last executing test programs: 11.380726453s ago: executing program 0 (id=1649): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)="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", 0x16a) 11.177146013s ago: executing program 0 (id=1653): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x2c8, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x26c, 0x8, 0x0, 0x1, [{0x1e8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x108, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xb0, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0a9dead91c7bebb4db027bf100"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xd3, @mcast1, 0x91b20}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}, {0x4}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r8, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(r7, 0xff08, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r9, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000380)='\x00\xfa\x84\xa8\xf07\xb5\n\x81\xa7\x89\x10\x8c6\xfa;\xe4\x82\xff\x81s\xef\a\xb1\xab\xc4\x18\x1a\xeb\xb1\xa9\x15sk\x8c\x11<\xa3j\xe0\x90C\xbcjB\xe0\x8f\x8a\x96\x0f\x9cp\xea\x9c\xae\xb9\x1a\xc5k\xc3g\xdcS\xff\xbf\xb5d\xc1oA\x1d\xee\x00'/83, 0x53) write$rfkill(r9, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.981644584s ago: executing program 4 (id=1668): socket$inet6(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)={0x141100}, 0x18) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000000040)='./file0/file1\x00', 0x80080, 0xc) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de10300f341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6c93778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d02ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc41127fe6155089b53901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca5051703d5d31dcfa72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef9117109b39857e2de2ef32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b000", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0x1, 0xfffffffffffffffc, 0x200000, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xdffffffffffffffe, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xa000, 0xfffffffd, 0x0, 0xee01, 0x7, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x2271, &(0x7f0000000500)={0x0, 0xf471, 0x20, 0x1, 0x1dc}, &(0x7f0000000180), &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) 7.682109403s ago: executing program 4 (id=1669): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x60002, 0x0, 0x1, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) setxattr$incfs_id(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000), 0x0, 0x0, 0x1) 7.462862599s ago: executing program 2 (id=1671): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="170000007000010000000000000000000700000090315defef90b1a249b8388b0fad5cb79d8774709425f0fadef1b6aeaca7f1eef7c849067eb8f36e6e339441b7568992f86d04bd622934942ea574c062975645b97a6170ff947c4b3f4719d9c84379d53cd7d5cf6c7c38a9c84008d0a5bbd40746ff364d05085e8c6a0c1c66ca7b922e996dcd7290cc3c0f9104909a69becc9f190a", @ANYRES32=0x0], 0x24}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x23) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4c0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x40}]}, 0x14, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 7.400858283s ago: executing program 0 (id=1672): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(0xffffffffffffffff, 0x1, 0x1200000000000, 0x2) mmap$snddsp(&(0x7f00000a7000/0x1000)=nil, 0x1000, 0xc, 0x10010, 0xffffffffffffffff, 0x5000) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x7, 0x1001, 0x0, 0x0}, {0x50, 0x4000, 0x0, 0x0}], 0x2}) 6.823300646s ago: executing program 1 (id=1674): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, 0x0, 0x0) 6.688597154s ago: executing program 1 (id=1676): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f00000001c0)=""/4096) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r2, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x4c02}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe4) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, r9, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) 6.416879968s ago: executing program 2 (id=1677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$isdn(0x22, 0x2, 0x25) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={&(0x7f0000001000)}, 0x1) r3 = socket$isdn(0x22, 0x2, 0x22) r4 = dup3(r2, r3, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000003c0)={r7, 0x0, 0x20}, 0xc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x318, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0xc0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT={0x44, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={r7}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000500)={r8, @in6={{0xa, 0x4e22, 0x800, @local, 0x188c}}}, &(0x7f0000000300)=0x84) r9 = socket(0x2, 0x80805, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000002c0)={r11, 0x0, 0x4, 0x9}, 0x10) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x80) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x4, 0x5559]}, &(0x7f0000000040), 0x8) r13 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x3, 0xd7}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r12, 0x4, 0x0}) io_uring_enter(r13, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.306218131s ago: executing program 3 (id=1678): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(r0, &(0x7f0000001080)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(0xffffffffffffffff, &(0x7f0000006b40)={0x2020}, 0x2020) write$UHID_DESTROY(r5, &(0x7f0000000180), 0xfffffffffffffd46) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x1, 0x0) fchdir(r6) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.252285914s ago: executing program 0 (id=1679): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc010) 5.052099278s ago: executing program 0 (id=1680): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000a00)={0x0, 0x7}, &(0x7f0000000a40)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000a80)={r2, @in6={{0xa, 0x4e22, 0xdc8d, @local, 0x3}}}, 0x84) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c0002001e0000000f00000006000100fe0f00000600050088a8000008000500", @ANYRES32, @ANYBLOB="08002a9c", @ANYRES32, @ANYBLOB], 0x60}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000f80)={'ip6gre0\x00', &(0x7f0000000f00)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x7f, 0x1ff, 0x28, @private2, @mcast1, 0x8, 0x80, 0x1, 0xfffffff9}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000280)=0x40) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000300)={0xc7, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000c80)={0xc, &(0x7f0000000b40)={0x40, 0x8, 0xe3, {0xe3, 0xe, "d3d481389713e6f00fdaef9bf6e8610d288137d4cc0ea5832380ea91a17b9d9269906b1a6c3ae64d84499a3f8d4fd276d7c69a68c3588a62c621870b5de0e21f9839b9cea1c3af8d023d02306d581050e484e508c369995396d6dcbe10c7d634d91b5f5a23eec3e2ff7a01e00c30b0f4748874a5b69818b0cd45a9823b6876616faa83f7f58db81400e664bf64bb5032eefd52239d0054d2db52e952d18904a1076ed0a3ff689b2c532323a654afff590a5e79264bb2d5148e363bbea09743df6a4532e7f2fdfce52125c59cbe2d031ea56ae122fa68a152dbe4a632ea2eb5546a"}}, &(0x7f0000000c40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ec0)={0x24, &(0x7f0000000cc0)={0x0, 0x30, 0x31, "e7283f639bd88f70bc1643777e6c9230f3110fb3be3c0d89c7869fb6c4edc0aa1c82c3dd92d8dbf9c401eec30cff4b9254"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000d80)={0x20, 0x80, 0x1c, {0x6, 0xf47, 0x2143, 0xc, 0x2, 0x4, 0x400, 0x10, 0xfeb6, 0x0, 0x3074, 0x8bf}}, 0x0, &(0x7f0000000e00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e40)={0x20, 0x87, 0x2, 0x10}, &(0x7f0000000e80)={0x20, 0x89, 0x2}}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)=@generic={&(0x7f0000000840)='./file0\x00', r0}, 0x14) pselect6(0x40, &(0x7f0000000000)={0x7c08, 0x7, 0x5, 0x180000000000000, 0x1, 0x1768, 0xfffffffffffffff7, 0x8}, &(0x7f0000000040)={0x10001, 0x467, 0x7fff, 0x3, 0x7, 0x10, 0x80, 0x9}, &(0x7f0000000080)={0x9, 0x100000001, 0x81, 0x6, 0x100000000, 0x5, 0xc, 0x101}, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xa, 0x7]}, 0x8}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x8, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet(r8, &(0x7f0000000940)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="84bd63cca3ec12094008f2e2ffd54e", 0xf}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xc}}, @ip_ttl={{0x10, 0x0, 0x2, 0x101}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}], 0x38}}, {{&(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000004c0)="a62c6937c47a98bb05a74337b819782333b834d58aa8cf17515ed7395549cae50ca1a4fec42fead7e68db0f1916ac0240f4417167b7d90c113817e11b15d322a956d950ea93bad043fa138907a8495147be48e3687a3348ca28ce3adac895516f8562bcbcd0b564342a02d062fdb2ac3214c287a8db324986a336fb997af93e2f2fea6aec1b943f200f33f7ec90356a731d2b8e3fe24110934c649dd6d0bab5219793e89799deaca79864aab345e3392b0582045b2fd4430ed965973abf655024416ff48832b27f9585065dd4b697671b6799cb3e65ead63893b0c2da4c4d741071db760f5248c72cfeb", 0xea}, {&(0x7f00000005c0)="0edf656b122d2d73dd8aef830b2b817c9b627cc02020b1120b6a5df88dcdb561cd80e06bba52be7df9c1e28b91f771517108bef2c1435a42ffa57ba73720fedbd66939ebf9d5d7ab7bbcc76fbdf5a62112e381c93458cd25e51b07b689a6f6aec1bba87a8c3b4294a34f3ba701223f60e2d0bdc82a60d48a4a4d32d23db27fca6fe3bb758f9f7b691e10b70a0c69ffaa31569668bbe909454c3b1a18fedb95bc910ff286a8fce720d416c69920a517c0fb0200bc26d15501d5fae02aca2a353f8e01c905b5e2fd154f0cab11d7b4e93c07af7d3839eb369711ccf1a1e079a455f1ce7deaf3e48dbee14da6fcc5", 0xed}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000007c0)="abddd93788055743af4dc93935a15c5e6bbbe386b77ddd3daceae70192c52dbb71529d15dd48b42c2b8eed900058c549630c33ba52145d40f8631b706606d2047c502e061f2c63e5a7f28f55a735847d045ca5ee83c55436986ff97032da15232bc92782d54ac8b4bcc3cc08d520503269", 0x71}], 0x1}}], 0x3, 0x20000008) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.006395233s ago: executing program 4 (id=1681): unshare(0x24020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000330c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000004c0)) 4.481294811s ago: executing program 2 (id=1682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000001000000", @ANYRES32=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x2000000000000147, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) epoll_create(0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x0, 0x25dfdbfb, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) r5 = dup(r3) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7], 0x44}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7], 0x44}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x115000}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'h'}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000400)={0x10000, 0x7000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0xdddd7000, 0x6000}) ioctl$PPPIOCSCOMPRESS(r5, 0x400c744d) (async) ioctl$PPPIOCSCOMPRESS(r5, 0x400c744d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r11 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x40000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800900}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x60, r11, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4009104) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800900}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x60, r11, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x4009104) 4.268790268s ago: executing program 3 (id=1683): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x1b0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x78, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x60, 0x1, [@m_simple={0x5c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d8"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xfc, 0x2, [@TCA_BPF_ACT={0xf8, 0x1, [@m_connmark={0xf4, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0xa5, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099eb87bbdf128c2d67d606cc26e787ce45c03fde1ba3b27d5dee1efa3eda225021429dfdbc555fa38db8cd8c88f888028d9c70ef8a8946d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0xa1ff}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.063252405s ago: executing program 3 (id=1684): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000003e40)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800), 0x0, &(0x7f0000000880)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ec0)="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", 0x15a}, {&(0x7f00000009c0)="f14a63bb", 0x4}, {&(0x7f0000000a00)="e6480a88bb08ab0609b9a158fdf4125884bbf0e504fa84b2cfe869fdd02ba6126018ab5642b6b8b76c0623ff7f45419d861e0a9504ffd8205dd63b5885c1ae14e701c75cb413a574741b4574308a5a7ffdad48596d6f2db1d7edb22cfb7dccd854ddd5be5ed57e8d7adacdaa5bc59b787bce", 0x72}, {&(0x7f0000000a80)="e3c84c2ce3d19ef4ef0026618057d2a03e3acb58867f842426a6c71759f6f5a6a3fd71a9ca181a49b06268407bd5625acfeeaa36b42bcbd9416a0b44a7da2d18f869c5587442c249ba88915e135969dc728680bd31cd920d0b019c4d0109efb1c36618", 0x63}, {&(0x7f0000000b00)="1983b266e5501a759476ed44b37a56d4012cc70a2086749817443e5aebe7f2fdb0392416101ac36d290b46e15c638106cfb0d97d65586c80", 0x38}, {&(0x7f0000000b40)="b85cb727004ebf02e345014dd630d5542ef214dfd967a5876fe7ee0277d7dbb10f0d4339489857886275d9b04695a0ff61e018c94828cc82f0b646ee8de3d1ccd6e2856291da53f7c886a8e079b34dc35d4300b18377317349082790728eee5110f4ce30ded0fd264d5f1fdf9e1c9a3b84f157b559ae57cb398e3cac8866f12230004b49232a0020db0c20e05e0a31c8d57032ca7c6355ee333b7085598082894eb52672ad27830603a0d5f8bf6cecd637ce087fcd0ca91fcc30f2026a2f3b9b73fe6c2124e85cccd535069e159dd1718e19ae4bb74297605bdd1c3bc554056c", 0xe0}, {&(0x7f0000000cc0)="29ac9441109dd79071fef927cec720ebdd218fbfc84ba1420e9e3673e583fa0de9b0535d40e1ec65cad6f52b75e536614d9644aae4459695c185fab913757109cda157d2948bd181fe072dbe18cf030ce078dbf0093f3da9805e1fcd276a46ef7becde9c8e8997bbe6cbee4d42ec48a4cb3b8450221a8e68bfc1a41fb9cb49db8e3e34a13c9d2c07049f678e2e5f6ea68146607e9ef64bf1cfbc9a7e5ab4d28455c83865e3d5a9a6a6000000000000000000000001000000", 0xb8}], 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000100000001000000", @ANYRES32=r3, @ANYBLOB="180000000100000001000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="2c000000010000e4831f1dae6ca2fc1ed50001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x6c, 0x4000000}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002ec0)="1d81542776c6cd2816c529575043a3e3ab00b99a3e30cf79b4c6b52b85586cf4bc7739daf33fcda1ef8fe2f6fe289b690d943bbd1be2977d77cc6368f5da45ceeb162ff8eb1aa53128c6bf1064146855fc11b7609eeb56bec0325bf3241dd0bc5dd2e5f7fefce7f6d19cbf80a9c1e7f00f424a49401ecdbbde781b6b4886643014f4f938214877027c20d3af47bed8bd42eb4edeba69ec69f7a392648e4c4efee647de59ccf2db8685e6615560c0b065f8c1e06e891a7d300190810e6823a2fc56", 0xc1}, {&(0x7f0000002fc0)="7fdf0f82a4c05be39236e2b48e49455bbb78d4320da2c07b39b8963d16859447363dcb6d8f39cb41db06f579a372eba50dd8065f113745d13435d5f6bd201e4d5ca65f4b146ee526037e119d7c7a04ddebba4657ec4ab09a5ae49b4a2fdd05a8accfdfff3295d9edfec1508015a16f57331ec91a703bba2b3ba2574e313143e0041f3f719c4de6c66947b0c0c8ad4ef48389a4a8ac025b678721d17a5b9694eb0c175adf43783a", 0xa7}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="340000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="24000000010000000100000063d8bf4d655f2a99323544d43d7b7a2fa3440a326bb23f2d290bd8c60d614a13b7442547469d9604cf17d0f52f7754f7166ca4cb31455023b4edb11a14ee64a3c2f3ec8346d8acc00e0f212082bdcadc4271767e36288e5c43be625056a0aafdc179447a6ae5bb0fbe4e583de4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYRES32], 0x8c, 0x4040880}}, {{&(0x7f0000003180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000003200)="d4b0666a90cc787ce3e5e396af522d2e76cb7378bb4c3e53e6f9356922c51a612ee56b5b1dd1a5d6437ec35d00dcbc08ce411cd4c4bb50b1ba6dd559abab2b047c7a1531d21cdc900ea6f8a3c0301d0ff9cd211a97b416bb3d8ee858b1cb0d12939fab3fc980eb5f7068cb3651261cee50bfb6c575a1db5cdba5a75c1f64e7875f1ffef0c5680bd0df35971e5485847fae681b2c7964bdda7203560d51b36eebfab56585a3f42745c93d9e6ee62d7bbc0faef5bcf5ed13b7b528fcab2955486256bbbf2d640f5a49387e62cd720b1eb94ca457bf2ec0fcbe26a8db1cf8b007670354bf16cc33d3f777bb617cabad5317d2cc21bf7413d21077ba8f1a47", 0xfd}, {&(0x7f0000000740)="6a47141597f89c644245c15299920ca2135944aea1ce97e60c1db12571b648a6d1e9b6198693539e641e3e079e589b101f4f04b9b7c330f0eab163ea607fed59854846fabf7f02a89d051d70b4904775345980bddda2fbdbc2a47fe6a281809d249a3c794db67d312b7949139354225c44c4e38c43e9c05dfcbe4f91a098d7ddb6fd0eab49fe458408dd000fe4413562e3f6b4eafcdcc3ea13576f6fcf6fc2da68ee0c8f7594b2bce0d3b7f87ffa39795b7c6304d985eec4ae9798eb4505912343dd387bf3209f", 0xc7}], 0x2, &(0x7f0000003480)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18}}], 0x4c, 0x10}}, {{&(0x7f0000003500)=@abs={0x3, 0x0, 0x4e23}, 0x6e, &(0x7f0000003580), 0x0, &(0x7f0000003680)=[@cred={{0x18}}], 0x18, 0x4080}}, {{&(0x7f00000036c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000003740)="00f1de37acba0f46b2ddf8278706d86cd2900cfb2f9fed7fbba88a08a4438c4fef4bc82c68c38c0ccc1907bb2d85c5e45f2c79cdea1161f3e1e3faa3ae1ccf7d7a96475e03b111e41877a8d6a7a5ed470d921d82045106b50b1d0bae9a2454edd366abc1a08012df9630e9c5598b979ce7d518e93f340ef3b8bb071395b36ee10104351ec67cd34f6a69f7e655cbdec272f697799c8b400d460d7339ebd3ca9797013defad5285dbc4304590f8024244", 0xde}], 0x1, &(0x7f0000000d80)=[@rights={{0x10, 0x1, 0x1, [r2]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x7c, 0x20040885}}, {{&(0x7f0000003bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c40)}, {&(0x7f0000003c80)="1d888228362b58ebe89de9ce20ca97c22c3a80ca2e1b25c981aee82c25b96d5838348f1d3331449a08c9d06d36dbae9c3f9059f00df32358eaff7c6dc08476ef81f45e", 0x43}], 0x2, &(0x7f0000003e00)=ANY=[@ANYBLOB="180008000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac9102a596ca1ffe01000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r0], 0x30, 0x8040}}], 0x7, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020854e8c4b94a5715f8227fd9708596b6fea1c762e45f247a6fee89c1cffa964866b4b54712851c8825afe6c61ba5ff4a398fb4f0cd399ee1f219797c6c610510b910e2ca1b5d92eaf2abad3c37d9221737d78dec32dd565e2f63e727499d80bbabdb97642cbf79de1c34161d199113487088fb6732e2200260c008d5867c13047abbab14656fbd066a0bf8daa27a014246718ba74fc628c3f44ce67837e7c8f3524dedce27b632394fa3a809e9ba8"], 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x111, 0x9}}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) syz_clone(0x93f0b91, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="a518451fe7608b51c22e1af68c1c0f4adee2be08e7193bf02647ecf46421145e7e84df44c4307bc6b8dc6ab1b6a5189981661082c909c8fe3534f41149d8731dd22fd4548e940f4f83a458633dde245ec4c4842c1ea403be6ca23ba19c58ce7d4fee8625e643a1fa439f975d5a583397ad2ff7aae43b3fec4d143325c7bc74d0f062556adea89a2280dac82da0bf0add4de4473dc7b6654891f318afec45172fa7", @ANYBLOB="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"], 0x13c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x2}]}, 0x8) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) 3.970713345s ago: executing program 2 (id=1685): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0xb, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x300, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) openat$urandom(0xffffff9c, &(0x7f0000000380), 0x52c01, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000300), 0x4) r8 = openat$sw_sync_info(0xffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) write$binfmt_elf64(r7, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109028c00030156c0020904000000010100000a24010101bb0201021124060104050700090008000300020003052405060f0c24020203120250800009010b24060502020a004ef1000904010000010200000904010101010200000905010920009301050725010005480f090402000001020000090402010101020000090582"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410030}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x194, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15de}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3937}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf186}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c2}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20048001}, 0x24004800) 3.554715638s ago: executing program 4 (id=1686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000004c0)={{0x4, 0x5000, 0xa, 0x2, 0x81, 0xc, 0xe2, 0x1, 0x0, 0x30, 0xc8, 0xe1}, {0x2000, 0xffff1000, 0x10, 0x2, 0x8, 0x7, 0x2, 0x12, 0x2, 0x0, 0xff, 0x7}, {0x80a0000, 0xdddd0000, 0xd, 0x0, 0xc, 0x9, 0xf7, 0xa6, 0x7, 0xe, 0x81, 0x1}, {0xdddd0000, 0x4, 0x9, 0xfa, 0x64, 0x3, 0xf5, 0x10, 0x7, 0x0, 0xe7, 0x3}, {0xdddd1000, 0x166772000, 0xa, 0x1, 0x0, 0x5, 0x3, 0x9, 0xb, 0x3, 0x1, 0x86}, {0x2, 0x3000, 0x3, 0x0, 0x80, 0x24, 0x1, 0x8, 0x9b, 0xb, 0x55, 0x1}, {0x0, 0x2a2a0000, 0x4, 0x7, 0x3, 0x6, 0x81, 0x3, 0x0, 0x6c, 0x5, 0x7}, {0x4000, 0xf000, 0x5, 0x7, 0x81, 0x1, 0x6, 0x8, 0xad, 0xff, 0x23, 0x5b}, {0xf000}, {0x1, 0x9}, 0x80040008, 0x0, 0xeeee8000, 0x40, 0x5, 0x2001, 0xdddd1000, 0x0, [0x7, 0x9, 0x7, 0x7]}) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x20000808) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0xb4, r3, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x0, 0x6, 0x5, 0x6}, 0x17, [0x4, 0x0, 0x4, 0xfff, 0x2, 0x3, 0x9, 0x0, 0x4d4, 0x4, 0x10000, 0x7, 0x1, 0x3, 0x8a, 0x8, 0x2, 0x7fff, 0xfff, 0x5, 0x5, 0x10000, 0x5, 0xfffffffb, 0x2, 0x3, 0x5, 0x3, 0x8, 0x9, 0x6, 0x3, 0x4, 0x1, 0x9, 0x4, 0xfffffff8, 0x9, 0x9, 0x10, 0x5, 0xb36e, 0x87a5, 0xe6f, 0x1, 0x2, 0x2, 0x4, 0x7, 0x1000, 0x6, 0x4e523b4e, 0xfffffff9, 0xfffffff9, 0x6, 0x6, 0x5, 0xc, 0x2, 0xffffffff, 0x1, 0xf65e, 0x6, 0x9], [0x8, 0x1, 0x3, 0x7, 0x9, 0x6, 0x7, 0x2, 0x8, 0xa1, 0x8, 0x80000001, 0x6, 0x228, 0x4, 0x5, 0x2, 0x6a12, 0x6, 0x6, 0x401, 0x6b45, 0x10, 0x6e, 0xffffffff, 0x3, 0xd, 0x74da, 0x7, 0x6, 0x200, 0xfffffffb, 0x8, 0x10, 0x3, 0x4e, 0x5, 0x7fffffff, 0x5, 0x4, 0x5, 0x183, 0x5, 0x2b61, 0x9, 0xc, 0x8, 0x7, 0x0, 0xe, 0x21d26388, 0x2, 0x6, 0x8, 0xe8, 0xe, 0x9, 0x1, 0x14, 0x6, 0x9, 0x2, 0x4, 0xe], [0x8, 0x0, 0x3, 0x5, 0x2, 0x0, 0x6, 0x40000, 0x1, 0x8, 0x8, 0x2, 0x8, 0x4, 0x7, 0xfffffbff, 0x6, 0x0, 0x1, 0x0, 0x2, 0x8000, 0x4, 0x730, 0x3, 0x4, 0x8caf, 0x1, 0x0, 0x6, 0xe, 0x92, 0x5, 0x48000, 0x9, 0x1c0000, 0x48fc, 0x10000, 0x100, 0x0, 0x10001, 0xff, 0xffffcc05, 0xa9e, 0x4, 0x79, 0x0, 0x1, 0x4, 0x5, 0x5, 0x5, 0x4a09, 0x7, 0x6, 0x10001, 0x401, 0x2, 0x3, 0xfffffff9, 0x40, 0x10001, 0xfffffff9, 0x3], [0x7, 0x273f, 0xd4e, 0x10001, 0x4, 0x9, 0x40c8, 0x7fffffff, 0xc, 0x0, 0x4, 0x8, 0x4, 0x6, 0xe3e6, 0x9, 0x5, 0x8, 0x5, 0x3, 0x2, 0x401, 0x38, 0xf, 0x2, 0x401, 0x2, 0xff, 0x7fffffff, 0x2, 0x8, 0xd, 0x9, 0x2, 0x2, 0x3, 0xffffffff, 0x7f, 0x259a, 0x1, 0x5, 0x800, 0xe, 0x2e33c25b, 0x3, 0x0, 0x7, 0x2, 0x8, 0x800, 0x7, 0x7, 0xe, 0x6, 0xc, 0xb, 0x9, 0xfffffffc, 0x0, 0xf5, 0x9, 0x9, 0x4, 0x4]}, 0x45c) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0) read$FUSE(r7, &(0x7f0000007040)={0x2020}, 0x2020) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x7ffffffd, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0xfff, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x1, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x6, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x20, 0x700, 0x6, 0x200, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x65, 0x0, 0xa, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0xc, 0xfe, 0x0, 0x9, [0x6, 0xb5da]}, @timestamp={0x44, 0x18, 0x8b, 0x0, 0xc, [0x10001, 0x2, 0xffff8000, 0x5, 0x8]}]}}}}}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000880)={r10, @remote, @dev={0xac, 0x14, 0x14, 0x2a}}, 0xc) 3.21998628s ago: executing program 4 (id=1687): add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000540), 0x80) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x64}}, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x1100, 0x30000}}], 0x300, 0xf00) 3.107338097s ago: executing program 1 (id=1688): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="170000007000010000000000000000000700000090315defef90b1a249b8388b0fad5cb79d8774709425f0fadef1b6aeaca7f1eef7c849067eb8f36e6e339441b7568992f86d04bd622934942ea574c062975645b97a6170ff947c4b3f4719d9c84379d53cd7d5cf6c7c38a9c84008d0a5bbd40746ff364d05085e8c6a0c1c66ca7b922e996dcd7290cc3c0f9104909a69becc9f190a", @ANYRES32=0x0], 0x24}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x23) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4c0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x40}]}, 0x14, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2.906128629s ago: executing program 4 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0xb, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x300, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) openat$urandom(0xffffff9c, &(0x7f0000000380), 0x52c01, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000300), 0x4) r8 = openat$sw_sync_info(0xffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r6, {r5}}, './file0\x00'}) write$binfmt_elf64(r7, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) syz_usb_connect$uac1(0x2, 0x9e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109028c00030156c0020904000000010100000a24010101bb0201021124060104050700090008000300020003052405060f0c24020203120250800009010b24060502020a004ef1000904010000010200000904010101010200000905010920009301050725010005480f090402000001020000090402010101020000090582"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x410030}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x194, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15de}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0xec, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3937}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf186}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c2}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20048001}, 0x24004800) 1.790687973s ago: executing program 0 (id=1690): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xdaf}}, './file0\x00'}) userfaultfd(0x80801) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x14, 0x9, 0xf8, 0xfffffffffffffe08, 0x0, 0x0}) 1.785164865s ago: executing program 1 (id=1691): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = userfaultfd(0x80001) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x7, 0x39, &(0x7f0000000500)=""/57, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000005c0)=[{0x1, 0x5, 0xd, 0xa}, {0x1, 0x5, 0x4, 0x2}, {0x3, 0x3, 0xb, 0x8}], 0x10, 0x3ff}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) 602.809645ms ago: executing program 1 (id=1692): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x2000010) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x800) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) userfaultfd(0x80001) r5 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000300)}) 534.644458ms ago: executing program 2 (id=1693): socket$inet6(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000100)={0x141100}, 0x18) read$FUSE(r0, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000000040)='./file0/file1\x00', 0x80080, 0xc) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de10300f341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6c93778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d02ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc41127fe6155089b53901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca5051703d5d31dcfa72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef9117109b39857e2de2ef32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b000", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x3, {0x1, 0xfffffffffffffffc, 0x200000, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xdffffffffffffffe, 0x9, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xa000, 0xfffffffd, 0x0, 0xee01, 0x7, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x2271, &(0x7f0000000500)={0x0, 0xf471, 0x20, 0x1, 0x1dc}, &(0x7f0000000180), &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r2], 0x40c}}, 0x0) 396.851324ms ago: executing program 3 (id=1694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x703a43, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x800, 0x20, &(0x7f0000001180)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 285.387532ms ago: executing program 1 (id=1695): write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) lseek(r1, 0x6, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000010c0)={0x9fa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "e1bb4986300be5"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000006280)={0x0, r2, "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", "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"}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000180)={0x4000, 0x14000}) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="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", 0x2000, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, r4, &(0x7f00000002c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000100)=@random="2113bb09021054807fea", 0xa, 0x0) 239.068463ms ago: executing program 3 (id=1696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0xc010) 22.648321ms ago: executing program 3 (id=1697): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000008, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x672481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x8100000, 0x1000, &(0x7f0000748000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = getpid() syz_pidfd_open(r3, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x9d8, 0x0, &(0x7f0000000300)="00209736053434826f3f0e34137f5799938fdade8eb4e008569ce27c24d77a4c448bb6c746ed75d2dfe9511754ff23ee36666bfc8e19dedead", 0x0, 0x39}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) tkill(r3, 0x2d) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f00000c7000/0x2000)=nil, 0x2000, 0x8003, 0x0, 0x4, 0x0) close$binfmt(r7) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x3f7, 0x4, 0x70bd26, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048004}, 0x14) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x10, 0xffffffffffffffff, 0xffffd000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) readv(r9, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/32, 0x20}], 0x1) syz_open_procfs(r3, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x8000, 0x3) 0s ago: executing program 2 (id=1698): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r6) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r7, 0x80dc5521, &(0x7f00000001c0)=""/4096) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r2, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x4c02}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe4) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000301, r9, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): ptors, different from the interface descriptor's value: 3 [ 423.403116][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 423.443324][ T5865] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.453907][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.485303][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 423.512447][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.532719][ T10] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 423.572005][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 423.585103][ T10] usb 1-1: Product: syz [ 423.589692][ T10] usb 1-1: Manufacturer: syz [ 423.594415][ T10] usb 1-1: SerialNumber: syz [ 423.604012][ T10] usb 1-1: config 0 descriptor?? [ 423.619998][T10107] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 424.364843][ T5865] usb 2-1: GET_CAPABILITIES returned 0 [ 424.382596][ T5865] usbtmc 2-1:16.0: can't read capabilities [ 424.389008][ T10] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 424.410476][ T10] usb 1-1: USB disconnect, device number 67 [ 424.553734][ T5865] usb 3-1: USB disconnect, device number 51 [ 424.991963][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 425.009146][T10125] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.016634][T10125] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.753941][ T979] usb 2-1: USB disconnect, device number 53 [ 425.767378][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 425.969520][ T10] usb 3-1: config 0 has no interfaces? [ 425.990255][ T10] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 426.066181][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.075046][ T10] usb 3-1: Product: syz [ 426.083541][ T10] usb 3-1: Manufacturer: syz [ 426.089073][ T10] usb 3-1: SerialNumber: syz [ 426.139475][ T10] usb 3-1: config 0 descriptor?? [ 426.297869][ T5865] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 426.648751][T10141] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 426.678304][ T6650] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 426.689508][ T10] usb 3-1: USB disconnect, device number 52 [ 426.819212][ T6650] usb 1-1: device descriptor read/64, error -71 [ 427.058224][ T6650] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 427.167510][ T30] audit: type=1326 audit(1759122265.744:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.199086][ T30] audit: type=1326 audit(1759122265.744:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.225337][ T30] audit: type=1326 audit(1759122265.744:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.280063][ T30] audit: type=1326 audit(1759122265.744:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.310464][ T6650] usb 1-1: device descriptor read/64, error -71 [ 427.338361][ T30] audit: type=1326 audit(1759122265.744:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.444734][ T30] audit: type=1326 audit(1759122265.744:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.476227][ T6650] usb usb1-port1: attempt power cycle [ 427.622937][ T30] audit: type=1326 audit(1759122265.754:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.882312][ T30] audit: type=1326 audit(1759122265.754:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.908328][ T30] audit: type=1326 audit(1759122265.754:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 427.937799][ T6650] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 427.970151][ T6650] usb 1-1: device descriptor read/8, error -71 [ 428.147013][ T30] audit: type=1326 audit(1759122265.754:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10164 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000 [ 428.386682][ T6650] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 428.442238][ T6650] usb 1-1: device descriptor read/8, error -71 [ 428.570437][ T6650] usb usb1-port1: unable to enumerate USB device [ 429.817697][ T5865] usb 4-1: unable to get BOS descriptor or descriptor too short [ 429.857014][ T5865] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 429.865951][ T5865] usb 4-1: can't read configurations, error -71 [ 430.456683][ T6650] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 431.079121][T10184] syz.4.1227 (10184): drop_caches: 2 [ 431.157783][ T6650] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 431.205699][ T6650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.218445][ T6650] usb 3-1: Product: syz [ 431.223835][ T6650] usb 3-1: Manufacturer: syz [ 431.229217][ T6650] usb 3-1: SerialNumber: syz [ 431.259955][ T6650] usb 3-1: config 0 descriptor?? [ 431.650951][T10218] syzkaller1: entered promiscuous mode [ 431.656622][T10218] syzkaller1: entered allmulticast mode [ 431.773078][ T6650] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 431.783000][ T6650] airspy 3-1:0.0: Could not detect board [ 431.794167][ T6650] airspy 3-1:0.0: probe with driver airspy failed with error -71 [ 431.859863][ T6650] usb 3-1: USB disconnect, device number 53 [ 432.544467][T10232] fuse: Bad value for 'fd' [ 432.598906][T10232] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1244'. [ 432.690527][ T10] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 432.828702][T10245] FAULT_INJECTION: forcing a failure. [ 432.828702][T10245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.853427][T10245] CPU: 1 UID: 0 PID: 10245 Comm: syz.3.1248 Not tainted syzkaller #0 PREEMPT(full) [ 432.853454][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 432.853464][T10245] Call Trace: [ 432.853471][T10245] [ 432.853477][T10245] dump_stack_lvl+0x189/0x250 [ 432.853501][T10245] ? __pfx____ratelimit+0x10/0x10 [ 432.853521][T10245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.853539][T10245] ? __pfx__printk+0x10/0x10 [ 432.853560][T10245] ? __might_fault+0xb0/0x130 [ 432.853593][T10245] should_fail_ex+0x414/0x560 [ 432.853621][T10245] _copy_from_user+0x2d/0xb0 [ 432.853642][T10245] get_compat_msghdr+0xad/0x4a0 [ 432.853668][T10245] ? __pfx_get_compat_msghdr+0x10/0x10 [ 432.853703][T10245] ___sys_sendmsg+0x193/0x2a0 [ 432.853737][T10245] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.853789][T10245] ? __fget_files+0x2a/0x420 [ 432.853803][T10245] ? __fget_files+0x3a0/0x420 [ 432.853826][T10245] __sys_sendmsg+0x164/0x220 [ 432.853848][T10245] ? __pfx___sys_sendmsg+0x10/0x10 [ 432.853893][T10245] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.853913][T10245] __do_fast_syscall_32+0xb6/0x2b0 [ 432.853933][T10245] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.853954][T10245] do_fast_syscall_32+0x34/0x80 [ 432.853972][T10245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 432.853992][T10245] RIP: 0023:0xf7f04539 [ 432.854006][T10245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 432.854021][T10245] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 432.854038][T10245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 432.854050][T10245] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.854060][T10245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 432.854068][T10245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 432.854077][T10245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 432.854103][T10245] [ 433.886524][T10261] netlink: 'syz.2.1253': attribute type 21 has an invalid length. [ 433.895099][T10261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1253'. [ 435.098453][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 435.108203][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 435.116657][ T10] usb 1-1: can't read configurations, error -71 [ 435.298742][ T5872] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 435.651421][T10276] netlink: 'syz.0.1257': attribute type 4 has an invalid length. [ 435.704269][T10277] netlink: 'syz.0.1257': attribute type 4 has an invalid length. [ 435.999579][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 436.175632][T10289] bridge0: port 3(syz_tun) entered blocking state [ 436.207768][T10289] bridge0: port 3(syz_tun) entered disabled state [ 436.223042][T10289] syz_tun: entered allmulticast mode [ 436.256543][T10289] syz_tun: entered promiscuous mode [ 436.264823][T10289] bridge0: port 3(syz_tun) entered blocking state [ 436.271521][T10289] bridge0: port 3(syz_tun) entered forwarding state [ 436.580446][ T5872] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 437.227297][ T5915] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 437.260657][T10318] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1271'. [ 437.339189][T10321] syzkaller1: entered promiscuous mode [ 437.353712][T10321] syzkaller1: entered allmulticast mode [ 437.447992][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 437.470648][ T5915] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 437.488271][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.524817][ T5915] usb 1-1: config 0 has no interface number 0 [ 437.551212][ T5915] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 437.582238][ T5915] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 46383, setting to 1024 [ 437.614534][ T5915] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 437.643270][ T5915] usb 1-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.710406][ T5915] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 437.722757][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.761319][ T5915] usb 1-1: Product: syz [ 437.773601][ T5915] usb 1-1: Manufacturer: syz [ 437.790375][ T5915] usb 1-1: SerialNumber: syz [ 437.810621][ T5915] usb 1-1: config 0 descriptor?? [ 437.826452][T10314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 437.835053][T10314] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 438.119402][ T5872] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 438.292851][T10349] netlink: 'syz.4.1280': attribute type 4 has an invalid length. [ 438.443888][T10360] syz_tun: entered allmulticast mode [ 438.507013][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 439.340641][T10360] syz_tun (unregistering): left allmulticast mode [ 439.418510][ T6063] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 439.586452][ T6063] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 439.595793][ T6063] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.637074][ T6063] usb 2-1: config 0 has no interface number 0 [ 439.659946][ T6063] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 439.703298][ T6063] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 439.729272][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.748015][ T6063] usb 2-1: Product: syz [ 439.757897][ T6063] usb 2-1: Manufacturer: syz [ 439.767960][ T6063] usb 2-1: SerialNumber: syz [ 439.780129][ T6063] usb 2-1: config 0 descriptor?? [ 439.796175][T10361] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 439.818684][T10361] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 439.894592][ T6063] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 439.963595][ T5915] usb 1-1: probing VID:PID(0424:012C) [ 439.972483][ T5915] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B [ 439.988357][ T5915] usb 1-1: vub300 testing BULK OUT EndPoint(1) 0F [ 440.003146][ T5915] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 440.018682][ T5915] vub300 1-1:0.133: probe with driver vub300 failed with error -22 [ 440.040830][ T5915] usb 1-1: USB disconnect, device number 74 [ 440.072848][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.079223][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.777858][ T5865] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 441.058234][ T5865] usb 3-1: Using ep0 maxpacket: 8 [ 441.230557][T10383] sctp: [Deprecated]: syz.0.1291 (pid 10383) Use of int in maxseg socket option. [ 441.230557][T10383] Use struct sctp_assoc_value instead [ 441.255665][ T5865] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 441.266554][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.276845][ T5865] usb 3-1: Product: syz [ 441.281995][ T5865] usb 3-1: Manufacturer: syz [ 441.286674][ T5865] usb 3-1: SerialNumber: syz [ 441.296728][ T5865] usb 3-1: config 0 descriptor?? [ 441.310682][ T5865] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 441.414284][ T5915] usb 2-1: USB disconnect, device number 54 [ 442.030161][ T5865] gspca_m5602: Failed to find a sensor [ 442.082672][ T5865] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 442.097093][ T5872] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 442.118401][ T5865] usb 3-1: USB disconnect, device number 54 [ 442.304294][T10397] FAULT_INJECTION: forcing a failure. [ 442.304294][T10397] name failslab, interval 1, probability 0, space 0, times 0 [ 442.343428][T10397] CPU: 1 UID: 0 PID: 10397 Comm: syz.3.1296 Not tainted syzkaller #0 PREEMPT(full) [ 442.343453][T10397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 442.343464][T10397] Call Trace: [ 442.343471][T10397] [ 442.343479][T10397] dump_stack_lvl+0x189/0x250 [ 442.343503][T10397] ? __pfx____ratelimit+0x10/0x10 [ 442.343523][T10397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.343544][T10397] ? __pfx__printk+0x10/0x10 [ 442.343572][T10397] ? __pfx___might_resched+0x10/0x10 [ 442.343589][T10397] ? fs_reclaim_acquire+0x7d/0x100 [ 442.343610][T10397] should_fail_ex+0x414/0x560 [ 442.343640][T10397] should_failslab+0xa8/0x100 [ 442.343666][T10397] __kmalloc_noprof+0xcb/0x4f0 [ 442.343686][T10397] ? kfree+0x4d/0x440 [ 442.343703][T10397] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.343728][T10397] tomoyo_realpath_from_path+0xe3/0x5d0 [ 442.343749][T10397] ? tomoyo_domain+0xd9/0x130 [ 442.343774][T10397] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 442.343798][T10397] tomoyo_path_number_perm+0x1e8/0x5a0 [ 442.343824][T10397] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 442.343867][T10397] ? __lock_acquire+0xab9/0xd20 [ 442.343935][T10397] ? __fget_files+0x2a/0x420 [ 442.343957][T10397] ? __fget_files+0x3a0/0x420 [ 442.343971][T10397] ? __fget_files+0x2a/0x420 [ 442.343991][T10397] security_file_ioctl_compat+0xcb/0x2d0 [ 442.344017][T10397] __ia32_compat_sys_ioctl+0x128/0x840 [ 442.344042][T10397] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 442.344064][T10397] ? __fget_files+0x3a0/0x420 [ 442.344087][T10397] ? fput+0xa0/0xd0 [ 442.344105][T10397] ? ksys_write+0x22a/0x250 [ 442.344137][T10397] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.344159][T10397] __do_fast_syscall_32+0xb6/0x2b0 [ 442.344180][T10397] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.344200][T10397] do_fast_syscall_32+0x34/0x80 [ 442.344220][T10397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 442.344240][T10397] RIP: 0023:0xf7f04539 [ 442.344255][T10397] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 442.344270][T10397] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 442.344288][T10397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 442.344300][T10397] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.344311][T10397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.344321][T10397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 442.344331][T10397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 442.344359][T10397] [ 442.605535][T10397] ERROR: Out of memory at tomoyo_realpath_from_path. [ 443.235035][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 443.276187][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 443.292056][T10382] syz.4.1290 (10382): drop_caches: 2 [ 443.306553][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.343340][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.392685][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.436619][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.466219][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.484950][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.518623][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.549781][ T5865] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 443.559944][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 443.596153][ T5865] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 443.786699][T10415] fido_id[10415]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 443.858494][ T5865] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 444.040407][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 444.128153][ T6063] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 444.159561][T10427] CUSE: info not properly terminated [ 444.766014][ T5865] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 444.775733][ T5865] usb 1-1: can't read configurations, error -22 [ 444.918171][ T6063] usb 3-1: Using ep0 maxpacket: 8 [ 444.928383][ T6063] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 444.938425][ T5865] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 444.958167][ T6063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.966199][ T6063] usb 3-1: Product: syz [ 444.993981][ T6063] usb 3-1: Manufacturer: syz [ 444.999866][ T6063] usb 3-1: SerialNumber: syz [ 445.009871][ T6063] usb 3-1: config 0 descriptor?? [ 445.098156][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 445.105672][ T5865] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 445.115028][ T5865] usb 1-1: can't read configurations, error -22 [ 445.139299][ T5865] usb usb1-port1: attempt power cycle [ 445.225104][ T6063] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 445.333845][T10435] input: syz0 as /devices/virtual/input/input23 [ 445.368883][T10434] FAULT_INJECTION: forcing a failure. [ 445.368883][T10434] name failslab, interval 1, probability 0, space 0, times 0 [ 445.404701][T10434] CPU: 0 UID: 0 PID: 10434 Comm: syz.3.1311 Not tainted syzkaller #0 PREEMPT(full) [ 445.404725][T10434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.404735][T10434] Call Trace: [ 445.404743][T10434] [ 445.404750][T10434] dump_stack_lvl+0x189/0x250 [ 445.404776][T10434] ? __pfx____ratelimit+0x10/0x10 [ 445.404795][T10434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.404816][T10434] ? __pfx__printk+0x10/0x10 [ 445.404844][T10434] ? __pfx___might_resched+0x10/0x10 [ 445.404860][T10434] ? fs_reclaim_acquire+0x7d/0x100 [ 445.404881][T10434] should_fail_ex+0x414/0x560 [ 445.404911][T10434] should_failslab+0xa8/0x100 [ 445.404937][T10434] __kmalloc_noprof+0xcb/0x4f0 [ 445.404957][T10434] ? kfree+0x4d/0x440 [ 445.404974][T10434] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 445.404999][T10434] tomoyo_realpath_from_path+0xe3/0x5d0 [ 445.405020][T10434] ? tomoyo_domain+0xd9/0x130 [ 445.405041][T10434] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 445.405066][T10434] tomoyo_path_number_perm+0x1e8/0x5a0 [ 445.405093][T10434] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 445.405133][T10434] ? __lock_acquire+0xab9/0xd20 [ 445.405177][T10434] ? __fget_files+0x2a/0x420 [ 445.405197][T10434] ? __fget_files+0x3a0/0x420 [ 445.405211][T10434] ? __fget_files+0x2a/0x420 [ 445.405231][T10434] security_file_ioctl_compat+0xcb/0x2d0 [ 445.405258][T10434] __ia32_compat_sys_ioctl+0x128/0x840 [ 445.405283][T10434] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 445.405305][T10434] ? __fget_files+0x3a0/0x420 [ 445.405328][T10434] ? fput+0xa0/0xd0 [ 445.405347][T10434] ? ksys_write+0x22a/0x250 [ 445.405379][T10434] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.405402][T10434] __do_fast_syscall_32+0xb6/0x2b0 [ 445.405423][T10434] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.405446][T10434] do_fast_syscall_32+0x34/0x80 [ 445.405466][T10434] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 445.405487][T10434] RIP: 0023:0xf7f04539 [ 445.405502][T10434] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 445.405518][T10434] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 445.405536][T10434] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004008af30 [ 445.405556][T10434] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 445.405567][T10434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.405577][T10434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 445.405587][T10434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 445.405615][T10434] [ 445.405623][T10434] ERROR: Out of memory at tomoyo_realpath_from_path. [ 445.450918][T10435] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 445.713081][ T5865] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 445.816562][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 445.824854][ T5865] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 445.878216][ T5865] usb 1-1: can't read configurations, error -22 [ 446.047931][ T5865] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 446.079225][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 446.098271][ T5865] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 446.106260][ T5865] usb 1-1: can't read configurations, error -22 [ 446.130514][ T5865] usb usb1-port1: unable to enumerate USB device [ 446.368973][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1315'. [ 446.408692][T10447] 8021q: VLANs not supported on vxcan1 [ 446.534654][ T5872] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 446.788975][ T6063] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 446.947906][ T5915] usb 3-1: USB disconnect, device number 55 [ 447.018330][ T5865] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 447.176501][T10481] syz_tun: entered allmulticast mode [ 447.238131][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 447.245542][ T5865] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 447.261237][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.279857][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.296431][T10481] dvmrp8: entered allmulticast mode [ 447.296704][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.380972][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.395962][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.441647][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.484145][T10479] syz_tun: left allmulticast mode [ 447.523550][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.548313][T10479] dvmrp8: left allmulticast mode [ 447.556383][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.602400][ T5865] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 447.644730][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 447.662162][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 447.775379][ T5865] usb 4-1: SerialNumber: syz [ 447.839645][ T5865] usb 4-1: config 0 descriptor?? [ 447.923383][ T5865] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 448.168627][ T5220] bcm5974 4-1:0.0: could not read from device [ 448.248949][ T5220] bcm5974 4-1:0.0: could not read from device [ 448.255368][ T5865] usb 4-1: USB disconnect, device number 79 [ 448.330835][ T5220] bcm5974 4-1:0.0: could not read from device [ 448.743337][T10510] netlink: 'syz.0.1334': attribute type 63 has an invalid length. [ 449.624934][T10529] fuse: Bad value for 'fd' [ 454.887399][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 455.047469][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 455.063433][ T10] usb 4-1: New USB device found, idVendor=f0b1, idProduct=7006, bcdDevice= 2.02 [ 455.081920][ T10] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 455.116742][ T10] usb 4-1: Product: syz [ 455.132786][ T10] usb 4-1: Manufacturer: syz [ 455.157633][ T10] usb 4-1: SerialNumber: syz [ 455.187911][ T10] usb 4-1: config 0 descriptor?? [ 455.594081][ T979] usb 4-1: USB disconnect, device number 80 [ 456.076821][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1354'. [ 456.131954][T10583] FAULT_INJECTION: forcing a failure. [ 456.131954][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 456.196562][T10583] CPU: 0 UID: 0 PID: 10583 Comm: syz.4.1354 Not tainted syzkaller #0 PREEMPT(full) [ 456.196586][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 456.196593][T10583] Call Trace: [ 456.196597][T10583] [ 456.196602][T10583] dump_stack_lvl+0x189/0x250 [ 456.196619][T10583] ? __pfx____ratelimit+0x10/0x10 [ 456.196631][T10583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.196642][T10583] ? __pfx__printk+0x10/0x10 [ 456.196659][T10583] ? __pfx___might_resched+0x10/0x10 [ 456.196672][T10583] ? fs_reclaim_acquire+0x7d/0x100 [ 456.196684][T10583] should_fail_ex+0x414/0x560 [ 456.196725][T10583] ? alloc_netdev_mqs+0xa3/0x11b0 [ 456.196738][T10583] should_failslab+0xa8/0x100 [ 456.196754][T10583] __kvmalloc_node_noprof+0x161/0x5f0 [ 456.196768][T10583] ? alloc_netdev_mqs+0xa3/0x11b0 [ 456.196784][T10583] ? snprintf+0xda/0x120 [ 456.196800][T10583] alloc_netdev_mqs+0xa3/0x11b0 [ 456.196813][T10583] ? __pfx_macsec_setup+0x10/0x10 [ 456.196827][T10583] rtnl_create_link+0x31f/0xd10 [ 456.196845][T10583] rtnl_newlink_create+0x25c/0xb00 [ 456.196860][T10583] ? __lock_acquire+0xab9/0xd20 [ 456.196877][T10583] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 456.196891][T10583] ? __pfx___mutex_lock+0x10/0x10 [ 456.196908][T10583] ? ns_capable+0x8a/0xf0 [ 456.196920][T10583] rtnl_newlink+0x16d6/0x1c70 [ 456.196932][T10583] ? netlink_sendmsg+0x805/0xb30 [ 456.196950][T10583] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.196973][T10583] ? kasan_quarantine_put+0xdd/0x220 [ 456.196988][T10583] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.197002][T10583] ? nlmon_xmit+0xb0/0x100 [ 456.197012][T10583] ? kmem_cache_free+0x18f/0x400 [ 456.197029][T10583] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.197039][T10583] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.197049][T10583] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.197058][T10583] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 456.197070][T10583] ? __dev_queue_xmit+0x27b/0x3b50 [ 456.197084][T10583] ? __dev_queue_xmit+0x27b/0x3b50 [ 456.197095][T10583] ? __dev_queue_xmit+0x27b/0x3b50 [ 456.197108][T10583] ? __dev_queue_xmit+0x1d79/0x3b50 [ 456.197124][T10583] ? __lock_acquire+0xab9/0xd20 [ 456.197166][T10583] ? __pfx_rtnl_newlink+0x10/0x10 [ 456.197181][T10583] rtnetlink_rcv_msg+0x7cf/0xb70 [ 456.197203][T10583] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 456.197221][T10583] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.197237][T10583] ? ref_tracker_free+0x63a/0x7d0 [ 456.197255][T10583] ? __asan_memcpy+0x40/0x70 [ 456.197281][T10583] ? __pfx_ref_tracker_free+0x10/0x10 [ 456.197296][T10583] ? __skb_clone+0x63/0x7a0 [ 456.197333][T10583] netlink_rcv_skb+0x205/0x470 [ 456.197354][T10583] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 456.197374][T10583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.197406][T10583] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.197434][T10583] netlink_unicast+0x82f/0x9e0 [ 456.197470][T10583] ? __pfx_netlink_unicast+0x10/0x10 [ 456.197498][T10583] ? netlink_sendmsg+0x642/0xb30 [ 456.197514][T10583] ? skb_put+0x11b/0x210 [ 456.197537][T10583] netlink_sendmsg+0x805/0xb30 [ 456.197568][T10583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.197590][T10583] ? __import_iovec+0x5d4/0x7f0 [ 456.197610][T10583] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.197631][T10583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.197665][T10583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.197684][T10583] __sock_sendmsg+0x219/0x270 [ 456.197721][T10583] ____sys_sendmsg+0x505/0x830 [ 456.197739][T10583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.197760][T10583] ___sys_sendmsg+0x21f/0x2a0 [ 456.197774][T10583] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.197805][T10583] ? __fget_files+0x2a/0x420 [ 456.197814][T10583] ? __fget_files+0x3a0/0x420 [ 456.197829][T10583] __sys_sendmsg+0x164/0x220 [ 456.197842][T10583] ? __pfx___sys_sendmsg+0x10/0x10 [ 456.197863][T10583] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.197875][T10583] __do_fast_syscall_32+0xb6/0x2b0 [ 456.197887][T10583] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.197899][T10583] do_fast_syscall_32+0x34/0x80 [ 456.197910][T10583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.197922][T10583] RIP: 0023:0xf70be539 [ 456.197932][T10583] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 456.197941][T10583] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 456.197951][T10583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 456.197959][T10583] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 456.197965][T10583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.197970][T10583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 456.197976][T10583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.197990][T10583] [ 456.657009][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.045957][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 457.224123][ T5872] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 457.361621][T10602] fuse: Bad value for 'fd' [ 457.507370][T10606] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 457.874138][T10606] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 458.838879][ T979] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 458.848548][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 458.848565][ T30] audit: type=1326 audit(1759122297.444:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 459.072950][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 459.087910][ T979] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 459.148733][ T979] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 459.156844][ T979] usb 2-1: Product: syz [ 459.186960][ T30] audit: type=1326 audit(1759122297.454:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 459.237184][ T979] usb 2-1: Manufacturer: syz [ 459.259984][ T979] usb 2-1: SerialNumber: syz [ 459.291690][ T30] audit: type=1326 audit(1759122297.454:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 459.348728][ T979] usb 2-1: config 0 descriptor?? [ 459.681757][ T5865] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 459.862701][ T30] audit: type=1326 audit(1759122297.454:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 459.897708][ T5865] usb 4-1: config 0 has no interfaces? [ 459.976633][ T30] audit: type=1326 audit(1759122297.454:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 459.976638][ T5865] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 459.976664][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.082905][ T30] audit: type=1326 audit(1759122297.454:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 460.119608][ T30] audit: type=1326 audit(1759122297.454:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 460.141634][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.148477][ T30] audit: type=1326 audit(1759122297.454:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 460.176347][ T30] audit: type=1326 audit(1759122297.454:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 460.265364][ T30] audit: type=1326 audit(1759122297.464:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.2.1366" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 460.284217][ T5865] usb 4-1: Product: syz [ 460.308047][ T5865] usb 4-1: Manufacturer: syz [ 460.328685][ T5865] usb 4-1: SerialNumber: syz [ 460.362771][ T5865] usb 4-1: config 0 descriptor?? [ 460.787760][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 461.027262][ T979] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 461.087300][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 461.111299][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 461.141719][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 461.155231][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.184358][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.259617][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.261898][ T6063] usb 4-1: USB disconnect, device number 81 [ 461.285717][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.550210][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 461.555846][ T10] usbtmc 3-1:16.0: can't read capabilities [ 461.636459][ T10] usb 2-1: USB disconnect, device number 56 [ 462.687233][ T5872] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 463.332212][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.342388][ T979] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 463.354546][ T979] usb 5-1: can't read configurations, error -71 [ 463.386858][ T10] usb 3-1: USB disconnect, device number 56 [ 464.121494][T10687] trusted_key: encrypted_key: insufficient parameters specified [ 464.325823][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1382'. [ 464.547476][T10689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1382'. [ 465.447202][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 465.447220][ T30] audit: type=1326 audit(1759122304.054:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 465.539315][ T30] audit: type=1326 audit(1759122304.054:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 465.567631][ T30] audit: type=1326 audit(1759122304.054:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 465.602436][ T30] audit: type=1326 audit(1759122304.054:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 465.784236][ T30] audit: type=1326 audit(1759122304.054:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 466.232455][ T30] audit: type=1326 audit(1759122304.054:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 466.303207][ T30] audit: type=1326 audit(1759122304.054:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 466.325499][ T5915] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 466.401187][ T30] audit: type=1326 audit(1759122304.054:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 466.453469][ T30] audit: type=1326 audit(1759122304.064:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 466.587195][T10710] snd_virmidi snd_virmidi.0: control 0:0:128:syz0:0 is already present [ 466.810236][ T30] audit: type=1326 audit(1759122304.064:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10693 comm="syz.0.1383" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000 [ 466.999280][ T6063] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 467.073685][T10731] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 467.124428][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1398'. [ 467.174826][ T979] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 468.467625][ T10] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 469.376842][ T5872] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 470.071402][ T979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 470.115633][ T979] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 470.163224][ T979] usb 2-1: can't read configurations, error -71 [ 470.328209][ T5915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 470.350566][T10747] trusted_key: encrypted_key: insufficient parameters specified [ 470.428275][ T5915] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 470.453848][ T5915] usb 5-1: can't read configurations, error -71 [ 470.469287][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 470.538391][T10748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 470.575237][ T6063] usb 4-1: unable to get BOS descriptor or descriptor too short [ 470.755336][ T6063] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 470.792663][ T6063] usb 4-1: can't read configurations, error -71 [ 471.003571][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 471.014717][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 471.022735][ T10] usb 1-1: can't read configurations, error -71 [ 472.537701][ T6650] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 472.858070][ T6650] usb 2-1: Using ep0 maxpacket: 16 [ 472.980857][ T6650] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 473.000471][ T6650] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 473.018188][ T6650] usb 2-1: Product: syz [ 473.028356][ T6650] usb 2-1: Manufacturer: syz [ 473.068485][ T6650] usb 2-1: SerialNumber: syz [ 473.094548][ T6650] usb 2-1: config 0 descriptor?? [ 475.058579][ T979] usb 2-1: USB disconnect, device number 59 [ 475.247816][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 475.360111][T10788] netlink: 'syz.1.1407': attribute type 8 has an invalid length. [ 475.443801][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 475.472960][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 475.498717][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 475.535956][ T10] usb 5-1: Product: syz [ 475.563443][ T10] usb 5-1: Manufacturer: syz [ 475.577982][ T10] usb 5-1: SerialNumber: syz [ 475.594342][ T10] usb 5-1: config 0 descriptor?? [ 475.948808][ T979] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 476.277788][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 476.293341][ T979] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 476.323491][ T979] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 476.471178][ T979] usb 4-1: Product: syz [ 476.475392][ T979] usb 4-1: Manufacturer: syz [ 476.502563][ T979] usb 4-1: SerialNumber: syz [ 476.546875][ T979] usb 4-1: config 0 descriptor?? [ 477.243195][ T5865] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 477.265037][ T5235] Dev loop6: unable to read RDB block 1 [ 477.281016][ T5235] loop6: unable to read partition table [ 477.294710][ T5235] loop6: partition table beyond EOD, truncated [ 478.062227][ T6063] usb 5-1: USB disconnect, device number 66 [ 478.514603][T10811] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 478.732202][ T6657] usb 4-1: USB disconnect, device number 84 [ 478.789035][ T6063] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 478.970408][ T6063] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.988218][ T6063] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.003281][ T6063] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.014854][ T6063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.058497][ T5865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.081700][ T5865] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 480.102005][ T6063] usb 5-1: usb_control_msg returned -32 [ 480.108149][ T5865] usb 3-1: can't read configurations, error -71 [ 480.124831][T10821] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 480.162899][T10821] team0: Port device dummy0 added [ 480.254914][ T6063] usbtmc 5-1:16.0: can't read capabilities [ 480.908129][ T6650] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 481.101046][ T6650] usb 1-1: Using ep0 maxpacket: 16 [ 481.149863][ T6650] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.169836][ T6650] usb 1-1: config 1 has an invalid interface number: 26 but max is 1 [ 481.178524][ T6650] usb 1-1: config 1 has an invalid interface number: 89 but max is 1 [ 481.201499][ T6650] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.269918][ T6650] usb 1-1: config 1 has no interface number 0 [ 481.278253][ T6650] usb 1-1: config 1 has no interface number 1 [ 481.285024][ T6650] usb 1-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 481.300669][ T6650] usb 1-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.316417][ T6650] usb 1-1: config 1 interface 26 has no altsetting 0 [ 481.329224][ T6650] usb 1-1: config 1 interface 89 has no altsetting 0 [ 481.410390][ T6650] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 481.425940][ T6650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.089233][ T5865] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 482.179816][ T6650] usb 1-1: Product: syz [ 482.184016][ T6650] usb 1-1: Manufacturer: syz [ 482.218262][ T6650] usb 1-1: SerialNumber: syz [ 482.244525][ T10] usb 5-1: USB disconnect, device number 67 [ 482.413583][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.499822][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 482.518458][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 482.587205][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.658255][ T5865] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.672603][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.699912][ T5865] usb 3-1: config 0 descriptor?? [ 482.717304][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 482.917418][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 482.961411][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.099630][ T6650] usb 1-1: unknown interface protocol 0x7d, assuming v1 [ 483.112324][ T6650] usb 1-1: 26:2 : does not exist [ 483.121247][ T6650] usb 1-1: unknown interface protocol 0x13, assuming v1 [ 483.147797][ T6650] usb 1-1: 89:0 : does not exist [ 483.196277][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.238495][ T6650] usb 1-1: USB disconnect, device number 81 [ 483.260586][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 483.317367][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.332472][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.428715][ T10] usb 5-1: config 0 descriptor?? [ 483.695025][T10838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.704149][T10838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.893343][ T5865] hid_parser_main: 6 callbacks suppressed [ 483.893363][ T5865] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x7 [ 483.912448][ T5865] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 483.921890][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 483.922452][ T5865] plantronics 0003:047F:FFFF.0013: item fetching failed at offset 12/15 [ 483.968833][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0014/input/input26 [ 483.974039][ T5865] plantronics 0003:047F:FFFF.0013: parse failed [ 484.012126][ T5865] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22 [ 484.617417][ T5915] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 484.666712][ T10] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 484.831364][ T10] usb 5-1: USB disconnect, device number 68 [ 485.506352][ T6650] usb 3-1: USB disconnect, device number 59 [ 486.667769][ T5865] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 486.907874][ T979] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 487.368248][ T6657] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 487.942883][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 487.999990][ T5915] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 488.010614][ T5915] usb 2-1: can't read configurations, error -71 [ 489.102604][ T5865] usb 5-1: unable to get BOS descriptor or descriptor too short [ 489.123846][ T5865] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 489.146947][ T5865] usb 5-1: can't read configurations, error -71 [ 489.218951][T10880] fuse: Bad value for 'group_id' [ 489.224034][T10880] fuse: Bad value for 'group_id' [ 489.538197][ T6063] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 489.768077][ T979] usb 4-1: unable to get BOS descriptor or descriptor too short [ 489.800699][ T979] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 489.820347][ T979] usb 4-1: can't read configurations, error -71 [ 490.037680][ T6063] usb 3-1: Using ep0 maxpacket: 8 [ 490.076230][ T6063] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 490.411457][ T6063] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 490.497109][ T6063] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 490.535676][T10891] wireguard0: entered promiscuous mode [ 490.595590][ T6063] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 490.597433][T10891] wireguard0: entered allmulticast mode [ 490.641025][ T6657] usb 1-1: unable to get BOS descriptor or descriptor too short [ 490.665954][ T6063] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 490.679710][ T6657] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 490.692452][ T6657] usb 1-1: can't read configurations, error -71 [ 490.699823][ T6063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.931175][ T6063] usb 3-1: GET_CAPABILITIES returned 0 [ 490.936868][ T6063] usbtmc 3-1:16.0: can't read capabilities [ 491.283752][T10909] FAULT_INJECTION: forcing a failure. [ 491.283752][T10909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.337755][T10909] CPU: 1 UID: 0 PID: 10909 Comm: syz.1.1444 Not tainted syzkaller #0 PREEMPT(full) [ 491.337787][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 491.337798][T10909] Call Trace: [ 491.337806][T10909] [ 491.337814][T10909] dump_stack_lvl+0x189/0x250 [ 491.337842][T10909] ? __pfx____ratelimit+0x10/0x10 [ 491.337862][T10909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.337882][T10909] ? __pfx__printk+0x10/0x10 [ 491.337905][T10909] ? __might_fault+0xb0/0x130 [ 491.337941][T10909] should_fail_ex+0x414/0x560 [ 491.337971][T10909] _copy_from_user+0x2d/0xb0 [ 491.337994][T10909] sk_getsockopt+0x197/0x2530 [ 491.338021][T10909] ? __pfx_sk_getsockopt+0x10/0x10 [ 491.338039][T10909] ? lockdep_hardirqs_on+0x90/0x150 [ 491.338059][T10909] ? __pfx___might_resched+0x10/0x10 [ 491.338081][T10909] ? rcu_read_lock_any_held+0xb3/0x120 [ 491.338101][T10909] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 491.338127][T10909] ? aa_sk_perm+0x81e/0x950 [ 491.338155][T10909] ? vfs_write+0x956/0xb30 [ 491.338177][T10909] ? __pfx_aa_sk_perm+0x10/0x10 [ 491.338215][T10909] do_sock_getsockopt+0x237/0x450 [ 491.338236][T10909] ? lockdep_hardirqs_on+0x90/0x150 [ 491.338252][T10909] ? count_memcg_event_mm+0x21/0x260 [ 491.338274][T10909] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 491.338293][T10909] ? lockdep_hardirqs_on+0x90/0x150 [ 491.338322][T10909] __ia32_sys_getsockopt+0x1a5/0x250 [ 491.338343][T10909] ? lockdep_hardirqs_on+0x90/0x150 [ 491.338363][T10909] ? lockdep_hardirqs_on+0x90/0x150 [ 491.338384][T10909] __do_fast_syscall_32+0xb6/0x2b0 [ 491.338405][T10909] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.338427][T10909] do_fast_syscall_32+0x34/0x80 [ 491.338447][T10909] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 491.338468][T10909] RIP: 0023:0xf701e539 [ 491.338485][T10909] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 491.338501][T10909] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 491.338519][T10909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 491.338531][T10909] RDX: 000000000000001f RSI: 0000000000000000 RDI: 0000000080001900 [ 491.338542][T10909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 491.338552][T10909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 491.338562][T10909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 491.338589][T10909] [ 491.677742][ T6657] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 491.828471][ T6657] usb 1-1: Using ep0 maxpacket: 8 [ 491.844489][ T6657] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 491.854911][ T6657] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.868479][ T6657] usb 1-1: config 1 interface 0 has no altsetting 0 [ 491.878108][ T6657] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 491.888165][ T6657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.896215][ T6657] usb 1-1: Product: syz [ 491.901805][ T6657] usb 1-1: Manufacturer: А [ 491.932649][ T6657] usb 1-1: SerialNumber: syz [ 491.941754][T10907] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 492.032194][T10899] trusted_key: encrypted_key: insufficient parameters specified [ 492.193238][ T6657] usb 1-1: USB disconnect, device number 83 [ 492.240517][ T43] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 492.681571][ T979] usb 3-1: USB disconnect, device number 60 [ 492.808129][ T5865] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 492.968329][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 492.980784][ T5865] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 493.068168][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 493.147643][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 493.224170][ T5865] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.384458][ T5865] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 493.484224][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.727536][ T6063] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 493.889986][ T5865] usb 1-1: GET_CAPABILITIES returned 0 [ 493.895689][ T5865] usbtmc 1-1:16.0: can't read capabilities [ 494.017930][T10918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.236871][T10929] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1440'. [ 494.248107][T10929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1440'. [ 494.674550][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'. [ 495.165474][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 495.269968][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 495.292866][ T43] usb 5-1: can't read configurations, error -71 [ 495.533890][ T5945] usb 1-1: USB disconnect, device number 84 [ 495.626162][T10951] tipc: Enabled bearer , priority 0 [ 495.698293][T10952] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1457'. [ 495.708249][ T979] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 495.712845][T10954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1459'. [ 495.735551][T10951] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 495.856051][T10951] tipc: Disabling bearer [ 495.877432][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 495.891308][ T979] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 495.906024][ T979] usb 2-1: config 1 has no interface number 0 [ 495.921205][ T979] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 495.965204][ T979] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 496.010804][ T979] usb 2-1: config 1 interface 105 has no altsetting 0 [ 496.031349][ T979] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 496.051405][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.088509][ T979] usb 2-1: Product: syz [ 496.113164][ T979] usb 2-1: Manufacturer: syz [ 496.131431][ T979] usb 2-1: SerialNumber: syz [ 496.174414][T10949] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 496.182234][T10949] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 496.198748][T10961] ======================================================= [ 496.198748][T10961] WARNING: The mand mount option has been deprecated and [ 496.198748][T10961] and is ignored by this kernel. Remove the mand [ 496.198748][T10961] option from the mount to silence this warning. [ 496.198748][T10961] ======================================================= [ 496.647962][T10949] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 496.683435][T10949] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 496.926186][ T5915] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 497.013085][ T6063] usb 3-1: unable to get BOS descriptor or descriptor too short [ 497.039701][ T6063] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 497.064405][ T6063] usb 3-1: can't read configurations, error -71 [ 497.154260][T10949] binder: 10948:10949 ioctl c0306201 800003c0 returned -14 [ 497.183892][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 497.298282][ T979] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 497.587957][ T5915] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 497.615501][ T979] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 497.623921][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 497.648946][ T979] usb 2-1: USB disconnect, device number 62 [ 497.665089][ T5915] usb 1-1: Product: syz [ 497.678803][ T5915] usb 1-1: Manufacturer: syz [ 497.683441][ T5915] usb 1-1: SerialNumber: syz [ 497.739853][ T5915] usb 1-1: config 0 descriptor?? [ 497.849137][T10976] FAULT_INJECTION: forcing a failure. [ 497.849137][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 497.941980][T10976] CPU: 1 UID: 0 PID: 10976 Comm: syz.2.1465 Not tainted syzkaller #0 PREEMPT(full) [ 497.942003][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 497.942013][T10976] Call Trace: [ 497.942020][T10976] [ 497.942028][T10976] dump_stack_lvl+0x189/0x250 [ 497.942054][T10976] ? __pfx____ratelimit+0x10/0x10 [ 497.942073][T10976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.942093][T10976] ? __pfx__printk+0x10/0x10 [ 497.942128][T10976] ? __pfx___might_resched+0x10/0x10 [ 497.942145][T10976] ? fs_reclaim_acquire+0x7d/0x100 [ 497.942166][T10976] should_fail_ex+0x414/0x560 [ 497.942195][T10976] should_failslab+0xa8/0x100 [ 497.942220][T10976] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 497.942244][T10976] ? __kernfs_new_node+0x9c/0x7e0 [ 497.942263][T10976] ? is_bpf_text_address+0x292/0x2b0 [ 497.942291][T10976] kstrdup+0x42/0x100 [ 497.942311][T10976] __kernfs_new_node+0x9c/0x7e0 [ 497.942331][T10976] ? __lock_acquire+0xab9/0xd20 [ 497.942360][T10976] ? __pfx___kernfs_new_node+0x10/0x10 [ 497.942382][T10976] ? kernfs_root+0x1c/0x230 [ 497.942408][T10976] ? kernfs_root+0x1c/0x230 [ 497.942425][T10976] ? kernfs_root+0x1c/0x230 [ 497.942441][T10976] ? kernfs_root+0x1c/0x230 [ 497.942464][T10976] kernfs_new_node+0x102/0x210 [ 497.942489][T10976] kernfs_create_dir_ns+0x44/0x130 [ 497.942514][T10976] sysfs_create_dir_ns+0x123/0x280 [ 497.942536][T10976] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 497.942556][T10976] ? do_raw_spin_unlock+0x122/0x240 [ 497.942581][T10976] kobject_add_internal+0x59f/0xb40 [ 497.942611][T10976] kobject_add+0x155/0x220 [ 497.942636][T10976] ? __pfx_kobject_add+0x10/0x10 [ 497.942656][T10976] ? do_raw_spin_unlock+0x122/0x240 [ 497.942680][T10976] ? get_device_parent+0x366/0x3a0 [ 497.942705][T10976] device_add+0x408/0xb50 [ 497.942729][T10976] input_register_device+0x9d3/0x1140 [ 497.942764][T10976] uinput_create_device+0x422/0x670 [ 497.942796][T10976] uinput_ioctl_handler+0x3f0/0x1570 [ 497.942820][T10976] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 497.942858][T10976] ? __fget_files+0x2a/0x420 [ 497.942884][T10976] __ia32_compat_sys_ioctl+0x543/0x840 [ 497.942910][T10976] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 497.942932][T10976] ? __fget_files+0x3a0/0x420 [ 497.942955][T10976] ? fput+0xa0/0xd0 [ 497.942973][T10976] ? ksys_write+0x22a/0x250 [ 497.943010][T10976] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.943032][T10976] __do_fast_syscall_32+0xb6/0x2b0 [ 497.943052][T10976] ? lockdep_hardirqs_on+0x9c/0x150 [ 497.943074][T10976] do_fast_syscall_32+0x34/0x80 [ 497.943094][T10976] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 497.943120][T10976] RIP: 0023:0xf70ce539 [ 497.943137][T10976] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 497.943152][T10976] RSP: 002b:00000000f54be55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 497.943170][T10976] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 497.943181][T10976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 497.943191][T10976] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 497.943202][T10976] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.943212][T10976] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 497.943240][T10976] [ 497.944947][T10976] kobject: kobject_add_internal failed for input27 (error: -12 parent: input) [ 498.827514][ T5915] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 499.378759][ T6063] usb 1-1: USB disconnect, device number 85 [ 500.358334][ T6063] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 501.447551][T10996] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 501.525369][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.552691][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.671742][T10996] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 501.685157][T10996] usb 5-1: config 0 has no interface number 0 [ 501.703104][T10996] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 501.779089][T10996] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 502.187008][T10996] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 502.197077][T10996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.209186][T10996] usb 5-1: Product: syz [ 502.213488][T10996] usb 5-1: Manufacturer: syz [ 502.255279][T10996] usb 5-1: SerialNumber: syz [ 502.276160][T10996] usb 5-1: config 0 descriptor?? [ 502.381223][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 502.418425][T11017] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 502.434765][ T5915] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 502.473789][ T5915] usb 2-1: can't read configurations, error -71 [ 502.502172][T10996] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 502.686993][T11017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.702620][T11017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.947258][ T5915] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 502.990431][ T6063] usb 3-1: unable to get BOS descriptor or descriptor too short [ 503.023252][ T6063] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 503.040297][ T6063] usb 3-1: can't read configurations, error -71 [ 503.169289][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 503.212217][ T5915] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 503.231536][ T5915] usb 2-1: config 0 has no interface number 0 [ 503.247085][ T5915] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b [ 503.259283][ T5915] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 503.272453][ T5915] usb 2-1: Manufacturer: syz [ 503.290800][ T5915] usb 2-1: config 0 descriptor?? [ 503.528036][ T5915] usb 2-1: USB disconnect, device number 64 [ 503.977098][T11026] syz.0.1481: vmalloc error: size 70778880, failed to allocated page array size 138240, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 504.028211][T11026] CPU: 1 UID: 0 PID: 11026 Comm: syz.0.1481 Not tainted syzkaller #0 PREEMPT(full) [ 504.028265][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 504.028293][T11026] Call Trace: [ 504.028309][T11026] [ 504.028321][T11026] dump_stack_lvl+0x189/0x250 [ 504.028352][T11026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.028374][T11026] ? __pfx__printk+0x10/0x10 [ 504.028399][T11026] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 504.028421][T11026] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 504.028445][T11026] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 504.028469][T11026] warn_alloc+0x214/0x310 [ 504.028503][T11026] ? __pfx_warn_alloc+0x10/0x10 [ 504.028539][T11026] ? __get_vm_area_node+0x28f/0x300 [ 504.028565][T11026] ? vb2_vmalloc_alloc+0xef/0x340 [ 504.028590][T11026] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 504.028642][T11026] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 504.028672][T11026] ? __kasan_kmalloc+0x93/0xb0 [ 504.028699][T11026] vmalloc_user_noprof+0xad/0xf0 [ 504.028723][T11026] ? vb2_vmalloc_alloc+0xef/0x340 [ 504.028745][T11026] vb2_vmalloc_alloc+0xef/0x340 [ 504.028773][T11026] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 504.028794][T11026] __vb2_queue_alloc+0x9c2/0x15a0 [ 504.028841][T11026] vb2_core_reqbufs+0xc31/0x1420 [ 504.028881][T11026] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 504.028911][T11026] ? __vb2_init_fileio+0x1e8/0xff0 [ 504.028936][T11026] __vb2_init_fileio+0x318/0xff0 [ 504.028955][T11026] ? __lock_acquire+0xab9/0xd20 [ 504.028982][T11026] ? __pfx___mutex_lock+0x10/0x10 [ 504.029018][T11026] vb2_core_poll+0x4c1/0x840 [ 504.029046][T11026] vb2_fop_poll+0x168/0x380 [ 504.029069][T11026] ? __fget_files+0x2a/0x420 [ 504.029086][T11026] ? __pfx_vb2_fop_poll+0x10/0x10 [ 504.029109][T11026] v4l2_poll+0x144/0x2c0 [ 504.029129][T11026] ? __pfx_v4l2_poll+0x10/0x10 [ 504.029150][T11026] do_sys_poll+0x8c9/0x1070 [ 504.029182][T11026] ? do_sys_poll+0x431/0x1070 [ 504.029217][T11026] ? __pfx_do_sys_poll+0x10/0x10 [ 504.029251][T11026] ? futex_unqueue+0x22/0x240 [ 504.029279][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029308][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029337][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029366][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029395][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029423][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029451][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029484][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029511][T11026] ? __pfx_pollwake+0x10/0x10 [ 504.029540][T11026] ? clear_bhb_loop+0x60/0xb0 [ 504.029559][T11026] ? clear_bhb_loop+0x60/0xb0 [ 504.029578][T11026] ? clear_bhb_loop+0x60/0xb0 [ 504.029595][T11026] ? clear_bhb_loop+0x60/0xb0 [ 504.029612][T11026] ? clear_bhb_loop+0xe/0xb0 [ 504.029664][T11026] ? set_compat_user_sigmask+0xc1/0x1b0 [ 504.029685][T11026] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 504.029718][T11026] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 504.029753][T11026] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 504.029802][T11026] __do_fast_syscall_32+0xb6/0x2b0 [ 504.029834][T11026] do_fast_syscall_32+0x34/0x80 [ 504.029856][T11026] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 504.029877][T11026] RIP: 0023:0xf7f84539 [ 504.029894][T11026] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 504.029912][T11026] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 504.029933][T11026] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 504.029947][T11026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 504.029959][T11026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 504.029971][T11026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 504.029983][T11026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 504.030014][T11026] [ 504.031066][T11026] Mem-Info: [ 504.528129][ T6063] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 504.535930][T11026] active_anon:7689 inactive_anon:0 isolated_anon:0 [ 504.535930][T11026] active_file:13939 inactive_file:40031 isolated_file:0 [ 504.535930][T11026] unevictable:768 dirty:504 writeback:0 [ 504.535930][T11026] slab_reclaimable:9668 slab_unreclaimable:100160 [ 504.535930][T11026] mapped:34160 shmem:1359 pagetables:1348 [ 504.535930][T11026] sec_pagetables:0 bounce:0 [ 504.535930][T11026] kernel_misc_reclaimable:0 [ 504.535930][T11026] free:1255441 free_pcp:16004 free_cma:0 [ 504.610926][T11026] Node 0 active_anon:28856kB inactive_anon:0kB active_file:55756kB inactive_file:159916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136640kB dirty:2016kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12032kB pagetables:5168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.644613][T11026] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 504.676237][T11026] Node 0 DMA free:15192kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:36kB free_cma:0kB [ 504.721293][ T6063] usb 3-1: Using ep0 maxpacket: 16 [ 504.733487][ T6662] usb 5-1: USB disconnect, device number 73 [ 504.768430][ T6662] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 504.788802][T11026] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 504.927750][T11026] Node 0 DMA32 free:1222764kB boost:32768kB min:67016kB low:75576kB high:84136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28960kB inactive_anon:0kB active_file:55756kB inactive_file:158360kB unevictable:1536kB writepending:2020kB present:3129332kB managed:2557404kB mlocked:0kB bounce:0kB free_pcp:43448kB local_pcp:20676kB free_cma:0kB [ 504.976802][ T6063] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 505.005205][ T6063] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 505.034805][T11026] lowmem_reserve[]: 0 0 1 1 1 [ 505.046661][ T6063] usb 3-1: Product: syz [ 505.052341][ T6063] usb 3-1: Manufacturer: syz [ 505.056985][ T6063] usb 3-1: SerialNumber: syz [ 505.072423][ T6063] usb 3-1: config 0 descriptor?? [ 505.086894][T11026] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 505.150699][T11047] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 505.254711][T11026] lowmem_reserve[]: 0 0 0 0 0 [ 505.345678][T11050] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 505.349318][T11026] Node 1 Normal free:3894792kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21288kB local_pcp:13056kB free_cma:0kB [ 505.432370][T11026] lowmem_reserve[]: 0 0 0 0 0 [ 505.441711][T11026] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 7*32kB (U) 3*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15192kB [ 505.449448][T11054] fuse: Bad value for 'fd' [ 505.461885][T11026] Node 0 DMA32: 186*4kB (UME) 133*8kB (UME) 159*16kB (ME) 153*32kB (UME) 96*64kB (ME) 61*128kB (UME) 20*256kB (ME) 7*512kB (M) 7*1024kB (U) 21*2048kB (U) 279*4096kB (U) = 1224864kB [ 505.484157][T11026] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 505.497096][T11026] Node 1 Normal: 206*4kB (UME) 40*8kB (UME) 39*16kB (UME) 83*32kB (UME) 21*64kB (UME) 7*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 948*4096kB (UM) = 3894792kB [ 505.571216][T11026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.585958][T11026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.604699][T11026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 505.617662][T11026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 505.642293][T11026] 55325 total pagecache pages [ 505.678144][T11026] 0 pages in swap cache [ 505.682338][T11026] Free swap = 124996kB [ 505.694975][T11058] FAULT_INJECTION: forcing a failure. [ 505.694975][T11058] name failslab, interval 1, probability 0, space 0, times 0 [ 505.713593][T11026] Total swap = 124996kB [ 505.723970][T11026] 2097051 pages RAM [ 505.729091][T11026] 0 pages HighMem/MovableOnly [ 505.734003][T11058] CPU: 1 UID: 0 PID: 11058 Comm: syz.1.1493 Not tainted syzkaller #0 PREEMPT(full) [ 505.734027][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 505.734038][T11058] Call Trace: [ 505.734046][T11058] [ 505.734054][T11058] dump_stack_lvl+0x189/0x250 [ 505.734080][T11058] ? __pfx____ratelimit+0x10/0x10 [ 505.734100][T11058] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.734121][T11058] ? __pfx__printk+0x10/0x10 [ 505.734152][T11058] ? __pfx___might_resched+0x10/0x10 [ 505.734168][T11058] ? fs_reclaim_acquire+0x7d/0x100 [ 505.734188][T11058] should_fail_ex+0x414/0x560 [ 505.734218][T11058] should_failslab+0xa8/0x100 [ 505.734245][T11058] __kmalloc_noprof+0xcb/0x4f0 [ 505.734266][T11058] ? io_cache_alloc_new+0x40/0x100 [ 505.734291][T11058] io_cache_alloc_new+0x40/0x100 [ 505.734312][T11058] io_msg_alloc_async+0x1b2/0x2d0 [ 505.734336][T11058] io_connect_prep+0x1b1/0x300 [ 505.734359][T11058] io_submit_sqes+0x917/0x1d30 [ 505.734413][T11058] __se_sys_io_uring_enter+0x2df/0x2b20 [ 505.734458][T11058] ? ksys_write+0x1cb/0x250 [ 505.734483][T11058] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 505.734504][T11058] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 505.734531][T11058] ? __pfx_vfs_write+0x10/0x10 [ 505.734557][T11058] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 505.734581][T11058] ? __fget_files+0x3a0/0x420 [ 505.734604][T11058] ? fput+0xa0/0xd0 [ 505.734622][T11058] ? ksys_write+0x22a/0x250 [ 505.734654][T11058] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 505.734681][T11058] __do_fast_syscall_32+0xb6/0x2b0 [ 505.734701][T11058] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.734724][T11058] do_fast_syscall_32+0x34/0x80 [ 505.734745][T11058] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.734763][T11058] RIP: 0023:0xf701e539 [ 505.734779][T11058] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 505.734795][T11058] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 505.734814][T11058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047bc [ 505.734827][T11058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.734837][T11058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 505.734847][T11058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.734857][T11058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.734886][T11058] [ 505.977875][T11026] 425674 pages reserved [ 505.980969][ T6063] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 505.982114][T11026] 0 pages cma reserved [ 506.045267][T11058] io-wq is not configured for unbound workers [ 506.157738][ T6063] usb 5-1: Using ep0 maxpacket: 32 [ 506.171583][ T6063] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 506.180542][ T6063] usb 5-1: config 0 has no interface number 0 [ 506.186654][ T6063] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 506.198653][ T6063] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 506.213862][ T6063] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 506.223935][ T6063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.232573][ T6063] usb 5-1: Product: syz [ 506.236746][ T6063] usb 5-1: Manufacturer: syz [ 506.241856][ T6063] usb 5-1: SerialNumber: syz [ 506.248833][ T6063] usb 5-1: config 0 descriptor?? [ 506.361901][T11069] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 506.388083][T11069] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 506.586673][ T6063] usb 5-1: USB disconnect, device number 74 [ 506.654924][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 506.655015][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 506.655028][ T30] audit: type=1326 audit(1759122345.324:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.1.1497" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x0 [ 506.744680][ T6662] usb 3-1: USB disconnect, device number 64 [ 507.182109][T10996] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 507.212683][T11090] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.663088][T10996] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.680637][T10996] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 507.694361][T10996] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 507.750202][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 507.750963][T10996] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.781766][T10996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.797718][T10996] usb 4-1: Product: syz [ 507.810700][T10996] usb 4-1: Manufacturer: syz [ 507.841303][T10996] usb 4-1: SerialNumber: syz [ 507.878222][ T6063] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 507.922965][T10996] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 507.939888][T10996] cdc_ncm 4-1:1.0: bind() failure [ 508.124130][ T6063] usb 5-1: config 0 has no interfaces? [ 508.131384][ T6063] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 508.202378][ T6063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.251339][ T6063] usb 5-1: config 0 descriptor?? [ 508.669033][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.706371][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.747704][T11075] could not allocate digest TFM handle poly1305-arm [ 508.853175][T10892] usb 4-1: USB disconnect, device number 87 [ 508.879671][T11096] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1504'. [ 508.894260][ T6063] usb 5-1: USB disconnect, device number 75 [ 509.176203][ T5872] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 509.328344][ T6063] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 509.487562][ T6063] usb 5-1: Using ep0 maxpacket: 8 [ 509.501342][ T6063] usb 5-1: config index 0 descriptor too short (expected 72, got 36) [ 509.512491][ T6063] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 509.545412][ T6063] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 509.561380][ T6063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.582075][ T6063] usb 5-1: Product: syz [ 509.591353][ T6063] usb 5-1: Manufacturer: syz [ 509.602555][ T6063] usb 5-1: SerialNumber: syz [ 509.925947][ T6063] usb 5-1: USB disconnect, device number 76 [ 510.116538][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 510.277290][ T6662] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 510.457374][ T6662] usb 3-1: Using ep0 maxpacket: 8 [ 510.465425][ T6662] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 510.477609][ T6662] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 510.494631][ T6662] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 510.505906][ T6662] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 510.522999][ T6662] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 510.532348][ T6662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.753531][ T6662] usb 3-1: GET_CAPABILITIES returned 0 [ 510.768596][ T6662] usbtmc 3-1:16.0: can't read capabilities [ 511.217399][ T6662] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 511.627390][ T5915] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 511.807362][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 511.840389][ T5915] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 511.863076][ T5915] usb 1-1: config 0 has no interface number 0 [ 511.896624][ T5915] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 511.945361][ T5915] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 511.976778][ T5915] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 511.987244][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.009830][ T5915] usb 1-1: Product: syz [ 512.025754][ T5915] usb 1-1: Manufacturer: syz [ 512.041081][ T5915] usb 1-1: SerialNumber: syz [ 512.060740][ T5915] usb 1-1: config 0 descriptor?? [ 512.097090][T11156] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 512.105387][T11156] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 512.325844][T11156] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 512.386162][T11156] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 512.401933][ T5872] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 512.435518][T11164] netlink: zone id is out of range [ 512.443718][T11164] netlink: zone id is out of range [ 512.463025][T11164] netlink: zone id is out of range [ 512.470069][T11164] netlink: zone id is out of range [ 512.475522][T11164] netlink: zone id is out of range [ 512.486264][T11164] netlink: zone id is out of range [ 512.504049][T11164] netlink: zone id is out of range [ 512.514174][T11164] netlink: zone id is out of range [ 512.520102][T11164] netlink: zone id is out of range [ 512.525859][T11164] netlink: zone id is out of range [ 513.049578][ T6063] usb 3-1: USB disconnect, device number 65 [ 513.174640][T11167] fuse: Bad value for 'group_id' [ 513.191960][T11167] fuse: Bad value for 'group_id' [ 513.295533][T11169] trusted_key: encrypted_key: insufficient parameters specified [ 513.336691][T11171] netlink: 'syz.2.1528': attribute type 4 has an invalid length. [ 514.312686][ T5915] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 514.347353][ T5915] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 514.369598][T11182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1527'. [ 514.377713][ T5915] asix 1-1:0.251: probe with driver asix failed with error -71 [ 514.408749][ T6662] usb 4-1: unable to get BOS descriptor or descriptor too short [ 514.428383][T11182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1527'. [ 514.478518][ T5915] usb 1-1: USB disconnect, device number 86 [ 514.484502][ T6662] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 514.523841][ T6662] usb 4-1: can't read configurations, error -71 [ 516.585338][T11204] fuse: Bad value for 'fd' [ 516.889915][T11189] Bluetooth: hci4: command 0x0406 tx timeout [ 517.197274][ T6662] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 517.468168][ T6662] usb 1-1: Using ep0 maxpacket: 32 [ 517.475063][ T6662] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 517.483296][ T6662] usb 1-1: config 0 has no interface number 0 [ 517.490011][ T6662] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 517.503182][ T6662] usb 1-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 517.513348][ T6063] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 517.519721][ T6662] usb 1-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 517.537491][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.563982][ T6662] usb 1-1: Product: syz [ 517.571638][ T6662] usb 1-1: Manufacturer: syz [ 517.581486][ T6662] usb 1-1: SerialNumber: syz [ 517.589144][ T6662] usb 1-1: config 0 descriptor?? [ 517.691019][ T6063] usb 2-1: Using ep0 maxpacket: 8 [ 517.718483][ T6063] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 517.730831][ T6063] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 517.741915][ T6063] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 517.753015][ T6063] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.773850][ T6063] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.783809][ T6063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.805547][T11204] net_ratelimit: 162 callbacks suppressed [ 517.805560][T11204] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 517.882766][ T6662] usb 1-1: USB disconnect, device number 87 [ 517.936187][ T7014] udevd[7014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.085003][T11189] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 518.101030][ T6063] usb 2-1: GET_CAPABILITIES returned 0 [ 518.121907][ T6063] usbtmc 2-1:16.0: can't read capabilities [ 518.189599][T11214] kvm: pic: single mode not supported [ 518.189615][T11214] kvm: pic: level sensitive irq not supported [ 518.195212][T11214] kvm: pic: single mode not supported [ 518.204033][T11214] kvm: pic: level sensitive irq not supported [ 518.211681][T11214] kvm: pic: single mode not supported [ 518.217915][T11214] kvm: pic: level sensitive irq not supported [ 518.226853][T11214] kvm: pic: single mode not supported [ 518.233219][T11214] kvm: pic: level sensitive irq not supported [ 518.246082][T11214] kvm: pic: level sensitive irq not supported [ 518.443026][T11219] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 518.462677][T11219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.470369][T11219] IPv6: NLM_F_CREATE should be set when creating new route [ 518.477666][T11219] IPv6: NLM_F_CREATE should be set when creating new route [ 518.502825][T11219] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 518.512287][T11219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.892162][T11226] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1542'. [ 518.901928][T11226] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1542'. [ 519.620153][T11235] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 519.636337][T11235] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 520.332521][ T6662] usb 2-1: USB disconnect, device number 65 [ 521.858467][T11189] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 521.888319][ T6063] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 522.617647][ T5865] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 522.789099][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 522.841837][ T5865] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 522.866995][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 522.902014][ T5865] usb 4-1: Product: syz [ 522.912068][ T5865] usb 4-1: Manufacturer: syz [ 522.926645][ T5865] usb 4-1: SerialNumber: syz [ 523.043309][ T5865] usb 4-1: config 0 descriptor?? [ 523.657252][ T979] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 523.819298][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 523.851053][ T979] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 523.860528][ T979] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 523.872171][ T979] usb 2-1: Product: syz [ 523.876565][ T979] usb 2-1: Manufacturer: syz [ 523.891646][ T979] usb 2-1: SerialNumber: syz [ 523.915715][ T979] usb 2-1: config 0 descriptor?? [ 524.087206][ T5915] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 524.280742][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 524.349156][ T6063] usb 3-1: unable to get BOS descriptor or descriptor too short [ 524.368940][ T6063] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 524.376853][ T6063] usb 3-1: can't read configurations, error -71 [ 524.384547][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 524.433420][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 524.449371][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 524.490430][ T5915] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 524.500105][ T5915] usb 5-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 524.616017][ T5915] usb 5-1: Product: syz [ 524.706214][ T5915] usb 5-1: Manufacturer: syz [ 524.723940][ T5915] usb 5-1: SerialNumber: syz [ 524.774006][ T5915] usb 5-1: config 0 descriptor?? [ 524.827074][ T5915] usb 5-1: no audio or video endpoints found [ 525.392386][ T5865] usb 4-1: USB disconnect, device number 90 [ 525.461426][T11299] random: crng reseeded on system resumption [ 525.696080][T11304] trusted_key: encrypted_key: master key parameter '' is invalid [ 525.854861][ T5865] usb 5-1: USB disconnect, device number 77 [ 526.325294][T10996] usb 2-1: USB disconnect, device number 66 [ 526.498764][T11189] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 526.687640][T11334] fuse: Unknown parameter 'group_i00000000000000000000' [ 527.030473][ T43] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 527.179451][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1576'. [ 527.360352][T11348] FAULT_INJECTION: forcing a failure. [ 527.360352][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 527.374594][T11348] CPU: 1 UID: 0 PID: 11348 Comm: syz.4.1575 Not tainted syzkaller #0 PREEMPT(full) [ 527.374619][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 527.374630][T11348] Call Trace: [ 527.374638][T11348] [ 527.374645][T11348] dump_stack_lvl+0x189/0x250 [ 527.374669][T11348] ? __pfx____ratelimit+0x10/0x10 [ 527.374690][T11348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.374710][T11348] ? __pfx__printk+0x10/0x10 [ 527.374731][T11348] ? __mutex_lock+0xd3b/0x1350 [ 527.374765][T11348] should_fail_ex+0x414/0x560 [ 527.374795][T11348] should_failslab+0xa8/0x100 [ 527.374822][T11348] __kmalloc_cache_noprof+0x70/0x3d0 [ 527.374843][T11348] ? __io_queue_proc+0x23a/0x4d0 [ 527.374860][T11348] ? add_wait_queue+0xba/0x170 [ 527.374882][T11348] __io_queue_proc+0x23a/0x4d0 [ 527.374900][T11348] ? vb2_core_poll+0x3d2/0x840 [ 527.374921][T11348] vb2_fop_poll+0x251/0x380 [ 527.374944][T11348] ? __pfx_vb2_fop_poll+0x10/0x10 [ 527.374964][T11348] v4l2_poll+0x144/0x2c0 [ 527.374981][T11348] ? __pfx_v4l2_poll+0x10/0x10 [ 527.374999][T11348] __io_arm_poll_handler+0x372/0xbb0 [ 527.375030][T11348] io_poll_add+0xcd/0x1f0 [ 527.375048][T11348] ? __pfx_io_poll_add+0x10/0x10 [ 527.375062][T11348] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 527.375082][T11348] ? __fget_files+0x2a/0x420 [ 527.375101][T11348] ? __fget_files+0x2a/0x420 [ 527.375116][T11348] ? __fget_files+0x3a0/0x420 [ 527.375133][T11348] __io_issue_sqe+0x181/0x4b0 [ 527.375156][T11348] ? io_file_get_normal+0x101/0x2f0 [ 527.375181][T11348] io_issue_sqe+0x165/0xfd0 [ 527.375212][T11348] io_submit_sqes+0xa34/0x1d30 [ 527.375276][T11348] __se_sys_io_uring_enter+0x2df/0x2b20 [ 527.375322][T11348] ? ksys_write+0x1cb/0x250 [ 527.375349][T11348] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 527.375372][T11348] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 527.375392][T11348] ? __pfx_vfs_write+0x10/0x10 [ 527.375416][T11348] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.375441][T11348] ? __fget_files+0x3a0/0x420 [ 527.375465][T11348] ? fput+0xa0/0xd0 [ 527.375484][T11348] ? ksys_write+0x22a/0x250 [ 527.375517][T11348] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 527.375545][T11348] __do_fast_syscall_32+0xb6/0x2b0 [ 527.375566][T11348] ? lockdep_hardirqs_on+0x9c/0x150 [ 527.375585][T11348] do_fast_syscall_32+0x34/0x80 [ 527.375597][T11348] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.375610][T11348] RIP: 0023:0xf70be539 [ 527.375621][T11348] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 527.375630][T11348] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 527.375641][T11348] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000047f6 [ 527.375649][T11348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.375655][T11348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.375660][T11348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.375666][T11348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.375681][T11348] [ 529.307731][ T979] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 530.257233][ T5915] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 530.283104][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 530.364131][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 530.374013][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 530.383941][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 530.435753][ T43] usb 2-1: can't read configurations, error -71 [ 530.442337][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 530.467609][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.490195][ T979] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 530.499814][T11375] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 530.517933][ T5915] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.535558][ T979] usb 4-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 530.595106][ T979] usb 4-1: Product: syz [ 530.603932][ T5915] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.632226][ T979] usb 4-1: Manufacturer: syz [ 530.636858][ T979] usb 4-1: SerialNumber: syz [ 530.656577][ T5915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 530.676420][ T979] usb 4-1: config 0 descriptor?? [ 530.696702][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.715353][ T979] usb 4-1: no audio or video endpoints found [ 530.735839][ T5915] usb 1-1: Product: syz [ 530.755961][ T5915] usb 1-1: Manufacturer: syz [ 530.778810][ T5915] usb 1-1: SerialNumber: syz [ 530.816194][ T5915] hub 1-1:1.0: bad descriptor, ignoring hub [ 530.824100][ T5915] hub 1-1:1.0: probe with driver hub failed with error -5 [ 531.046776][ T5915] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 531.214530][T11189] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 531.730711][T11391] trusted_key: encrypted_key: insufficient parameters specified [ 531.814183][T11399] FAULT_INJECTION: forcing a failure. [ 531.814183][T11399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.920101][T11399] CPU: 1 UID: 0 PID: 11399 Comm: syz.4.1593 Not tainted syzkaller #0 PREEMPT(full) [ 531.920127][T11399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.920139][T11399] Call Trace: [ 531.920147][T11399] [ 531.920156][T11399] dump_stack_lvl+0x189/0x250 [ 531.920183][T11399] ? __pfx____ratelimit+0x10/0x10 [ 531.920203][T11399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.920223][T11399] ? __pfx__printk+0x10/0x10 [ 531.920257][T11399] should_fail_ex+0x414/0x560 [ 531.920287][T11399] _copy_to_user+0x31/0xb0 [ 531.920313][T11399] simple_read_from_buffer+0xe1/0x170 [ 531.920344][T11399] proc_fail_nth_read+0x1b3/0x220 [ 531.920367][T11399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.920391][T11399] ? rw_verify_area+0x2a6/0x4d0 [ 531.920412][T11399] ? __lock_acquire+0xab9/0xd20 [ 531.920434][T11399] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 531.920456][T11399] vfs_read+0x200/0xa30 [ 531.920478][T11399] ? fdget_pos+0x247/0x320 [ 531.920502][T11399] ? __pfx___mutex_lock+0x10/0x10 [ 531.920522][T11399] ? __pfx_vfs_read+0x10/0x10 [ 531.920544][T11399] ? __fget_files+0x2a/0x420 [ 531.920563][T11399] ? __fget_files+0x3a0/0x420 [ 531.920577][T11399] ? __fget_files+0x2a/0x420 [ 531.920602][T11399] ksys_read+0x145/0x250 [ 531.920627][T11399] ? __pfx_ksys_read+0x10/0x10 [ 531.920654][T11399] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.920677][T11399] __do_fast_syscall_32+0xb6/0x2b0 [ 531.920698][T11399] ? lockdep_hardirqs_on+0x9c/0x150 [ 531.920722][T11399] do_fast_syscall_32+0x34/0x80 [ 531.920743][T11399] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 531.920770][T11399] RIP: 0023:0xf70be539 [ 531.920786][T11399] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 531.920801][T11399] RSP: 002b:00000000f548d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 531.920819][T11399] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f548d620 [ 531.920832][T11399] RDX: 000000000000000f RSI: 00000000f7455ff4 RDI: 0000000000000000 [ 531.920843][T11399] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 531.920854][T11399] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.920865][T11399] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 531.920893][T11399] [ 532.493714][ T43] usb 4-1: USB disconnect, device number 91 [ 533.068125][ T43] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 533.202098][ T43] usb 2-1: device descriptor read/64, error -71 [ 533.474476][ T43] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 533.768590][ T43] usb 2-1: device descriptor read/64, error -71 [ 533.879469][ T43] usb usb2-port1: attempt power cycle [ 534.339741][ T43] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 534.573253][ T43] usb 2-1: device descriptor read/8, error -71 [ 535.065235][ T43] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 535.128032][ T43] usb 2-1: device descriptor read/8, error -71 [ 535.248555][ T43] usb usb2-port1: unable to enumerate USB device [ 535.391329][ T5915] usb 1-1: USB disconnect, device number 88 [ 535.450982][ T5915] usblp0: removed [ 535.478423][T11450] fuse: Unknown parameter 'group_id00000000000000000000' [ 536.287216][ T5915] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 536.747265][ T5915] usb 1-1: Using ep0 maxpacket: 8 [ 536.767001][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 536.789209][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.947174][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.977250][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 537.003790][ T5915] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 537.077272][ T5915] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 537.099341][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.119975][ T5915] usb 1-1: config 0 descriptor?? [ 537.141590][T11462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 537.158092][ T5865] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 537.548535][T11471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1615'. [ 537.571246][ T43] usb 1-1: USB disconnect, device number 89 [ 537.583888][T11189] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 539.335211][T11498] FAULT_INJECTION: forcing a failure. [ 539.335211][T11498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.348929][T11498] CPU: 1 UID: 0 PID: 11498 Comm: syz.2.1619 Not tainted syzkaller #0 PREEMPT(full) [ 539.348953][T11498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 539.348965][T11498] Call Trace: [ 539.348973][T11498] [ 539.348982][T11498] dump_stack_lvl+0x189/0x250 [ 539.349008][T11498] ? __pfx____ratelimit+0x10/0x10 [ 539.349031][T11498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.349052][T11498] ? __pfx__printk+0x10/0x10 [ 539.349096][T11498] should_fail_ex+0x414/0x560 [ 539.349127][T11498] _copy_to_user+0x31/0xb0 [ 539.349153][T11498] pagemap_read+0x4d4/0x7b0 [ 539.349181][T11498] ? __pfx_pagemap_read+0x10/0x10 [ 539.349205][T11498] ? rw_verify_area+0x2a6/0x4d0 [ 539.349227][T11498] ? __lock_acquire+0xab9/0xd20 [ 539.349250][T11498] ? __pfx_pagemap_read+0x10/0x10 [ 539.349269][T11498] vfs_read+0x200/0xa30 [ 539.349300][T11498] ? __pfx_vfs_read+0x10/0x10 [ 539.349324][T11498] ? __fget_files+0x2a/0x420 [ 539.349344][T11498] ? __fget_files+0x2a/0x420 [ 539.349359][T11498] ? __fget_files+0x3a0/0x420 [ 539.349375][T11498] ? __fget_files+0x2a/0x420 [ 539.349400][T11498] ksys_pread64+0x126/0x1c0 [ 539.349426][T11498] ? __pfx_ksys_pread64+0x10/0x10 [ 539.349453][T11498] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.349470][T11498] ? __ia32_sys_ia32_pread64+0x20/0xd0 [ 539.349496][T11498] __do_fast_syscall_32+0xb6/0x2b0 [ 539.349517][T11498] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.349540][T11498] do_fast_syscall_32+0x34/0x80 [ 539.349560][T11498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 539.349581][T11498] RIP: 0023:0xf70ce539 [ 539.349598][T11498] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 539.349613][T11498] RSP: 002b:00000000f547c55c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4 [ 539.349632][T11498] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080001240 [ 539.349645][T11498] RDX: 0000000000200000 RSI: 0000000000000000 RDI: 0000000000000000 [ 539.349656][T11498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 539.349667][T11498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 539.349678][T11498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 539.349705][T11498] [ 540.174673][ T5865] usb 2-1: unable to get BOS descriptor or descriptor too short [ 540.230340][ T5865] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 540.580040][ T5865] usb 2-1: can't read configurations, error -71 [ 540.842439][T11516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.088438][ T5865] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 541.303986][ T5865] usb 2-1: Using ep0 maxpacket: 16 [ 541.378338][ T5865] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 541.412562][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 541.461387][ T5865] usb 2-1: Product: syz [ 541.501179][ T5865] usb 2-1: Manufacturer: syz [ 541.531831][ T5865] usb 2-1: SerialNumber: syz [ 541.575321][ T5865] usb 2-1: config 0 descriptor?? [ 541.998404][ T5865] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 542.218279][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 542.241036][ T5865] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 542.290338][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 542.311717][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.338171][ T5865] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.381474][ T5865] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.422685][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.463536][T11537] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 542.700106][ T5865] usb 1-1: GET_CAPABILITIES returned 0 [ 542.711773][ T5865] usbtmc 1-1:16.0: can't read capabilities [ 542.994565][T11535] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 543.008871][T11535] batman_adv: batadv0: Adding interface: ip6gretap2 [ 543.016982][T11535] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.044655][T11535] batman_adv: batadv0: Interface activated: ip6gretap2 [ 543.605215][ T5915] usb 2-1: USB disconnect, device number 74 [ 544.065683][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 544.751129][ T5865] usb 1-1: USB disconnect, device number 90 [ 544.990124][T11582] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 545.120960][T11585] fuse: Bad value for 'fd' [ 545.148332][ T30] audit: type=1326 audit(1759122383.794:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.179528][ T30] audit: type=1326 audit(1759122383.794:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.279269][ T30] audit: type=1326 audit(1759122383.804:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.313137][ T30] audit: type=1326 audit(1759122383.804:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.338375][ T30] audit: type=1326 audit(1759122383.804:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.405792][ T30] audit: type=1326 audit(1759122383.804:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.456778][ T30] audit: type=1326 audit(1759122383.804:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.481007][ T30] audit: type=1326 audit(1759122383.804:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.503698][ T5915] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 545.511918][ T979] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 545.609886][ T30] audit: type=1326 audit(1759122383.804:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.645846][ T30] audit: type=1326 audit(1759122383.804:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11586 comm="syz.2.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 545.699712][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 545.709348][ T5915] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 545.718604][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 545.723882][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.732959][ T5915] usb 2-1: Product: syz [ 545.739644][ T979] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 545.748070][ T5915] usb 2-1: Manufacturer: syz [ 545.752770][ T979] usb 1-1: config 0 has no interface number 0 [ 545.758949][ T5915] usb 2-1: SerialNumber: syz [ 545.763978][ T979] usb 1-1: config 0 interface 184 has no altsetting 0 [ 545.774259][ T5915] usb 2-1: config 0 descriptor?? [ 545.786524][ T979] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 545.796699][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.804996][T10996] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 545.817185][ T979] usb 1-1: Product: syz [ 545.821374][ T979] usb 1-1: Manufacturer: syz [ 545.825980][ T979] usb 1-1: SerialNumber: syz [ 545.841424][ T979] usb 1-1: config 0 descriptor?? [ 545.853023][ T979] smsc75xx v1.0.0 [ 545.856715][ T979] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 545.869905][ T979] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 545.937225][ T6662] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 545.995337][T10996] usb 4-1: Using ep0 maxpacket: 8 [ 546.005641][T10996] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 546.023768][T10996] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 546.033889][T10996] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.043918][T10996] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.062532][T10996] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.077227][T10996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.168491][ T6662] usb 3-1: Using ep0 maxpacket: 16 [ 546.188196][ T5915] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 546.195980][ T6662] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.213699][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.232900][ T6662] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 546.246811][ T6662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.255380][ T5915] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 546.263516][ T5915] usb 2-1: media controller created [ 546.279197][ T6662] usb 3-1: config 0 descriptor?? [ 546.345717][T11606] usb usb8: usbfs: process 11606 (syz.4.1661) did not claim interface 0 before use [ 546.365761][T10996] usb 4-1: GET_CAPABILITIES returned 0 [ 546.390967][T11590] dtv5100: wlen = 0, aborting. [ 546.395328][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.396037][T11590] FAULT_INJECTION: forcing a failure. [ 546.396037][T11590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.405036][T10996] usbtmc 4-1:16.0: can't read capabilities [ 546.453001][T11590] CPU: 0 UID: 0 PID: 11590 Comm: syz.1.1656 Not tainted syzkaller #0 PREEMPT(full) [ 546.453029][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 546.453040][T11590] Call Trace: [ 546.453048][T11590] [ 546.453056][T11590] dump_stack_lvl+0x189/0x250 [ 546.453082][T11590] ? __pfx____ratelimit+0x10/0x10 [ 546.453101][T11590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.453121][T11590] ? __pfx__printk+0x10/0x10 [ 546.453157][T11590] should_fail_ex+0x414/0x560 [ 546.453187][T11590] _copy_to_user+0x31/0xb0 [ 546.453211][T11590] i2cdev_ioctl_rdwr+0x5ad/0x740 [ 546.453242][T11590] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 546.453268][T11590] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 546.453299][T11590] ? __fget_files+0x3a0/0x420 [ 546.453315][T11590] ? __fget_files+0x2a/0x420 [ 546.453335][T11590] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 546.453361][T11590] __ia32_compat_sys_ioctl+0x543/0x840 [ 546.453386][T11590] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 546.453409][T11590] ? __fget_files+0x3a0/0x420 [ 546.453432][T11590] ? fput+0xa0/0xd0 [ 546.453451][T11590] ? ksys_write+0x22a/0x250 [ 546.453483][T11590] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.453506][T11590] __do_fast_syscall_32+0xb6/0x2b0 [ 546.453527][T11590] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.453550][T11590] do_fast_syscall_32+0x34/0x80 [ 546.453570][T11590] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.453591][T11590] RIP: 0023:0xf701e539 [ 546.453606][T11590] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 546.453621][T11590] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 546.453640][T11590] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 546.453652][T11590] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.453663][T11590] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.453673][T11590] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.453684][T11590] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.453712][T11590] [ 546.899335][ T5915] zl10353_read_register: readreg error (reg=127, ret==0) [ 546.906501][ T5915] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 546.914732][ T5915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 546.954016][ T5915] usb 2-1: USB disconnect, device number 75 [ 547.000717][ T5915] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 547.065618][ T6662] usbhid 3-1:0.0: can't add hid device: -71 [ 547.072160][ T6662] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 547.081949][ T6662] usb 3-1: USB disconnect, device number 68 [ 547.919255][T11623] input: syz0 as /devices/virtual/input/input29 [ 548.113549][T11591] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 548.141474][T11591] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 548.150703][T11189] Bluetooth: hci0: command 0x0406 tx timeout [ 548.226765][T11591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 548.235748][T11591] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 548.373475][T11591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 548.380137][T11591] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 548.395378][T11591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 548.402450][T11635] fuse: Bad value for 'fd' [ 548.416491][T11591] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 548.486150][ T43] usb 4-1: USB disconnect, device number 92 [ 548.506141][T11591] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 548.521699][T11591] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 548.668248][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 548.740504][ T5865] usb 1-1: USB disconnect, device number 91 [ 549.147721][ T5865] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 549.299834][ T5865] usb 1-1: Using ep0 maxpacket: 16 [ 549.329172][ T5865] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 549.352700][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.369540][ T5865] usb 1-1: Product: syz [ 549.374029][ T5865] usb 1-1: Manufacturer: syz [ 549.381012][ T5865] usb 1-1: SerialNumber: syz [ 549.392638][ T5865] usb 1-1: config 0 descriptor?? [ 549.854099][ T5865] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 549.930288][ T5865] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 549.990544][T11662] delete_channel: no stack [ 549.997056][ T5865] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 550.007004][ T5865] usb 1-1: media controller created [ 550.037959][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.048007][ T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 550.056475][T11647] dtv5100: wlen = 0, aborting. [ 550.390062][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 550.515306][ T43] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 550.531103][ T43] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 550.561526][ T43] usb 2-1: Product: syz [ 550.573803][ T43] usb 2-1: Manufacturer: syz [ 550.593348][ T43] usb 2-1: SerialNumber: syz [ 550.889493][ T43] usb 2-1: config 0 descriptor?? [ 550.894670][ T5865] zl10353_read_register: readreg error (reg=127, ret==0) [ 551.178344][ T5865] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 551.186289][ T5865] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 551.223403][T11660] delete_channel: no stack [ 551.231306][ T5865] usb 1-1: USB disconnect, device number 92 [ 551.477919][ T5865] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 551.912949][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 551.923376][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 551.948014][ T5865] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 552.148376][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 552.159772][ T5865] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 552.191695][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 552.220340][ T5865] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.230909][ T5865] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.244671][ T5865] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.255037][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.498686][ T5865] usb 1-1: GET_CAPABILITIES returned 0 [ 552.504353][ T5865] usbtmc 1-1:16.0: can't read capabilities [ 552.517350][ T5915] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 552.658243][ T43] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 552.703912][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.718268][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.751900][ T5915] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 552.779120][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.804302][ T5915] usb 4-1: config 0 descriptor?? [ 553.069497][ T5865] usb 2-1: USB disconnect, device number 76 [ 553.170810][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 553.335103][ T5915] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 553.352417][ T5915] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 553.368601][ T5915] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 553.385771][ T5915] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 553.400416][ T5915] playstation 0003:054C:0DF2.0015: unknown main item tag 0x0 [ 553.422741][ T5915] playstation 0003:054C:0DF2.0015: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 553.777953][ T5865] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 554.356604][ T6063] usb 1-1: USB disconnect, device number 93 [ 555.448104][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 555.480996][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 555.490413][ T43] usb 3-1: can't read configurations, error -71 [ 555.703174][ T5915] playstation 0003:054C:0DF2.0015: Failed to retrieve feature with reportID 9: -71 [ 555.755486][ T5915] playstation 0003:054C:0DF2.0015: Failed to retrieve DualSense pairing info: -71 [ 555.838293][ T5915] playstation 0003:054C:0DF2.0015: Failed to get MAC address from DualSense [ 555.923750][ T5915] playstation 0003:054C:0DF2.0015: Failed to create dualsense. [ 555.925457][T11729] fuse: Bad value for 'fd' [ 555.949711][ T5915] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -71 [ 555.997477][ T5915] usb 4-1: USB disconnect, device number 93 [ 556.143273][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.169684][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.220214][ T6657] ------------[ cut here ]------------ [ 556.226084][ T6657] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 556.236773][ T6657] WARNING: CPU: 1 PID: 6657 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 556.246843][ T6657] Modules linked in: [ 556.251125][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT(full) [ 556.260675][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.270790][ T6657] Workqueue: mld mld_ifc_work [ 556.275506][ T6657] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 556.281821][ T6657] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 92 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 63 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 556.301496][ T6657] RSP: 0018:ffffc9001c8ae4d8 EFLAGS: 00010246 [ 556.307623][ T6657] RAX: 1820b5f3a41e2800 RBX: 000000000000000c RCX: ffff888025791e00 [ 556.315609][ T6657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 556.323637][ T6657] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 556.331684][ T6657] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: ffff888065265de8 [ 556.339704][ T6657] R13: 0000000000000000 R14: ffff88807bf38e40 R15: ffff88807bf3b0d8 [ 556.347691][ T6657] FS: 0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 556.356606][ T6657] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.363202][ T6657] CR2: 00000000333fdffc CR3: 00000000657d0000 CR4: 00000000003526f0 [ 556.371198][ T6657] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.379203][ T6657] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 556.387181][ T6657] Call Trace: [ 556.390444][ T6657] [ 556.393366][ T6657] rate_control_send_low+0x194/0x7a0 [ 556.398836][ T6657] rate_control_get_rate+0x20b/0x5d0 [ 556.404128][ T6657] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 556.409784][ T6657] ? __lock_acquire+0xab9/0xd20 [ 556.414628][ T6657] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 556.420753][ T6657] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 556.426996][ T6657] invoke_tx_handlers_late+0xb6/0x1820 [ 556.432500][ T6657] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 556.438430][ T6657] ieee80211_tx_dequeue+0x308e/0x4360 [ 556.443843][ T6657] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 556.449596][ T6657] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.454991][ T6657] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 556.461145][ T6657] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 556.467777][ T6657] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.473158][ T6657] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 556.478917][ T6657] ? do_raw_spin_unlock+0x122/0x240 [ 556.484126][ T6657] ieee80211_queue_skb+0x1a2e/0x21c0 [ 556.489489][ T6657] ieee80211_tx+0x297/0x420 [ 556.493988][ T6657] ? __pfx_ieee80211_tx+0x10/0x10 [ 556.499071][ T6657] ? ieee80211_xmit+0x315/0x400 [ 556.503910][ T6657] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 556.509949][ T6657] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 556.516104][ T6657] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 556.522539][ T6657] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 556.528800][ T6657] ieee80211_subif_start_xmit+0xe0/0x510 [ 556.534423][ T6657] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 556.540673][ T6657] ? __pfx_netif_skb_features+0x10/0x10 [ 556.546226][ T6657] ? call_rcu+0x6ff/0x9c0 [ 556.550570][ T6657] ? __lock_acquire+0xab9/0xd20 [ 556.555415][ T6657] dev_hard_start_xmit+0x2d7/0x830 [ 556.560551][ T6657] __dev_queue_xmit+0x1b8d/0x3b50 [ 556.565564][ T6657] ? register_lock_class+0x51/0x320 [ 556.570780][ T6657] ? __dev_queue_xmit+0x27b/0x3b50 [ 556.575903][ T6657] ? __pfx___dev_queue_xmit+0x10/0x10 [ 556.581292][ T6657] ? read_seqbegin+0x122/0x250 [ 556.586043][ T6657] ? neigh_resolve_output+0x438/0x750 [ 556.591422][ T6657] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.596629][ T6657] ? read_seqbegin+0x1ac/0x250 [ 556.601398][ T6657] ? __pfx_read_seqbegin+0x10/0x10 [ 556.606491][ T6657] ? __local_bh_enable_ip+0x12d/0x1c0 [ 556.611866][ T6657] ? eth_header+0x11b/0x200 [ 556.616356][ T6657] ? __asan_memcpy+0x40/0x70 [ 556.620954][ T6657] ? eth_header+0x11b/0x200 [ 556.625466][ T6657] ? __pfx_eth_header+0x10/0x10 [ 556.630324][ T6657] ? neigh_resolve_output+0x624/0x750 [ 556.635688][ T6657] ip6_finish_output2+0x11fe/0x16a0 [ 556.640896][ T6657] ? ip6_finish_output2+0x701/0x16a0 [ 556.646167][ T6657] ? ip6_mtu+0x7d/0x3f0 [ 556.650334][ T6657] ? __pfx_ip6_finish_output2+0x10/0x10 [ 556.655862][ T6657] ? ip6_mtu+0x7d/0x3f0 [ 556.660056][ T6657] ? ip6_mtu+0x321/0x3f0 [ 556.664289][ T6657] ? ip6_finish_output+0x2ef/0x4e0 [ 556.669421][ T6657] NF_HOOK+0x9e/0x380 [ 556.673389][ T6657] ? __pfx_NF_HOOK+0x10/0x10 [ 556.677989][ T6657] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 556.683800][ T6657] ? do_raw_spin_unlock+0x122/0x240 [ 556.689030][ T6657] ? icmp6_dst_alloc+0x3a5/0x420 [ 556.693957][ T6657] ? icmp6_dst_alloc+0x3a5/0x420 [ 556.698911][ T6657] mld_sendpack+0x800/0xd80 [ 556.703412][ T6657] ? mld_sendpack+0x1de/0xd80 [ 556.708096][ T6657] ? __pfx_mld_sendpack+0x10/0x10 [ 556.713134][ T6657] mld_ifc_work+0x83e/0xd60 [ 556.717650][ T6657] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.722850][ T6657] ? process_scheduled_works+0x9ef/0x17b0 [ 556.728579][ T6657] process_scheduled_works+0xade/0x17b0 [ 556.734130][ T6657] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.740160][ T6657] worker_thread+0x8a0/0xda0 [ 556.744738][ T6657] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 556.751078][ T6657] ? __kthread_parkme+0x7b/0x200 [ 556.756014][ T6657] kthread+0x711/0x8a0 [ 556.760101][ T6657] ? __pfx_worker_thread+0x10/0x10 [ 556.765193][ T6657] ? __pfx_kthread+0x10/0x10 [ 556.769793][ T6657] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.774970][ T6657] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.780167][ T6657] ? __pfx_kthread+0x10/0x10 [ 556.784755][ T6657] ret_from_fork+0x439/0x7d0 [ 556.789345][ T6657] ? __pfx_ret_from_fork+0x10/0x10 [ 556.794438][ T6657] ? __switch_to_asm+0x39/0x70 [ 556.799204][ T6657] ? __switch_to_asm+0x33/0x70 [ 556.803950][ T6657] ? __pfx_kthread+0x10/0x10 [ 556.808540][ T6657] ret_from_fork_asm+0x1a/0x30 [ 556.813296][ T6657] [ 556.816294][ T6657] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 556.823549][ T6657] CPU: 1 UID: 0 PID: 6657 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT(full) [ 556.832979][ T6657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.843029][ T6657] Workqueue: mld mld_ifc_work [ 556.847707][ T6657] Call Trace: [ 556.850978][ T6657] [ 556.853921][ T6657] dump_stack_lvl+0x99/0x250 [ 556.858491][ T6657] ? __asan_memcpy+0x40/0x70 [ 556.863076][ T6657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.868254][ T6657] ? __pfx__printk+0x10/0x10 [ 556.873108][ T6657] vpanic+0x281/0x750 [ 556.877070][ T6657] ? __pfx__printk+0x10/0x10 [ 556.881661][ T6657] ? __pfx_vpanic+0x10/0x10 [ 556.886140][ T6657] ? is_bpf_text_address+0x292/0x2b0 [ 556.891429][ T6657] panic+0xb9/0xc0 [ 556.895131][ T6657] ? __pfx_panic+0x10/0x10 [ 556.899534][ T6657] __warn+0x31b/0x4b0 [ 556.903492][ T6657] ? __rate_control_send_low+0x5df/0x820 [ 556.909118][ T6657] ? __rate_control_send_low+0x5df/0x820 [ 556.914734][ T6657] report_bug+0x2be/0x4f0 [ 556.919054][ T6657] ? __rate_control_send_low+0x5df/0x820 [ 556.924664][ T6657] ? __rate_control_send_low+0x5df/0x820 [ 556.930275][ T6657] ? __rate_control_send_low+0x5e1/0x820 [ 556.935884][ T6657] handle_bug+0x84/0x160 [ 556.940106][ T6657] exc_invalid_op+0x1a/0x50 [ 556.944595][ T6657] asm_exc_invalid_op+0x1a/0x20 [ 556.949422][ T6657] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 556.955649][ T6657] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 40 92 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 63 92 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 556.975232][ T6657] RSP: 0018:ffffc9001c8ae4d8 EFLAGS: 00010246 [ 556.981282][ T6657] RAX: 1820b5f3a41e2800 RBX: 000000000000000c RCX: ffff888025791e00 [ 556.989231][ T6657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 556.997200][ T6657] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 557.005160][ T6657] R10: dffffc0000000000 R11: fffffbfff1bfa234 R12: ffff888065265de8 [ 557.013106][ T6657] R13: 0000000000000000 R14: ffff88807bf38e40 R15: ffff88807bf3b0d8 [ 557.021072][ T6657] ? __rate_control_send_low+0x5de/0x820 [ 557.026697][ T6657] rate_control_send_low+0x194/0x7a0 [ 557.031981][ T6657] rate_control_get_rate+0x20b/0x5d0 [ 557.037267][ T6657] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 557.042881][ T6657] ? __lock_acquire+0xab9/0xd20 [ 557.047724][ T6657] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 557.053775][ T6657] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 557.060003][ T6657] invoke_tx_handlers_late+0xb6/0x1820 [ 557.065446][ T6657] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 557.071326][ T6657] ieee80211_tx_dequeue+0x308e/0x4360 [ 557.076735][ T6657] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 557.082430][ T6657] ? __local_bh_enable_ip+0x12d/0x1c0 [ 557.087815][ T6657] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 557.093866][ T6657] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 557.100428][ T6657] ? __local_bh_enable_ip+0x12d/0x1c0 [ 557.105777][ T6657] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 557.111473][ T6657] ? do_raw_spin_unlock+0x122/0x240 [ 557.116654][ T6657] ieee80211_queue_skb+0x1a2e/0x21c0 [ 557.121943][ T6657] ieee80211_tx+0x297/0x420 [ 557.126425][ T6657] ? __pfx_ieee80211_tx+0x10/0x10 [ 557.131439][ T6657] ? ieee80211_xmit+0x315/0x400 [ 557.136270][ T6657] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 557.142233][ T6657] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 557.148372][ T6657] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 557.154767][ T6657] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 557.160992][ T6657] ieee80211_subif_start_xmit+0xe0/0x510 [ 557.166621][ T6657] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 557.172896][ T6657] ? __pfx_netif_skb_features+0x10/0x10 [ 557.178620][ T6657] ? call_rcu+0x6ff/0x9c0 [ 557.182959][ T6657] ? __lock_acquire+0xab9/0xd20 [ 557.187805][ T6657] dev_hard_start_xmit+0x2d7/0x830 [ 557.192914][ T6657] __dev_queue_xmit+0x1b8d/0x3b50 [ 557.197931][ T6657] ? register_lock_class+0x51/0x320 [ 557.203119][ T6657] ? __dev_queue_xmit+0x27b/0x3b50 [ 557.208239][ T6657] ? __pfx___dev_queue_xmit+0x10/0x10 [ 557.213592][ T6657] ? read_seqbegin+0x122/0x250 [ 557.218334][ T6657] ? neigh_resolve_output+0x438/0x750 [ 557.223688][ T6657] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.228883][ T6657] ? read_seqbegin+0x1ac/0x250 [ 557.233652][ T6657] ? __pfx_read_seqbegin+0x10/0x10 [ 557.238750][ T6657] ? __local_bh_enable_ip+0x12d/0x1c0 [ 557.244106][ T6657] ? eth_header+0x11b/0x200 [ 557.248603][ T6657] ? __asan_memcpy+0x40/0x70 [ 557.253209][ T6657] ? eth_header+0x11b/0x200 [ 557.257698][ T6657] ? __pfx_eth_header+0x10/0x10 [ 557.262529][ T6657] ? neigh_resolve_output+0x624/0x750 [ 557.267903][ T6657] ip6_finish_output2+0x11fe/0x16a0 [ 557.273111][ T6657] ? ip6_finish_output2+0x701/0x16a0 [ 557.278385][ T6657] ? ip6_mtu+0x7d/0x3f0 [ 557.282541][ T6657] ? __pfx_ip6_finish_output2+0x10/0x10 [ 557.288066][ T6657] ? ip6_mtu+0x7d/0x3f0 [ 557.292205][ T6657] ? ip6_mtu+0x321/0x3f0 [ 557.296514][ T6657] ? ip6_finish_output+0x2ef/0x4e0 [ 557.301636][ T6657] NF_HOOK+0x9e/0x380 [ 557.305598][ T6657] ? __pfx_NF_HOOK+0x10/0x10 [ 557.310163][ T6657] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 557.315950][ T6657] ? do_raw_spin_unlock+0x122/0x240 [ 557.321147][ T6657] ? icmp6_dst_alloc+0x3a5/0x420 [ 557.326081][ T6657] ? icmp6_dst_alloc+0x3a5/0x420 [ 557.331022][ T6657] mld_sendpack+0x800/0xd80 [ 557.335525][ T6657] ? mld_sendpack+0x1de/0xd80 [ 557.340182][ T6657] ? __pfx_mld_sendpack+0x10/0x10 [ 557.345197][ T6657] mld_ifc_work+0x83e/0xd60 [ 557.349685][ T6657] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.355121][ T6657] ? process_scheduled_works+0x9ef/0x17b0 [ 557.360836][ T6657] process_scheduled_works+0xade/0x17b0 [ 557.366391][ T6657] ? __pfx_process_scheduled_works+0x10/0x10 [ 557.372363][ T6657] worker_thread+0x8a0/0xda0 [ 557.376938][ T6657] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 557.383251][ T6657] ? __kthread_parkme+0x7b/0x200 [ 557.388184][ T6657] kthread+0x711/0x8a0 [ 557.392239][ T6657] ? __pfx_worker_thread+0x10/0x10 [ 557.397328][ T6657] ? __pfx_kthread+0x10/0x10 [ 557.401900][ T6657] ? _raw_spin_unlock_irq+0x23/0x50 [ 557.407075][ T6657] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.412261][ T6657] ? __pfx_kthread+0x10/0x10 [ 557.416843][ T6657] ret_from_fork+0x439/0x7d0 [ 557.421429][ T6657] ? __pfx_ret_from_fork+0x10/0x10 [ 557.426528][ T6657] ? __switch_to_asm+0x39/0x70 [ 557.431274][ T6657] ? __switch_to_asm+0x33/0x70 [ 557.436020][ T6657] ? __pfx_kthread+0x10/0x10 [ 557.440595][ T6657] ret_from_fork_asm+0x1a/0x30 [ 557.445350][ T6657] [ 557.448623][ T6657] Kernel Offset: disabled [ 557.452941][ T6657] Rebooting in 86400 seconds..