? ip6_pol_route+0x162/0x1180 [ 784.702361][T17525] ? __pfx_ip6_pol_route+0x10/0x10 [ 784.702403][T17525] fib6_rule_lookup+0x52f/0x6f0 [ 784.702430][T17525] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 784.702452][T17525] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 784.702490][T17525] ? ip6t_do_table+0x1db/0x1560 [ 784.702529][T17525] ip6_route_input+0x6de/0xad0 [ 784.702558][T17525] ? __pfx_ip6_route_input+0x10/0x10 [ 784.702593][T17525] ? nf_nat_ipv6_in+0x1fc/0x2b0 [ 784.702636][T17525] ? ip6_rcv_finish_core+0x222/0x420 [ 784.702668][T17525] ip6_rcv_finish+0x141/0x2e0 [ 784.702699][T17525] NF_HOOK+0x30c/0x3a0 [ 784.702723][T17525] ? skb_orphan+0x4f/0xd0 [ 784.702750][T17525] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 784.702774][T17525] ? NF_HOOK+0x9a/0x3a0 [ 784.702797][T17525] ? __pfx_NF_HOOK+0x10/0x10 [ 784.702834][T17525] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 784.702874][T17525] __netif_receive_skb+0xd3/0x380 [ 784.702913][T17525] ? netif_receive_skb+0x105/0x750 [ 784.702943][T17525] netif_receive_skb+0x1bb/0x750 [ 784.702973][T17525] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 784.703004][T17525] ? __pfx_netif_receive_skb+0x10/0x10 [ 784.703033][T17525] ? skb_partial_csum_set+0x107/0x360 [ 784.703058][T17525] ? tun_rx_batched+0x160/0x730 [ 784.703082][T17525] tun_rx_batched+0x1b9/0x730 [ 784.703111][T17525] ? __pfx_tun_rx_batched+0x10/0x10 [ 784.703136][T17525] ? tun_get_user+0x266d/0x3dc0 [ 784.703167][T17525] ? tun_get_user+0x266d/0x3dc0 [ 784.703187][T17525] tun_get_user+0x2aa3/0x3dc0 [ 784.703218][T17525] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 784.703244][T17525] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 784.703266][T17525] ? aa_file_perm+0x44c/0x1530 [ 784.703292][T17525] ? __pfx_tun_get_user+0x10/0x10 [ 784.703321][T17525] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 784.703350][T17525] ? kstrtoull+0x12f/0x1d0 [ 784.703381][T17525] ? ref_tracker_alloc+0x318/0x460 [ 784.703405][T17525] ? tun_get+0x157/0x2f0 [ 784.703423][T17525] ? tun_chr_write_iter+0x60/0x210 [ 784.703442][T17525] ? ksys_write+0x145/0x250 [ 784.703470][T17525] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 784.703502][T17525] ? tun_get+0x1c/0x2f0 [ 784.703529][T17525] ? tun_get+0x1c/0x2f0 [ 784.703549][T17525] ? tun_get+0x1c/0x2f0 [ 784.703576][T17525] tun_chr_write_iter+0x113/0x210 [ 784.703603][T17525] vfs_write+0x5c9/0xb30 [ 784.703638][T17525] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 784.703661][T17525] ? __pfx_vfs_write+0x10/0x10 [ 784.703705][T17525] ? __fget_files+0x2a/0x420 [ 784.703739][T17525] ksys_write+0x145/0x250 [ 784.703771][T17525] ? __pfx_ksys_write+0x10/0x10 [ 784.703811][T17525] ? do_syscall_64+0xbe/0xf80 [ 784.703836][T17525] do_syscall_64+0xfa/0xf80 [ 784.703858][T17525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.703880][T17525] ? clear_bhb_loop+0x60/0xb0 [ 784.703905][T17525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.703926][T17525] RIP: 0033:0x7f1729b8f749 [ 784.703946][T17525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.703965][T17525] RSP: 002b:00007f172a991038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 784.703987][T17525] RAX: ffffffffffffffda RBX: 00007f1729de5fa0 RCX: 00007f1729b8f749 [ 784.704001][T17525] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000004 [ 784.704014][T17525] RBP: 00007f172a991090 R08: 0000000000000000 R09: 0000000000000000 [ 784.704026][T17525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.704039][T17525] R13: 00007f1729de6038 R14: 00007f1729de5fa0 R15: 00007fff1bd44798 [ 784.704074][T17525] [ 785.221979][ T5910] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 785.266047][T17527] binder: BINDER_SET_CONTEXT_MGR already set [ 785.278727][T17527] binder: 17526:17527 ioctl 4018620d 2000000000c0 returned -16 [ 785.318956][T17527] binder: 17526:17527 ioctl 3b88 200000000280 returned -22 [ 785.341645][T17527] binder: 17526:17527 ioctl 3ba0 2000000002c0 returned -22 [ 785.378659][T17527] binder: 17526:17527 ioctl 3b89 200000000440 returned -22 [ 785.389018][T17527] binder: BINDER_SET_CONTEXT_MGR already set [ 785.395291][T17527] binder: 17526:17527 ioctl 4018620d 200000000040 returned -16 [ 785.403306][ T5910] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.424397][ T5910] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 785.444848][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.505211][ T5910] usb 10-1: config 0 descriptor?? [ 785.925173][ T5910] keytouch 0003:0926:3333.005B: fixing up Keytouch IEC report descriptor [ 785.944386][ T5910] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.005B/input/input125 [ 786.065902][ T5910] keytouch 0003:0926:3333.005B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 786.082463][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 786.145703][T17545] syzkaller1: entered promiscuous mode [ 786.145732][T17545] syzkaller1: entered allmulticast mode [ 786.270486][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.270526][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.270568][ T44] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 786.270676][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.283618][ T44] usb 5-1: config 0 descriptor?? [ 786.474111][T17553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2577'. [ 786.522938][ T5910] usb 10-1: USB disconnect, device number 83 [ 786.659819][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 786.694185][ T31] Tainted: G L syzkaller #0 [ 786.717622][ T44] kye 0003:0458:0153.005C: unknown main item tag 0x0 [ 786.727352][ T44] kye 0003:0458:0153.005C: unknown main item tag 0x0 [ 786.742144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 786.750893][ T31] task:kworker/1:0 state:D stack:21288 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 786.772367][ T44] kye 0003:0458:0153.005C: unknown main item tag 0x0 [ 786.785168][ T44] kye 0003:0458:0153.005C: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.4-1/input0 [ 786.808566][ T31] Workqueue: usb_hub_wq hub_event [ 786.832189][ T31] Call Trace: [ 786.842291][ T31] [ 786.845369][ T31] __schedule+0x150e/0x5070 [ 786.860573][ T31] ? do_raw_spin_lock+0x121/0x290 [ 786.870895][ T31] ? __pfx___schedule+0x10/0x10 [ 786.894230][ T31] ? schedule+0x91/0x360 [ 786.899036][ T31] schedule+0x165/0x360 [ 786.920912][ T31] schedule_timeout+0x9a/0x270 [ 786.938388][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 786.972067][T17557] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2574'. [ 786.974571][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 787.011975][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 787.031941][ T31] ? wait_for_completion+0x267/0x5d0 [ 787.037359][ T31] wait_for_completion+0x2bf/0x5d0 [ 787.052180][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 787.087939][ T31] ? kobject_put+0x52a/0x570 [ 787.098743][ T31] i2c_del_adapter+0x591/0x760 [ 787.111977][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 787.121976][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 787.131880][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 787.137275][ T31] ? kfree+0x1c0/0x660 [ 787.151748][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 787.161900][ T31] dvb_usb_device_exit+0x1be/0x350 [ 787.177277][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 787.193535][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 787.199259][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 787.212490][ T31] ? usb_disable_interface+0x31d/0x350 [ 787.218180][ T31] usb_unbind_interface+0x26e/0x910 [ 787.224047][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 787.229986][ T31] device_release_driver_internal+0x4d9/0x800 [ 787.239078][ T31] bus_remove_device+0x34d/0x440 [ 787.244279][ T31] device_del+0x511/0x8e0 [ 787.248698][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 787.254183][ T31] ? __pfx_device_del+0x10/0x10 [ 787.259264][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 787.318975][ T31] usb_disable_device+0x3d4/0x8e0 [ 787.324682][ T31] usb_disconnect+0x32f/0x990 [ 787.329916][ T31] hub_event+0x1ca9/0x4ef0 [ 787.336409][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 787.342326][ T31] ? __pfx_hub_event+0x10/0x10 [ 787.347318][ T31] ? process_one_work+0x868/0x15a0 [ 787.353400][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 787.358983][ T31] ? process_one_work+0x868/0x15a0 [ 787.364482][ T31] process_one_work+0x93a/0x15a0 [ 787.369594][ T31] ? __pfx_process_one_work+0x10/0x10 [ 787.375599][ T31] ? assign_work+0x3c7/0x5b0 [ 787.380629][ T31] worker_thread+0x9b0/0xee0 [ 787.385929][ T31] kthread+0x711/0x8a0 [ 787.394669][ T31] ? __pfx_worker_thread+0x10/0x10 [ 787.400114][ T31] ? __pfx_kthread+0x10/0x10 [ 787.417512][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 787.425211][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 787.430652][ T31] ? __pfx_kthread+0x10/0x10 [ 787.441079][ T31] ret_from_fork+0x599/0xb30 [ 787.448101][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 787.455496][ T31] ? __switch_to_asm+0x39/0x70 [ 787.469439][ T31] ? __switch_to_asm+0x33/0x70 [ 787.478143][ T31] ? __pfx_kthread+0x10/0x10 [ 787.485552][ T31] ret_from_fork_asm+0x1a/0x30 [ 787.496145][ T31] [ 787.520256][ T31] [ 787.520256][ T31] Showing all locks held in the system: [ 787.546671][ T31] 5 locks held by kworker/1:0/24: [ 787.569891][ T31] #0: ffff88801e28bd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x841/0x15a0 [ 787.606673][ T31] #1: ffffc900001e7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x868/0x15a0 [ 787.630866][ T31] #2: ffff888028f7c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 787.644221][ T31] #3: ffff8880290d0198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 787.655952][ T31] #4: ffff8880206be160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 787.680794][ T31] 1 lock held by khungtaskd/31: [ 787.692258][ T31] #0: ffffffff8e33f2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 787.715207][ T31] 2 locks held by getty/5586: [ 787.724673][ T31] #0: ffff88814e8000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 787.739359][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 787.754325][ T31] 1 lock held by syz.5.2107/15633: [ 787.759893][ T31] #0: ffff888028f7c198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 787.782223][ T31] 1 lock held by syz.6.2576/17550: [ 787.792321][ T31] #0: ffffffff8e344d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 787.811923][ T31] 1 lock held by syz.6.2576/17551: [ 787.822158][ T31] #0: ffffffff8e344d00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 787.845613][ T31] 4 locks held by syz.2.2577/17552: [ 787.856962][ T31] 5 locks held by syz.6.2576/17562: [ 787.867055][ T31] [ 787.869458][ T31] ============================================= [ 787.869458][ T31] [ 787.886963][ T31] NMI backtrace for cpu 1 [ 787.886991][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 787.887022][ T31] Tainted: [L]=SOFTLOCKUP [ 787.887030][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.887044][ T31] Call Trace: [ 787.887054][ T31] [ 787.887063][ T31] dump_stack_lvl+0x189/0x250 [ 787.887096][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 787.887118][ T31] ? __pfx__printk+0x10/0x10 [ 787.887166][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 787.887201][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 787.887236][ T31] ? __pfx__printk+0x10/0x10 [ 787.887274][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 787.887307][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 787.887342][ T31] sys_info+0x135/0x170 [ 787.887369][ T31] watchdog+0xe40/0xe90 [ 787.887402][ T31] ? watchdog+0x202/0xe90 [ 787.887435][ T31] kthread+0x711/0x8a0 [ 787.887464][ T31] ? __pfx_watchdog+0x10/0x10 [ 787.887496][ T31] ? __pfx_kthread+0x10/0x10 [ 787.887521][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 787.887551][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 787.887573][ T31] ? __pfx_kthread+0x10/0x10 [ 787.887598][ T31] ret_from_fork+0x599/0xb30 [ 787.887635][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 787.887677][ T31] ? __switch_to_asm+0x39/0x70 [ 787.887701][ T31] ? __switch_to_asm+0x33/0x70 [ 787.887724][ T31] ? __pfx_kthread+0x10/0x10 [ 787.887749][ T31] ret_from_fork_asm+0x1a/0x30 [ 787.887792][ T31] [ 787.887801][ T31] Sending NMI from CPU 1 to CPUs 0: [ 788.056819][ C0] NMI backtrace for cpu 0 [ 788.056843][ C0] CPU: 0 UID: 0 PID: 7166 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.056868][ C0] Tainted: [L]=SOFTLOCKUP [ 788.056875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.056888][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 788.056922][ C0] RIP: 0010:__kasan_slab_alloc+0x2e/0x80 [ 788.056942][ C0] Code: 55 41 57 41 56 53 41 89 cf 89 d5 48 89 f3 49 89 fe f7 c2 00 04 00 00 74 05 e8 0e 42 00 00 48 85 db 74 45 48 8b 05 b2 69 9b 0d <48> 89 d9 48 29 c1 48 81 f9 00 00 20 00 0f 92 c1 48 85 c0 0f 95 c0 [ 788.056958][ C0] RSP: 0018:ffffc900034c77e0 EFLAGS: 00000286 [ 788.056973][ C0] RAX: ffff88823be00000 RBX: ffff888056c8a000 RCX: 0000000000000001 [ 788.056987][ C0] RDX: 0000000000082820 RSI: ffff888056c8a000 RDI: ffff88813fe27140 [ 788.057000][ C0] RBP: 0000000000082820 R08: 00000000ffffffff R09: 0000000000000000 [ 788.057012][ C0] R10: ffff88806184d000 R11: ffffffff81addd50 R12: 0000000000001000 [ 788.057025][ C0] R13: ffff88813fe27140 R14: ffff88813fe27140 R15: 0000000000000001 [ 788.057038][ C0] FS: 0000000000000000(0000) GS:ffff8881259dc000(0000) knlGS:0000000000000000 [ 788.057052][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 788.057065][ C0] CR2: 0000000000000000 CR3: 0000000052586000 CR4: 00000000003526f0 [ 788.057082][ C0] DR0: 0000000000000001 DR1: fffffffffffffff7 DR2: 0000000000000000 [ 788.057093][ C0] DR3: 000000000000000a DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 788.057105][ C0] Call Trace: [ 788.057112][ C0] [ 788.057122][ C0] __kmalloc_node_track_caller_noprof+0x526/0x820 [ 788.057151][ C0] ? __alloc_skb+0x27e/0x430 [ 788.057170][ C0] ? __alloc_skb+0x27e/0x430 [ 788.057185][ C0] kmalloc_reserve+0x136/0x290 [ 788.057204][ C0] __alloc_skb+0x27e/0x430 [ 788.057222][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 788.057239][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 788.057262][ C0] nsim_dev_trap_report_work+0x29a/0xb80 [ 788.057286][ C0] ? process_one_work+0x868/0x15a0 [ 788.057314][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 788.057332][ C0] ? process_one_work+0x868/0x15a0 [ 788.057355][ C0] process_one_work+0x93a/0x15a0 [ 788.057389][ C0] ? __pfx_process_one_work+0x10/0x10 [ 788.057417][ C0] ? assign_work+0x3c7/0x5b0 [ 788.057443][ C0] worker_thread+0x9b0/0xee0 [ 788.057480][ C0] kthread+0x711/0x8a0 [ 788.057500][ C0] ? __pfx_worker_thread+0x10/0x10 [ 788.057531][ C0] ? __pfx_kthread+0x10/0x10 [ 788.057551][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 788.057567][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 788.057585][ C0] ? __pfx_kthread+0x10/0x10 [ 788.057603][ C0] ret_from_fork+0x599/0xb30 [ 788.057628][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 788.057657][ C0] ? __switch_to_asm+0x39/0x70 [ 788.057677][ C0] ? __switch_to_asm+0x33/0x70 [ 788.057695][ C0] ? __pfx_kthread+0x10/0x10 [ 788.057728][ C0] ret_from_fork_asm+0x1a/0x30 [ 788.057756][ C0] [ 788.491949][T13809] usb 5-1: reset high-speed USB device number 15 using dummy_hcd [ 789.653703][ T44] usb 5-1: USB disconnect, device number 15 [ 790.642098][ T5838] Bluetooth: hci2: command 0x0406 tx timeout