last executing test programs: 16m14.034604483s ago: executing program 4 (id=109): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e3400000000000000000000000002000100000000000000081600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) 16m12.888048837s ago: executing program 4 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x0) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r12, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0) 16m10.242909594s ago: executing program 4 (id=124): r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f00000010c0)='cgroup\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/sockstat\x00') pread64(r2, &(0x7f0000000480)=""/209, 0xd1, 0x2) request_key(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000001100)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f00000001c0)={0x8, 0xc11, 0x1}) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80102, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000002c0)=0x40000) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x2) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000280)=0x80, 0x4) read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) setsockopt$inet_mtu(r7, 0x0, 0xa, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f00000026c0)=[{{&(0x7f00000022c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=[@dstopts_2292={{0x14, 0x29, 0x4, {0x16}}}, @rthdr={{0x14, 0x29, 0x39, {0x88, 0x0, 0x2, 0x6c}}}], 0x28}}], 0x2, 0x20000080) preadv(r1, &(0x7f0000002240)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1, 0x29d3, 0x6) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00') preadv(r8, &(0x7f0000000100), 0x20000000000002a8, 0x8001, 0x2) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00300c00030040f400be4d63"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000300)={0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="ca286f9400005d7467e36e420c2880bb96a2fcceeca89f35f37f5244d224000000000000000000000000000031c6"], 0x0, 0x0}) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000001080)={0x10000, 0xe000, 0x81, 0x8, 0x9}) 16m6.304378086s ago: executing program 4 (id=136): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) dup(r6) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x3c, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x5, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_BURST={0x0, 0x6, 0x10001}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x18, &(0x7f00000002c0)={0x20, 0x30, 0x4, "e0da3720"}, 0x0, 0x0, 0x0, 0x0}) 16m3.604228323s ago: executing program 4 (id=152): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0xc, &(0x7f0000000000)={0x0, 0xf, 0x94, {0x94, 0x22, "0a1fa9c1b83b9e4b81abe7f2d9818831e88c7448806f665ba0c1e5fd7ef0072d9083adee111400d57b270e071e236df7e4fd3473cebc956912a14c8fb7ad58bcb0b391156e52fae784870ad10cb39308b8465ada14d8bec80c1430bc04285d572bde8397bf880cb008ba9e8abe10af76d96db07babcd9057c0b5064c1f32870bd353ed9f21807a73d76fc45bd280b1c3b5f6"}}, &(0x7f00000000c0)={0x0, 0x3, 0x98, @string={0x98, 0x3, "15dd368cdb0aca7d6ed7067184d05e017b616e6228fe8246bb7ef760345d7d2033482aec7e9483e5dee8392880827fbcf68b5fb3b0f9c4343b842b13b5ff14f7a8825086a954477f1cd15ee0e433f9021d4c92e73f4dec34279a0b9cf40729142e980aa043bdc3b776908b9f7776b7a5e57cd15ea3decdf74580c6b1f20401c1a4735a90faeb14ecf140dc7230a86da4a78ba3250b80"}}}, &(0x7f0000000440)={0x24, &(0x7f00000001c0)={0x40, 0x10, 0x5b, "a86ff872db6dd54f599368dbe211b49aebe54d06678039d8ca96ce6c23e12a437e1a9811e3f673a8ae092a27f234c7e15ad1e134cf06f99ed0f0d528876f47e2fef99003e1a5bf5727d50bd1902b89fc2f01eecb2bb80b42072510"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "319203"}, &(0x7f0000000300)={0x20, 0x82, 0x3, "76c2e0"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "5d12"}, &(0x7f0000000380)={0x20, 0x84, 0x2, "a48d"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "43a502"}}) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 16m3.32324349s ago: executing program 4 (id=155): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CT={0x4}, @NFQA_CT={0x4}, @NFQA_EXP={0x6a, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}]}, 0xfffffffffffffdd1}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @private2, 0x4000a, 0x23}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xc, 0x84, 0x71}], 0xc}}], 0x2, 0x44055) r7 = syz_io_uring_setup(0xeeb, &(0x7f0000000480)={0x0, 0x8002, 0x10100, 0x0, 0x3c8}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r5, 0x73b, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x567, 0xa9ea, 0x5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x201f00) r11 = socket(0x23, 0x6, 0x2007a30) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket(0xa, 0x1, 0x0) 16m2.925574195s ago: executing program 32 (id=155): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x1, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CT={0x4}, @NFQA_CT={0x4}, @NFQA_EXP={0x6a, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}]}, 0xfffffffffffffdd1}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffff6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @private2, 0x4000a, 0x23}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0xc, 0x84, 0x71}], 0xc}}], 0x2, 0x44055) r7 = syz_io_uring_setup(0xeeb, &(0x7f0000000480)={0x0, 0x8002, 0x10100, 0x0, 0x3c8}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r5, 0x73b, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x567, 0xa9ea, 0x5, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x201f00) r11 = socket(0x23, 0x6, 0x2007a30) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0x8, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket(0xa, 0x1, 0x0) 2m53.111880178s ago: executing program 3 (id=3632): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002dc0)=@newtfilter={0x44, 0x2c, 0x4, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x4) r10 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000f541b95b1a5f6ad600000000"], 0x8) 2m51.433667094s ago: executing program 3 (id=3638): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', r1, 0x0, 0x55) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x290080, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/57, 0x0, 0x32d55b790c73fadc}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/75, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000640)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r5, &(0x7f00000005c0)={0x89, 0x7d, 0x3, {{0x500, 0xfe, 0x1, 0x4, {0x10, 0x1, 0x5}, 0x1000000, 0x1ff, 0x0, 0x0, 0x27, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92{\xe8$|\x8e\xdd\xf1\x8b\xcf\xa6\xe0\xe1\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00'/93}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23f) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af04, &(0x7f0000000400)) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000002, 0x0, 0xe000000000040000}]}) 2m51.325211278s ago: executing program 3 (id=3640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x6, 0x1007}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x4d5, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x1, 0x0, 0xb7, 0xffffffff, 0x200}}, 0xe4) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x1d) syz_usb_disconnect(r4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_io_uring_setup(0x3d7c, &(0x7f0000000240)={0x0, 0x89b8, 0x1, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x71, 0x0, @fd=r6, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x240040a4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff) add_key$user(&(0x7f00000003c0), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000000bc0)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8c22bb16bfdeef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b38dd70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de409292545003bcae3d78533c6d30cbdeb1188d11d1de4317d2aab23561b59845ad52db3d9e3d55fe361f3df8d6148f07fa6ad74b8e7f21db73d91ca355f9a7af972320f7c946161580a9baee3c1b9677c27be4a1edb27095c23ae76c6206777552125bfbae01c98304942e910e683eda1b5d93a15d169fa8e926f3670365034b93bdb125ae4288cce135cb3481980af8c8d5385723956ecea8cafd40d24a65ddfac5e3f0824c923e2f513f8c6608db77466736b702a1db6f2c136e4fe4d9922cdaa79bc5fe70bc6470ee61e4821904be81d41322b92db207854599d77300180480195d6f2a934d1814d179dac0c021da2b74d4aca2ad193ac65dcd94b80de6ccd6b9894319baf64e07a509eec0da2bf0e480a603b035869d55443d78636e15be6ab3181a461c5dace8b2c9a805cbdd8da6c5a890d5fa6779d339c7d14d21425e6e6b475a86a111f7670dd29355bbe8542d432e1913022efe5ee5d60d861ed7316dac21aa1f81113f6914d4e0d5714c748fb043e7644b76a67152b9852e9bd23dfc48aafb044978fd83c5f209b5c07fd85abc9edd00161c482b3fa3506057116d6b024c7e09518d16515de8250c69c81b203936589c65ab54341920106758cf501967f9ee048e42353007b769a36aff56f82e67d80eed5de2210a2135e15ec308872d68021c31a1e46f87b78f798ea1e65a885b64cfdad5df699bc09581cca5c4bd627d68de634802e364bc61ab834cd597b5f1746b4f6ef5d8dd48b2d65ae96e344fdbc110f40492343c2e9f6d27ed77e6604e119602ff17df8bfc55b6f43178a35926a378242ed8a3364670b6a27795980bccfc919cb6f6af63a4e7e492a7700753365bae1b3e15036b121991fb9849a1f4f23de8a3428c220183b837716f7a1acf4457f85bc259fd7d0c4dee7462e15b27a61bfadbe67f945e6a5463d309f89e3a450a1e37161217e7b0eed5acf7daad76c3dda45c4a4312096bb1ebbafce905c877782f420ad7240f23201ee40ca6df02c8620ab1ad6f6550730504658562112b00425aba132f608ca2d108caee4be62cb810404a9fc3b5f1b5e3a88e6a835ceadc0fdc4f44f74cc9247c8af2b23315ed6e506c52fd58f639c46889bee85ebc8d6263258d9cdc97734b1e3d21ec7ba82ca7ecc79ce114e8c51c219d54568e5c083565e5c7cf8dcda37256371b16247f9d955438c96211790f429e6b4651b3091c1eb4c9fdcb8cd0e12f7a", 0x424, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f0000000b80)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000029000000040000002c000000e9ff00001000000029"], 0x24}}], 0x1, 0x2004000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m47.75081734s ago: executing program 3 (id=3647): socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000e39000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x100) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x498, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0xfff2, 0x12}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x46c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x40, 0x8d, 0x80, 0xb7eb}, {0x9, 0x83, 0x8a, 0x8}, {0x6aa, 0x42, 0x1, 0x8}]}}, @TCA_BPF_POLICE={0x444, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x343, 0xe9fb, 0x1000005, 0x5b91, 0x4, 0x1, 0x800, 0x5, 0x3, 0x3, 0x8000, 0x4, 0x6, 0x3, 0x0, 0x1ff, 0x77, 0x43, 0x4, 0x2, 0x5d, 0x8, 0x8001, 0x4, 0x3, 0x0, 0xfffff989, 0x8, 0x6, 0x71dbd584, 0x2, 0x7, 0xd8, 0x9, 0x4, 0x3, 0xfffffffe, 0x5, 0x9a, 0x1, 0x3, 0x80000001, 0x1, 0x2, 0xfffffffb, 0x7fffffff, 0x2, 0x8, 0x8, 0x10, 0x10, 0x1, 0x2, 0x4, 0x8, 0x7fff, 0x5, 0x0, 0x0, 0x6, 0x9, 0x2, 0x0, 0x3, 0x7, 0x91400, 0x8b9d, 0xff, 0x80, 0xfffffffa, 0xb, 0x8000, 0xb26f, 0x6, 0x4c, 0xff, 0x7d, 0x36, 0x81, 0x80000100, 0xfc9, 0x6, 0xfffffff0, 0x9, 0x5, 0x9, 0x80008010, 0xe, 0x2, 0x80000000, 0xff, 0x3, 0x7, 0x1, 0xa6dd, 0x7, 0xfffffff9, 0x8, 0x82, 0x101, 0x9, 0x3, 0xbdb, 0x1ff, 0x1, 0xc, 0x40, 0xffff8001, 0xffff, 0x8, 0x7fff, 0x402, 0x2, 0x2, 0x7, 0x2, 0xbce, 0x8, 0xd, 0x80, 0x4, 0xacda, 0x4, 0x3542, 0x7, 0xf79, 0x7, 0x3, 0x6, 0x0, 0x7, 0x6, 0x5, 0x100, 0x1, 0x2, 0x80000001, 0x200, 0x1, 0x9, 0x4, 0x0, 0xe200000, 0x6, 0x80000001, 0xaf6, 0x3, 0x10001, 0xe47b, 0x8, 0x3, 0x4, 0x4, 0x5, 0x0, 0x985, 0x5, 0xd, 0xf4d, 0x7, 0x8001, 0x1c4fd68f, 0x1, 0x5, 0x7fff, 0x0, 0xc2, 0x0, 0x5, 0x81, 0x3, 0x1c37, 0x3, 0xab, 0x2, 0x3, 0xb171, 0x8, 0xf, 0x2cb6, 0x6, 0x2, 0x2, 0x70, 0x80, 0x2, 0xfd, 0x5, 0xb417, 0x2, 0x400, 0x6d, 0xb, 0x401, 0x4, 0x2223, 0x2, 0x200, 0x1, 0x4, 0x1, 0x1, 0xab0, 0xd, 0x80, 0x3ff, 0xcdf6, 0x7, 0x7, 0x7, 0xfffffffa, 0xc54, 0xfffffd18, 0x9, 0x7, 0x7, 0x2, 0x3, 0x9, 0x6, 0x7fff, 0x4, 0xffff, 0x1, 0x381, 0x400, 0x4, 0x274, 0x8001, 0x5, 0x4, 0x5, 0x8, 0x1, 0x8000, 0x2, 0xc9a6, 0xfff, 0x0, 0x4, 0x9, 0x4a78, 0xdf5, 0x5, 0xfffffffe, 0x5, 0x7ff, 0x6, 0xdb, 0x4d, 0x19, 0x7ff, 0x2, 0x5, 0xff6d, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x1000, 0x4, 0x3, {0xb, 0x2, 0x200, 0x4684, 0x80, 0xfffffffe}, {0x0, 0x2, 0x4, 0x1ff, 0x7b}, 0xfb, 0x3, 0x5}}]}]}}]}, 0x498}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) 2m45.848091413s ago: executing program 3 (id=3654): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) io_setup(0x2, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000002500)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0500008b0000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500030000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05000000000000000f000f00000008000300", @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d"], 0x74}}, 0x0) 2m45.628271346s ago: executing program 3 (id=3655): r0 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000002060102000000000000000007000005050001000600000005000500020000000000000010000300686173683a69702c656163001e5132a85f3ef844e0d9a56d557f71ddf5d396febac834e2f57a247dd1028f10c1c9be482e504e25afca3fdacecd57b078d784f63831f0cf66a9cd6f5102f65e3bff984ce93cd6392c7ff5dfb8933b21ab0629bb1bcd07f67efdb94498bd05a5864b"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000040)="62549ed7866c12e6de4aa219f4a2db6c4e219063f894317f3f453845366b3221f5128d0d22da5dce6a7f39fb944b65e86c6b5649a8", 0x35, 0x20000800, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') r7 = syz_open_dev$video4linux(&(0x7f0000000180), 0x10, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x5, "01735021d56c75ef3be5c9fa05eb17db7946612f8fd17306e22a4b493d5f30f8", 0x8, 0x1bb, 0x3ff, 0x7, 0x8001, 0x3, 0x0, 0x0, [0x10001, 0x7, 0x401000a, 0x7]}) preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a40)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x1, 0xc9, 0x1, 0x9, "7f118820125a2a89"}}}, 0x10) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, &(0x7f0000001100)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 2m44.628234368s ago: executing program 33 (id=3655): r0 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000002060102000000000000000007000005050001000600000005000500020000000000000010000300686173683a69702c656163001e5132a85f3ef844e0d9a56d557f71ddf5d396febac834e2f57a247dd1028f10c1c9be482e504e25afca3fdacecd57b078d784f63831f0cf66a9cd6f5102f65e3bff984ce93cd6392c7ff5dfb8933b21ab0629bb1bcd07f67efdb94498bd05a5864b"], 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0xfa, 0x101, 0x1000, 0x10, 0xf, "24669c7029b3856e66e74b1117149e7a265ae1"}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000040)="62549ed7866c12e6de4aa219f4a2db6c4e219063f894317f3f453845366b3221f5128d0d22da5dce6a7f39fb944b65e86c6b5649a8", 0x35, 0x20000800, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') r7 = syz_open_dev$video4linux(&(0x7f0000000180), 0x10, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x5, "01735021d56c75ef3be5c9fa05eb17db7946612f8fd17306e22a4b493d5f30f8", 0x8, 0x1bb, 0x3ff, 0x7, 0x8001, 0x3, 0x0, 0x0, [0x10001, 0x7, 0x401000a, 0x7]}) preadv(r6, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a40)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x1, 0xc9, 0x1, 0x9, "7f118820125a2a89"}}}, 0x10) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r9, 0x8070ae9f, &(0x7f0000001100)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 7.506781533s ago: executing program 2 (id=4358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x1, 0x0) 6.636279143s ago: executing program 2 (id=4364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(r2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, 0x0, 0x2, 0x0) sendfile(r9, r9, 0x0, 0x4) r10 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) 5.148661003s ago: executing program 2 (id=4378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000016, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) shmdt(r5) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) capget(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xfefc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000c000780050015000b000000050005000a00fece978ef4068b750000050004000000000009000200737954fa6fc89942b01a0300686173683a6e65742c69666163650000"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, 0x0, r9}, 0x64) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ff2000/0x3000)=nil, 0x3000, 0x3000008, 0x11, r7, 0x125a8000) socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000) 4.868162857s ago: executing program 6 (id=4380): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x44) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x9, 0xc, 0x80, 0x9, 0xc, 0x4, 0x0, 0x0, 0xf8, 0x9, 0x9, 0x0, 0x5}, {0xcec, 0x8, 0x93, 0x6, 0x3, 0x2, 0x6, 0x8, 0x7f, 0x3, 0x9, 0x5, 0x7}, {0xa, 0x40, 0x5, 0x8, 0x1, 0x5, 0x2, 0x9, 0x2, 0xc2, 0x9, 0xfa, 0x1}], 0x3}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000380)={0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="140d28000000280ba10562020000000c895ea7cbab6ec02c00000000185ca7e3389746d235b84e604a6500000000"], &(0x7f0000000280)=ANY=[@ANYBLOB="0003e8000000e803f60bf679b0ce992415c89d3bf0f6f6aff7fd0b3daecd9d8d4675bb6d4323c5cf5c48699526f13a1633335b4f4cc21f6d904944db0b78f60ed40a285d07634f86375a8f585f45a966d33a4057d70b8df386a6f2ff87b0fc41b4ff119149ba9e2bfa6d9631ef5340efc27df922a6090edc32d558eb000114d0261737ff602f4dd4128b8225fa2a6ccd1a0a9a6712f86f68c3b3c0d354c48586f69c14573605656699bbed7dd920763afd29ca83fa96ff851baa263d1b2e83050256a9d3ec0ccd880ea719ff495251bfe57cb1c3fb2a9b6eeec053fdf3114f5467ca201a837c00bcec6328564cda"]}, &(0x7f0000000580)={0x18, &(0x7f0000000500)=ANY=[@ANYBLOB="400c08cd9da652d1df4eb116ca", @ANYRES32=r1, @ANYRESHEX=r2], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000480), &(0x7f00000004c0)={0x40, 0x5, 0x5, "73ead4943a"}}) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000080)="00012c61") close(r3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000540)={0x60002013}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r5, 0xc02064a4, &(0x7f0000000140)={r6, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x9) dup(r9) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) 4.452526147s ago: executing program 5 (id=4383): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c1000214e0000224e0000", 0x58}], 0x1) 4.240294118s ago: executing program 5 (id=4384): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7030000000000007b01860000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007010000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf3ffffff}, 0x94) 4.239952061s ago: executing program 5 (id=4385): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x524, 0x3b0, 0x30c, 0xfeffffff, 0x30c, 0x228, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'wg2\x00', 'caif0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x1f4, 0x228, 0x0, {0x0, 0x400000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x8000000000000001, 0x7fffffff, 0x4b, 0x8, 0x22453, 0x40, 0x2, 0x7fffffff, 0x20}, {0x100}}}, @common=@addrtype={{0x2c}, {0x60, 0x200, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010101, @empty, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x88, 0x20, 0x5, 0xb601, 0x7], 0x1}}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @private=0xa010101, @private=0xa010100, @port=0x4e22, @gre_key=0x8001}}}}, {{@ip={@local, @rand_addr, 0x0, 0xff000000, 'lo\x00', 'ip6tnl0\x00', {0xff}, {}, 0x5e}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21, @port=0x1}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0x0, 'gretap0\x00', 'wlan0\x00', {}, {}, 0x5c, 0x0, 0x8}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x7ff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2d}, @port, @port=0x4e32}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x580) 4.162693094s ago: executing program 5 (id=4386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7b, 0x3, 0x7, 0x1, 0x8, 0xcc, 0x5c, 0x1, 0x4, 0x7, 0x7, 0xe, 0x1e, 0x2, 0x6d, 0x4}}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x8, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x30}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0xc0, 0xe5, 0x8f, 0x10, 0x19d2, 0x330, 0xfc7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xd0, 0xbf, [{{0x9, 0x4, 0x86, 0xa, 0x0, 0xff, 0xff, 0xff, 0x5}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x1c, &(0x7f0000000d40)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9c, 0x2, 0x1, 0x0, 0x7, [0x30, 0xff0000]}]}}) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x138, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff, 0x80000, 0x2000000000000000, 0x0, 0x0, 0x0, 0xfb}, {0x0, 0x5}}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x5}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x0, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x2000047b, 0x3}]}]}, 0x138}}, 0x4894) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000140)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 3.690671467s ago: executing program 1 (id=4388): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000003}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020065580000000000000000000001"], 0xfdef) 3.439671461s ago: executing program 2 (id=4389): syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) userfaultfd(0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491", 0xfe}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3.297029416s ago: executing program 1 (id=4390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) shmdt(r5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) capget(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0xa1, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfefc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r7}, 0x68) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000000)=0x10000) 3.197195816s ago: executing program 0 (id=4392): syz_emit_ethernet(0x62, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@dstopts={0x1d, 0x1, '\x00', [@ra={0x5, 0x2, 0x200}, @pad1, @jumbo={0xc2, 0x4, 0x7fffffff}]}, @srh={0x2c, 0x0, 0x4, 0x0, 0x7, 0x20, 0x4}], @echo_request={0x80, 0x0, 0x0, 0x6308}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x686}}, './file0\x00'}) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)=""/25, &(0x7f0000000240)=0x19) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) vmsplice(r3, &(0x7f0000000640)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f0000000400)="f702", 0x2}], 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x180000) splice(r2, 0x0, r6, 0x0, 0x2, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r7, 0x1, 0x12, &(0x7f0000000080)=""/18) pwritev(r8, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000100)="01", 0x1}], 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) 2.22876685s ago: executing program 5 (id=4393): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0xfffb, 0x3, 0x0}, &(0x7f0000000040)="3fa75c2d0900", 0x0, 0x3, 0x10010, 0x0, 0x0}) 2.03973156s ago: executing program 1 (id=4394): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="0d0fc138387ba662000a97898890873cd75f47c9c51cfea3b47c17aca682a134bcf1145818867acbc606e662fda5ec97e56ace4bf90a3cbca9e5b9437614394a1707d60e6244afacd1025910215bbe60e36f96fb7e5bca247de24e947ecda44a91fe5c1285f7226142cb2f60991af31a2388bdd5e999fb90f9656ce99460167bf6efcf", 0x83}], 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x8, 0x3}}, './file0\x00'}) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "f1446092bf6e8dea0dba7008197271ea832db1a4c516c2b7d23c1810fd2a9d30", 0x7603, 0x7, 0x2, 0x7}, 0x3c) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.03923396s ago: executing program 5 (id=4395): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf259b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b00)={0x34, &(0x7f0000000980)=ANY=[@ANYBLOB="20310100fe00fd"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.011062279s ago: executing program 1 (id=4396): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000c03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3d7, 0xfffe, 0x4, 0x0, 0x1, 0x0, @dev, @remote}}}}}}, 0x0) 1.921473935s ago: executing program 1 (id=4397): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010028bd700000000000ffc30000", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.827998849s ago: executing program 1 (id=4398): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r4 = landlock_create_ruleset(&(0x7f0000000440)={0x6621, 0x2}, 0x18, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000240)={&(0x7f0000000080)=[{0x81, 0x1000, 0x0, 0x0}], 0x1}) landlock_restrict_self(r4, 0x0) 1.562416257s ago: executing program 6 (id=4399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001040000000096b90338000548f2cf11667047000000", @ANYRES32=0x0, @ANYBLOB="fab0817d0100000024001280110001006272696467655f736c617665000000000c00058008002200", @ANYRES32=0x0, @ANYBLOB="140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x0, 0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe4) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r10 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r9, @ANYBLOB="02000000", @ANYRES32=r10, @ANYBLOB="040005000000000008000600", @ANYRES32=r11, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="10000000000000002000000000000000"], 0x7c, 0x1) 1.261777094s ago: executing program 6 (id=4400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000b00)=[r0], 0x1) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)='/', 0x1}], 0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_io_uring_setup(0x48cf, &(0x7f0000000180)={0x0, 0x78e7, 0x4, 0x3, 0x18c}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000ac0)={0xa, 0x1, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000c00)=""/100, 0x64}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/155, 0x9b}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/238, 0xee}, {&(0x7f00000009c0)=""/99, 0x63}], &(0x7f0000000580)=[0x8, 0x200000000001, 0x0, 0x101, 0xfffffffffffffc00, 0x5, 0x80000dda]}, 0x20) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fchdir(r4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000b40)={[0xb, 0xfffffffffffffffe, 0x4bf, 0x5, 0x1ff, 0xd034, 0x89d, 0x6, 0x4, 0x0, 0xc1e0, 0x1, 0xfffffffffffffffd, 0x81, 0x6, 0xc], 0x8000000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[], 0xff2e) syz_open_dev$vim2m(&(0x7f0000000040), 0x8000, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000180)={0xf58, 0x1, "b67b86970df456a7f0d08ac396961fce92ff4c361239612fdb691308f0e952330a2724a8dde054d9deaa0cf71c8ab6719f8f6a769e9bb7eafdbeefd3a92a4f95af517775142bbdce23bdb75195bb74de276bcf9a7b6a2bb26facca839d8f27d797da242c0fd06007c804a61c5778cba5baeba7a886c339ccde3e2bc1a1dadf1aaef8bd5d8d5323f97be4a411b5a756e32faac0293963bbcb600895216d047cfe5a8e776702f9742e14582d36fea466b5c02b497db907d31afbec1529340c476906ef9713a0b9b775853ac4c2561527f941dfcfac211fd8ad28cdb3e5735353538d2858166bb1bc00edc3190a15f6d50e82fd6508a5d6fe7629aa6af1a9d5c3c8"}) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) 1.04733648s ago: executing program 6 (id=4401): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x40000000}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r0, 0x1) (async) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000009c0)={0x53, 0xfffffffffffffffd, 0xff, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="7f936cd6ec0ab5f335690c2a83b8c110c0207946b4987c5dc69b000086c84899eea448c59d17fb7983067d3e20347a7369eb657824b3eca3f26b4782baaae049fb6761e961f438d0b1212b1e8a2b34079c5a5437f2e6c257241ded0467c11ca4ce55383156ff4136cec08da0ccd68434d6423d01f672f86ec213e1e4bfbcae97834bb5df8789b455e49573f089179fe20a6b967f4e75637a005c4eaa2c57c31e851dbaedf832dae1aa54b9aed2a32a9cea5ad8b99f38e7f4529693242d7ec31cb0b9bc7162d1ee6c9bc925f37d3f295e47307919f9d3e6934337f6f026b7530f9ee1c441fb0c93db2d88776df9cfd8b31a3786b55377bfcce257b5ba8eb064", 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0}) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r5, 0x1) unshare(0x28000600) (async) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000100), 0x48) (async) r8 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000080)={0x8, @raw_data="4e93eac7e957bfbcdaf4e758acf5e6afdd20398cd745ea44d17f2c78cf959f558e71ddce06383095ad262848e9010bc6fe3ece518619e9e2ba74f11691c411384f9ec9aba8060478534d9e0cd0e19ff3fb88614c0a1de5aef2be0a215c6440119b96b0ed5b06da9a9edcaab9911bfb4c5891e067b587f931c53f9ad177e9b486f5e9770e943feb8425821b53e77e8994557adc9fce3fe7acb9eb1e46b449b314b2542702d7cd94c7e2f251dec554f9dcba88c73c9487c396ab0b77cee0d9e3a521567e228aead0c1"}) pwrite64(r7, 0x0, 0xfffffffffffffe62, 0x1) sendto$inet6(r5, &(0x7f0000000000)="2935f55d7d3cd73f91c643868118159feb4c3c7bb4f72d1947c654d9b4d606efae03a526c0d0c3f9d3e8d8f8a48c228719f9a90638d3470db159f70d69f9847b7ca9a1bc1ea2cd8ca21250ff34c6b695f4b8ee1a0e152d7dbf574fe23c7601", 0x5f, 0x1, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @empty, 0x5}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000100)="1e", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 910.646138ms ago: executing program 6 (id=4402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000ffffffffffffffef000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 874.189258ms ago: executing program 0 (id=4403): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x63c, 0x0, 0x350, 0x350, 0x0, 0x230, 0x574, 0x574, 0x574, 0x574, 0x574, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xd8, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0x2, 0x4}, 0x7fffffe, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x1, 0x5}, 0x0, 0xec, 0x158, 0x0, {}, [@common=@eui64={{0x24}}, @common=@eui64={{0x24}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x100, 0x8, 0x6, 0x0, 0x0, "0b4d66201b7f50ed57f1663b9b29deec512f5da08f075fb1aa98c112a228cfe2a51e125958d417d11d83dfffe2f80649394edfbb1726f30822ae3a997d5146f5"}}}, {{@uncond, 0x0, 0xec, 0x120, 0x48000000, {}, [@inet=@rpfilter={{0x24}, {0xb}}, @common=@mh={{0x24}, {"31f2", 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x4}, {0x0, 0x3, 0x6}, {0x3, 0x1}, 0x851, 0xe537}}}, {{@uncond, 0x0, 0xc8, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@empty, 0x6, 0x13, 0xe}}}, {{@uncond, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@srh={{0x2c}, {0x62, 0x8, 0xa, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x24}, {0x6}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x698) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x2, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r2, 0x1f) r3 = socket(0x2000000015, 0x80005, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000100)=@buf) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000480)={{r1}, "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"}) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "b28abec5f503c92ebe138017fe3ca5a31ec81a2d3b8b17ea8778696028f9754e71c5d18808072213b5a2fac1cc614b6a42df279567bd1cef797ab5687412a5d9", 0x2a}, 0x48, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="a07a9328", 0x4, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r4, r5, r6}, &(0x7f0000000380)=""/252, 0xfc, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0x4, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r7, &(0x7f00000088c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002700)="ab", 0x1}, {0x0}], 0x2}}], 0x1, 0x4040010) 771.584495ms ago: executing program 6 (id=4404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002dc0)=@newtfilter={0x44, 0x2c, 0x4, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='memory.low\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x4) r10 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000f541b95b1a5f6ad600000000"], 0x8) 770.727277ms ago: executing program 0 (id=4405): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile64(r0, r1, &(0x7f0000000080)=0xb, 0x400) (async) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffd8ee, @host}, 0x10) (async) r3 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000180)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf0, "dcb2dc80ab5e09"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001180)={{0x0, 0x10001, 0xb, 0xffffffffffffff01, 0x1, 0xbe8, 0x1, 0x8, 0x97, 0x101, 0x80000000, 0x2, 0x6, 0x8000000000000000, 0x74b3dd0e}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001200)={r4, r5, "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", "b34c64f8e6e39f19f5c19c33cdc0431742860bf3aeae5bb04ca11c69bd07b426d499eede80ca143bcf5b837244754b998030b20d9bcb6207de70e3e7d6677db550061acac3dbc587b50b26ecf55a6ad7aed48dd050a75056cd72efdfa67bdd587bc6f94d059988a8b79ba776cf7ee9f25d61090e753c7c857ab20e82e715f6860d2b673b74d6ecfce2a582c73799ad653ae8f645b7f7d169886872cbac090c7f5c762bb6a9da9072bcadf9c1c2985698ce2d54e952eae14c102d57296ba1fb225b71fce27021c425c8e49272b17328e07de68d3737e368377ee8d2ed54da089eb8f210d9981d6e7c9f06841de53d18252526d7d9d22c542f755d2c006f4c7ac2d997550ae943876fbbebcef0baa091060d1145faa623a0f2f4f2226bdaccaf6880dddd5b2ef0120b9176eb9497c69f02b06bdd90413b2c2f746118471da86fd29d3154f84905d4eb2253f92a142ca1fde249f5d659eebb3c976267958ad2882b922a81548280c1d6a9d58b4aa8b9ae86a38a48832ed53958fc82e4f72ed8587b0d156e142a59d796a6da7be6d52b362603c6d49a09165b1e53be3ef5e04db163512b768d165b5efa5b30eb2e25389b40f5ca25dc3c4197078659fcd6cf6327764c613ac31d20eec56fcfca2ee3a1bdd611a749c0db6333755f10c545881741f0d136001089ee008894a48bea8d766308778f2deb35ddd5b9c8b85002929e4147f2f6b9f93a6ca16ad0f125db208759b6c860801fa46d4f640c1067eff2d994f22128928da7715c121068af88a8306f784456e6ab7ed5becd046435eb3cd1d5e927adbd5e8667cc7a629dc3885aa72d97964bb91239216264f4c9f0d47dc5c355494742dbbaf908b0fe34953456cee9cbb19e1e2f02de310d77c63e49525cdf82209269c94e421009b380f4286d7a72d8acbf2309df8d61b50689c2524d53e1862d1e919876cf9d102979aa34504a256038defcc63467b12b6c4b0f92aa03911706ef172b76c5e94ea22ed0cb54b85685d75570b00099a569777d51b243da27cb0179e2be96c860161ae1d8fcdf367c7bd8c77cb8075a5788f0077038f399f6c07ea245d6c5c54f9167c17a129be936107447e00ce31bb9b297281b907c1ba9b528c542f041689317499f8219631bb911d9af60ca700fa8dafae3550362b0cf276b542f7fc9ed515dd488821a2954f6fa10ff87908bda9742d78f9d33d5d569072eec56a355c1911d4fc3b9aa740ecbd0668e41e9ff5bebfca220a07001053669a88ffa4c1f15e9c383635ad50ff25f90edfd22ab047a72856accc711d1dc4d100a00b76c0fb4798309ffb4d67fef50c3d022f5eb87310c3572900e3506d875b88ab9327f47f53e5b00f795b84b588a35a14f724500af1ee6d08625ffa4ac33639a46699b0ad82f4b44f36427dd79002b92d613ecd4f2e6b3d559d6b84a9199cda74e5593136654b3b9dc3696718fdaec8ba47f82185ccdd6eb63984976c2608272af0bfd2cd2e128816256fe323af2bb5d71861e5475ddf2280ee40b30a40b8a48d9bfe9b870983c7f86cde37ac6b846b7983f645c9fa61915248a14b96a9be9f0caf9c1fc2d456733fc6abeba2f8b3267af0bfa11a5259e2eb7b2ab830901edf9f91be85a5b6efc6451a948a0717e7bc08e3b7921dee3ed28b84e97a6e5db873daa5ca813d1f4d4232e5522b9fe73e35cc312f18e72186d4cf9d3319c4244990a13fdb0e490e10a6a08c56503efa32756a8e8355d7902b6223e41e8142bdaabc70a18c18811b8d266c5af937a1685df23be4f49286b8e35d50645b17abe002e49236f8abb7202102c7f8d26026ff1d2aca31589fac591c1fec96ee09a03a6e0dba2d0f64702aa7004bb2eec01cc4738d8e25f0b96d13c59a6d31499d95906f43540301de6b58bf8d4010bc341ad1fe352c492c74310f88944efbec17c718737e9fc6f042aab300ddb8f3625feef7a1030d0d6ddddb5dfdc904f8de7da64e4b3f8aaa04d62a4bd6e3db1d016c63d1bda9d59c48cf8023668dfba550bf96f99e9cff00d0466733cb776abd377ec9ddfec87c43ae783aa13cb64c1612af72206a2d0b26768b21f90673006a448406813ab284cfcfd0bcf8c842b0b78c76b3a584bb651f5084a463c86197d1450da74bbc8a8eab61d3bfa97239e2ed7806fc7268fe0da2a5ffda2ef973589ddc4a1ca82d1503f0ef6bbc8a875a13bb593ff78277c8bdf235c7f382192b99481ba39243848304ee8d1a565e87bf72abad2993530e27e427e69e3c61d804c0afbf213d98598ca492c040fcc686052aab95555db7bc732a757a62d98c3b1657a862f51575d12dc697e8861f7821c7174d9ade85e72ecbf3bcd03afbede613fe64ebf22cc1f41257ec8f5c24097e57d22bc01bad2c863b45d437cfc903fb5eeac9dd0d2b1b650820f556aa30d8d52db01bf8ce28886d0b680863714c81247c7ce7f1b5a83556e52dbac780dd7bebe1fe3b2275141560ca4443457587acbf1d6d4541938e9b619daf2ca17e72d34643f6814bb35b6fbf9720592c9ee30cfba51f450907fe3aa8253f3ccb8d1150f3b9109bb7907e5648de44eeff2869dd2137d66a0b982a2a07d25741480d682ee43d1fa7c95e513cf0053481070e25e374f40a6bd34e91e1553a1ce8ba6d571fcf38792bc76b11407cfbc39d3e87711dd94e0dfd1bcc446ad286a4731526bbf59c17ad45a2032f83738b4ac5fc68a0c6786d89f60da7930964bcf1f4764d5ec1884345480271828c05481559bafaa4d396be688e6feafdab61a284724878df51983a5ad6e1a4159e89f4cf2147f16d41b69e21227bd7c5c98b7a18d5d63ecf4a5a29654b6597f3e364d19f2290f1dca46fc6ff0f978656d1cf36668d02c5a8fe2aaac2be04d89d2d28509e8f6308b23e4aa0f12df015815a282beadec167302fc337bb21f48b386867b35bb5b7ed8617d40423551fbe21a908cd9e14bfbc21321fe1ef62e0bf4dbee56ce1a7d5fc7120808c0e54b560aa1dc78ea09654c6b7981d67d17272dfc10adf62ecb2d8949c409317d65575d4134e5580eca308eb01f867ecf9572d034ecc339078ea4b18b8d511356fc8e94456b4067879d7d052b73875eb19272f910aa13148d4d882a2af26d658e304793019dc08a9dae5aab7c12ae8b16a0dd3bd92aa1e8c27fed521f50a77ffe2bddbf719e6bc409cb7a757698f18cddbbbf0f1bee4958f26e910d22cb55e588e413d8259f805ccce2e7eb50b5b0c31e2cf2b34b2dd1d150a9e5cdbc9a44d1574afcb2ff3f2255955e529a3e1975c0abcf9fc189dfe5590345e401de854ac302face79cb08f4d957e133695697209d23f45da23d382635d00e39a4758e05f7d2731067f4aaf4c8489932648dfc774770d5a1810c059b4f7d7dd3547c3a34d3cacda8a711a69201e9fa84ff9f58009b3a38df5e43a5c1caa6fdbdb72b833204e5704ff473d469e8ad1c0e7b3379d0220dd29174a7146b94b0970d606462c2c8056fc75b1825feb4e219f45e9c26e6f4f74aa6f8a7096c7dc47096d1bc59a78e6ae85ca28287520c30f4d2591179122253594c0fb7a9d7207168910581de1fc92c3e963940b23919773ad366fa3a4f8a39090b2c00e6f401b1689191398a20974c052aa18e0147f918753072c3d61de97ec5643d0ce8df6f47aadd686f598257d3d28d1b1e219786e760a8d1f68428e118b8534eb701560dcb80f151349c938f8d1c6dc210592b8d9da13a93335839b123b3c09939c730fdb13fcabd8872a7875a50d6fa96af8859fc6a934657786eaf86e9155b2d9822c7bc45785d611d9942d08b33c179d3319bacf2f980ca4d8151fb137b43d0612b38032a7bd68d3c82910858299c15848d559d16e378dae6393fdf2c9dc36bc61b2c800fa23d22a65863594fa8e72c8d617b47f5ff47f043d77724ddb8918e45c05a9ad5a55de6638c681ee2ed917bf7115fbdef6dbc78093dd05c9e38a6e354c6c667ff65fe59679fdeba809c0dcac17191b00b130ea4e7163737294003cb2fea0a7906c750c26a551b155b85d6db77ade83ac21f540060e5601392e2a90a68798af5786ecb9d4b69b0c52c9079ed375d22efb36b4206e460b2bc7fd0b8f0e12b7c37826ef72d772990fb1f66c0d95c1cc55b03da08d6fe325357fa125fd97b088b9ee16c71cca13c70aa5562e163217179a9f0aecff481babc362e2e70f9a00901a9e5966e0ed04554c40c7a6fedc42a74d2358f09d30583f266a9d936a1b0d30bd2706a60b30eb9030d88d3ae6afec70526040f42962241929b39aeeb8cee57087905ac2bcb2348bce773d22c66f82e6d76a950d9d7b7869a3bb05695a6e68cc1f6ca4fd11f3bd1424024fa50cce108a8e05b5d01253f5b972861794416373e350246ddd0674c75811f94ccc38b1e3c1bfe4b60d9cad58da974626b3c80b3981e51ccc8a133202a119ea9cc235b4381f0c4c9df6805ecd6a2bad159915fe1390f8b8145a4cc277cacb7e6205fb938da44f168f532ce4b61a856605c72a8b9cb646f396c496159560626e51630817102f0ec47b362f6f4825529fda31ae3ba2f3df99b41e26b881148d9a3f13eca252da6a3e478cac74782680785a5b3371dc2dbb49cf2177b7a8dde423da370e52a0ad07566b7c2d921bd3fec23e301478cc6844a9f62705f2f64121ecffa27bfbe8903fa728677784c7444d062b6a28e92313198f280de1559488ef2644c6c19333c29d8da4329b7597ab16edde86616e80e89b8839980a87da3b5e7d149a6d277b2862b028ecd133fc39a5ed8265a094b78d6f1a4a8473d573eab8b62f3e6349112550dbf8940aa70f186b0d64fb077220ae8f029c738cfa5ca912357de2353d173e91b9e8fe98be35fb3d6f8eaec8fa442544ab8b8b79d23677704db3738ea55a206278f8e6daa46b96999088f2098fbfbf8685a1250ae5fa54881b977915140dc1ff064de48c7cc3acdc7aa5be120f5a1642911dba542f0d87e886d457f1054e31edf8ea4c915aecde5d8549c7deceeb5a8b1e2d88363159168954f044723b8067074f96e56f21aec9a404d3ff4c7c8c032e890e19547bea139504ad2a466b807036627fb53e4994baf37cc9aee1cec3e0f9a433bf638715c8839428c5364deed358ec7c530a2e9103eee95bcd594297f2c8cd72d59f15cfcab0d30058d5337b9ee7f427e7ffec3f1795ce2f79acdc05309205d91a97b7bb231aaaa271c9280caeb444e2bed782b3df3f29c9bf55b91077630f86ef73601647e48a2bb750acbc0419fab92828d2acddcd97017b7ec8273f3d2ef31c18dd4585812652ceb641aecbfc147c3183d84015f1adb4bd7728b5067a03509ab6f4378f1b4e8091519fa3992cc1e43a9f1a4992edee5e0ed38dbb953574bd806226bb4f3caee851eeeeedea1"}) (async) r6 = openat$fuse(0xffffff9c, &(0x7f0000002200), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r6, &(0x7f0000004280)={0x20, 0xffffffffffffffda, r7, {0x0, 0x29}}, 0x20) close_range(r2, r6, 0x2) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000004340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r8, &(0x7f0000004400)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x40, r9, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x45, 0x7e}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}]}, 0x40}}, 0x40000d0) (async, rerun: 32) sendto(r2, &(0x7f0000004440)="eafea3a619d12a709913acffbb599975f2079d99b548af1603750e5ea547744b442254259b5650e28958286eced06e974dd66929a95e4699b064678ce69cd731434729404ca23c7c4ddd84455450160a80a79764479ef017e068394c2788cf7adc53052c", 0x64, 0x20008044, &(0x7f00000044c0)=@llc={0x1a, 0x102, 0x8, 0x3, 0x7, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) (async, rerun: 32) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000004540)) (async) close_range(r8, r1, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r11, 0x114, 0x3, &(0x7f0000004580)={{0x8, 0x4ce1}, 0x20}, 0x10) (async) r12 = openat$nullb(0xffffff9c, &(0x7f00000045c0), 0x24180, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r12, 0xc0109414, &(0x7f0000004600)={0x370, 0x6, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x1e, &(0x7f00000098c0)="a5ce8ff950ae637ad56a8184d7352b4a5be685044067ac735b7a79023592f6e6db77701bd036d80a5275e6e563414745de08d1da451efa79fd79b34fc9d30d7354f5a70dfc525ebd0e819065fd9fea235cb000889c47ef6450", 0x59) (async) r13 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000009940)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r13, 0x3ba0, &(0x7f00000099c0)={0x48, 0x7, r14, 0x0, 0x1, 0x0, 0x9, 0x159d0e, 0x1b9a8e}) ioctl$sock_SIOCADDDLCI(r11, 0x8980, &(0x7f0000009a40)={'dummy0\x00', 0x6}) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 702.08513ms ago: executing program 0 (id=4406): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r2 = socket(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="240028a8", @ANYRES16=r12, @ANYBLOB="01002bbd7000800000000200000005003e000d00000005005900a2000000"], 0x24}, 0x1, 0x0, 0x0, 0x808c0c1}, 0x48000) sendmsg$NL80211_CMD_SET_COALESCE(r11, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r13, @ANYBLOB="61b7647d58e09cedc729bb93bc3edc756090c3c44fba9b6fe68760210429ad6c9bc7144b8bcfea5502c2a63d60460b2b2d756f50d5d36fce9b54594bc1a9a2da3e781bb7e68513d0e2ea8dd9a52efa53c2fb0dbe525da2e505ffaf522fbe7969e91f3f961fdf706ffe8dc030697f12a478af5fed3fa5fa1dbae06d03227fa9b21d7499a7c80f07ecec6058cf1c9e8c399c"], 0x28}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x6, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) getpriority(0x2, 0xffffffffffffffff) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000000)={@local, @loopback, 0x0, "3b9c87a7c55291f96bdf47f1006e3403f5b5d6fce496cebf4a6ce03050fa87a0", 0x7ff, 0x8, 0x10001, 0x4}, 0x3c) 299.036525ms ago: executing program 2 (id=4407): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x6c}, 0x1, 0x16000000}, 0x0) 200.253092ms ago: executing program 0 (id=4408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x4982}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x74, 0x11, 0xfffffff9, 0x8, 0xffffffffffffffff, 0x4, '\x00', r3, r5, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x5, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x5, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000300)) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) 180.719653ms ago: executing program 2 (id=4409): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xc0083, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRES64, @ANYBLOB=',group_id=', @ANYRES64=r0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$sw_sync_info(0xffffff9c, &(0x7f00000003c0), 0x81, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendmsg$can_raw(r7, &(0x7f0000000080)={&(0x7f0000000180), 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0xffffffffffffffda, r4, {0x7, 0x2b, 0xfffffffb, 0xa00001, 0x1, 0xc7, 0x1, 0x61, 0x0, 0x0, 0x10, 0x3}}, 0x50) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r3) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0x48) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12004, 0x8000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040881}, 0x4008000) 0s ago: executing program 0 (id=4410): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x3, 0x8b, 0x9, 0x1, 0x9, 0x7f, 0x1, 0x10, 0x4f, 0x2, 0x9, 0x5, 0x5}, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a05003c0012800b00010069703667726500002c00028014000700fe8000000000000000000000000000bb14000700ff"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) kernel console output (not intermixed with test programs): ] usb-storage 6-1:6.2: USB Mass Storage device detected [ 983.079243][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 983.112676][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.130968][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.142237][ T10] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 983.222335][ T44] usb-storage 6-1:6.137: USB Mass Storage device detected [ 983.256664][T15506] usb 1-1: unable to get BOS descriptor or descriptor too short [ 983.265708][T15506] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 983.300403][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.328417][T15506] usb 1-1: can't read configurations, error -71 [ 983.341878][ T10] usb 7-1: config 0 descriptor?? [ 983.375334][ T44] usb-storage 6-1:6.253: USB Mass Storage device detected [ 983.536108][ T44] usb 6-1: USB disconnect, device number 49 [ 983.699029][T15506] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 983.855283][ T7441] usb 3-1: USB disconnect, device number 54 [ 983.905390][ T10] ft260 0003:0403:6030.003A: unknown main item tag 0x7 [ 983.909072][ T44] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 983.928814][T15506] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.991859][T15506] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 984.021563][T15506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.050169][T15506] usb 1-1: config 0 descriptor?? [ 984.073748][T19912] netlink: 'syz.1.3895': attribute type 10 has an invalid length. [ 984.081696][T19912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3895'. [ 984.124279][ T10] ft260 0003:0403:6030.003A: chip code: 6424 8183 [ 984.130741][T15506] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 984.143175][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.154248][ T44] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 984.169207][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.196708][ T44] usb 6-1: config 0 descriptor?? [ 984.213900][ T44] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22 [ 984.322868][ T10] ft260 0003:0403:6030.003A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 984.383995][T19912] team0: Port device geneve0 added [ 984.585937][ T10] ft260 0003:0403:6030.003A: failed to retrieve status: -32, no wakeup [ 984.609997][T19922] xt_hashlimit: invalid rate [ 985.229138][T17270] usb 7-1: reset high-speed USB device number 11 using dummy_hcd [ 985.947774][T19936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.956856][T19936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.742443][ T44] usb 1-1: USB disconnect, device number 24 [ 986.799526][ T10] usb 7-1: USB disconnect, device number 11 [ 986.818471][T19946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3905'. [ 986.911407][T15506] usb 6-1: USB disconnect, device number 50 [ 986.991825][T19950] binder: 19949:19950 unknown command 0 [ 986.997546][T19950] binder: 19949:19950 ioctl c0306201 80000080 returned -22 [ 987.039052][ T10] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 987.057124][T19950] binder_alloc: 19949: binder_alloc_buf size -17162633056 failed, no address space [ 987.102236][T19950] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 987.145119][T19960] binder: 19958:19960 ioctl c0306201 80000080 returned -14 [ 987.183756][T19960] binder: BINDER_SET_CONTEXT_MGR already set [ 987.191025][T19960] binder: 19958:19960 ioctl 4018620d 80000040 returned -16 [ 987.439159][T15506] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 987.589435][T15506] usb 1-1: device descriptor read/64, error -71 [ 987.625699][T19972] FAULT_INJECTION: forcing a failure. [ 987.625699][T19972] name failslab, interval 1, probability 0, space 0, times 0 [ 987.653911][T19972] CPU: 1 UID: 0 PID: 19972 Comm: syz.2.3913 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.653929][T19972] Tainted: [L]=SOFTLOCKUP [ 987.653933][T19972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 987.653940][T19972] Call Trace: [ 987.653946][T19972] [ 987.653952][T19972] dump_stack_lvl+0x189/0x250 [ 987.653973][T19972] ? __pfx____ratelimit+0x10/0x10 [ 987.653997][T19972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.654019][T19972] ? __pfx__printk+0x10/0x10 [ 987.654049][T19972] ? __pfx___might_resched+0x10/0x10 [ 987.654066][T19972] should_fail_ex+0x414/0x560 [ 987.654083][T19972] should_failslab+0xa8/0x100 [ 987.654096][T19972] __kmalloc_cache_noprof+0x84/0x700 [ 987.654108][T19972] ? hash_netiface_create+0x2fe/0x1040 [ 987.654128][T19972] hash_netiface_create+0x2fe/0x1040 [ 987.654162][T19972] ? __nla_parse+0x40/0x60 [ 987.654179][T19972] ? __pfx_hash_netiface_create+0x10/0x10 [ 987.654199][T19972] ip_set_create+0xa9a/0x19c0 [ 987.654214][T19972] ? ip_set_create+0x49f/0x19c0 [ 987.654230][T19972] ? __pfx_ip_set_create+0x10/0x10 [ 987.654258][T19972] nfnetlink_rcv_msg+0xb4d/0x1130 [ 987.654271][T19972] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 987.654313][T19972] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 987.654363][T19972] ? __pfx___schedule+0x10/0x10 [ 987.654380][T19972] netlink_rcv_skb+0x208/0x470 [ 987.654393][T19972] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 987.654404][T19972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 987.654424][T19972] ? bpf_lsm_capable+0x9/0x20 [ 987.654444][T19972] ? security_capable+0x7e/0x2e0 [ 987.654470][T19972] nfnetlink_rcv+0x282/0x2590 [ 987.654489][T19972] ? __local_bh_enable_ip+0x13e/0x1c0 [ 987.654506][T19972] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 987.654525][T19972] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 987.654539][T19972] ? lockdep_hardirqs_on+0x98/0x140 [ 987.654557][T19972] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 987.654575][T19972] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 987.654600][T19972] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 987.654625][T19972] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 987.654657][T19972] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 987.654672][T19972] ? rcu_is_watching+0x15/0xb0 [ 987.654686][T19972] ? rcu_read_unlock_special+0x3d8/0x520 [ 987.654697][T19972] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 987.654706][T19972] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.654727][T19972] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.654767][T19972] netlink_unicast+0x82f/0x9e0 [ 987.654793][T19972] ? __pfx_netlink_unicast+0x10/0x10 [ 987.654811][T19972] ? netlink_sendmsg+0x642/0xb30 [ 987.654829][T19972] ? skb_put+0x11b/0x210 [ 987.654850][T19972] netlink_sendmsg+0x805/0xb30 [ 987.654878][T19972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.654901][T19972] ? __import_iovec+0x5d4/0x7f0 [ 987.654918][T19972] ? aa_sock_msg_perm+0xf1/0x1b0 [ 987.654939][T19972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 987.654956][T19972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.654978][T19972] __sock_sendmsg+0x21c/0x270 [ 987.655003][T19972] ____sys_sendmsg+0x505/0x820 [ 987.655028][T19972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.655052][T19972] ? kstrtouint+0x6e/0xe0 [ 987.655082][T19972] ___sys_sendmsg+0x21f/0x2a0 [ 987.655104][T19972] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.655131][T19972] ? rcu_read_lock_any_held+0xb3/0x120 [ 987.655186][T19972] ? __fget_files+0x2a/0x420 [ 987.655206][T19972] ? __fget_files+0x3a0/0x420 [ 987.655239][T19972] __sys_sendmsg+0x164/0x220 [ 987.655260][T19972] ? __pfx___sys_sendmsg+0x10/0x10 [ 987.655288][T19972] ? __pfx_ksys_write+0x10/0x10 [ 987.655310][T19972] ? __do_fast_syscall_32+0xbe/0x570 [ 987.655332][T19972] __do_fast_syscall_32+0x1f7/0x570 [ 987.655351][T19972] ? rcu_is_watching+0x15/0xb0 [ 987.655370][T19972] ? do_fast_syscall_32+0x34/0x80 [ 987.655393][T19972] do_fast_syscall_32+0x34/0x80 [ 987.655420][T19972] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 987.655442][T19972] RIP: 0023:0xf70dd539 [ 987.655459][T19972] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 987.655475][T19972] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 987.655495][T19972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 987.655508][T19972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 987.655519][T19972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 987.655530][T19972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 987.655541][T19972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 987.655570][T19972] [ 988.278972][T15506] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 988.384997][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 988.386521][ T30] audit: type=1326 audit(1765498555.282:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.414836][ T30] audit: type=1326 audit(1765498555.282:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.437258][ T30] audit: type=1326 audit(1765498555.282:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.459400][ T30] audit: type=1326 audit(1765498555.282:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.482227][ T30] audit: type=1326 audit(1765498555.282:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.504352][ T30] audit: type=1326 audit(1765498555.282:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.527447][ T30] audit: type=1326 audit(1765498555.282:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.549634][ T30] audit: type=1326 audit(1765498555.282:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.571837][ T30] audit: type=1326 audit(1765498555.292:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.594416][T15506] usb 1-1: device descriptor read/64, error -71 [ 988.618356][ T30] audit: type=1326 audit(1765498555.292:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.3915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 988.709399][T15506] usb usb1-port1: attempt power cycle [ 988.778963][ T7441] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 988.944187][ T7441] usb 3-1: Using ep0 maxpacket: 32 [ 988.972696][ T7441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.988556][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 989.001006][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 989.028112][ T10] usb 7-1: can't read configurations, error -71 [ 989.036015][ T7441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.059005][T15506] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 989.077542][ T7441] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 989.108352][T15506] usb 1-1: device descriptor read/8, error -71 [ 989.181037][ T7441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.214747][ T7441] usb 3-1: config 0 descriptor?? [ 989.359284][T15506] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 989.452685][T15506] usb 1-1: device descriptor read/8, error -71 [ 989.569676][T15506] usb usb1-port1: unable to enumerate USB device [ 989.713062][T19991] vlan2: entered promiscuous mode [ 989.718125][T19991] dummy0: entered promiscuous mode [ 989.723685][T19991] vlan2: entered allmulticast mode [ 989.728796][T19991] dummy0: entered allmulticast mode [ 989.878184][ T7441] ft260 0003:0403:6030.003B: unknown main item tag 0x7 [ 990.024026][T19996] ip6gre1: entered allmulticast mode [ 990.132259][ T7441] ft260 0003:0403:6030.003B: chip code: 6424 8183 [ 990.335852][ T7441] ft260 0003:0403:6030.003B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 990.554769][ T7441] ft260 0003:0403:6030.003B: failed to retrieve status: -32, no wakeup [ 990.783217][T20012] libceph: resolve '. [ 990.783217][T20012] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 990.783217][T20012] ' (ret=-3): failed [ 991.149029][T17270] usb 3-1: reset high-speed USB device number 55 using dummy_hcd [ 991.180705][T20024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.191945][T20024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.369067][ T10] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 992.184469][T20029] syzkaller0: entered promiscuous mode [ 992.199027][T20029] syzkaller0: entered allmulticast mode [ 992.267365][T20029] tipc: Started in network mode [ 992.272608][T20029] tipc: Node identity aea51334f285, cluster identity 4711 [ 992.294844][T20029] tipc: Enabled bearer , priority 0 [ 992.408726][T20027] tipc: Resetting bearer [ 992.510062][T20027] tipc: Disabling bearer [ 992.654023][T20035] netlink: 'syz.5.3931': attribute type 21 has an invalid length. [ 992.671799][T20035] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3931'. [ 992.755725][T20035] netlink: 'syz.5.3931': attribute type 4 has an invalid length. [ 992.790729][ T7441] usb 3-1: USB disconnect, device number 55 [ 992.872693][T20035] netlink: 'syz.5.3931': attribute type 5 has an invalid length. [ 992.896253][T20035] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3931'. [ 993.772576][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.779092][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.026673][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 994.040515][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 994.050880][ T10] usb 7-1: can't read configurations, error -71 [ 994.129649][T15506] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 994.309080][T15506] usb 3-1: Using ep0 maxpacket: 32 [ 994.316106][T15506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.328980][T15506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.338706][T15506] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 994.445901][T15506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.489510][T15506] usb 3-1: config 0 descriptor?? [ 994.964381][T20070] netlink: 'syz.6.3944': attribute type 12 has an invalid length. [ 994.980086][T15506] ft260 0003:0403:6030.003C: unknown main item tag 0x7 [ 994.993442][T20070] netlink: 'syz.6.3944': attribute type 29 has an invalid length. [ 995.009049][T20070] netlink: 'syz.6.3944': attribute type 1 has an invalid length. [ 995.026995][T20070] netlink: 'syz.6.3944': attribute type 2 has an invalid length. [ 995.052348][T20070] netlink: 'syz.6.3944': attribute type 1 has an invalid length. [ 995.085175][T20070] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3944'. [ 995.117609][T20070] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.119794][T15506] ft260 0003:0403:6030.003C: chip code: 0000 0000 [ 995.601668][T20062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.755020][T20062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.799288][ T5961] usb 3-1: USB disconnect, device number 56 [ 995.937597][T20094] FAULT_INJECTION: forcing a failure. [ 995.937597][T20094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.986359][T20094] CPU: 0 UID: 0 PID: 20094 Comm: syz.5.3950 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.986396][T20094] Tainted: [L]=SOFTLOCKUP [ 995.986403][T20094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 995.986415][T20094] Call Trace: [ 995.986422][T20094] [ 995.986431][T20094] dump_stack_lvl+0x189/0x250 [ 995.986457][T20094] ? __pfx____ratelimit+0x10/0x10 [ 995.986481][T20094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 995.986502][T20094] ? __pfx__printk+0x10/0x10 [ 995.986526][T20094] ? __might_fault+0xb0/0x130 [ 995.986562][T20094] should_fail_ex+0x414/0x560 [ 995.986590][T20094] _copy_from_user+0x2d/0xb0 [ 995.986609][T20094] get_compat_msghdr+0xad/0x4a0 [ 995.986636][T20094] ? __pfx_get_compat_msghdr+0x10/0x10 [ 995.986659][T20094] ? kstrtouint+0x6e/0xe0 [ 995.986687][T20094] ___sys_sendmsg+0x193/0x2a0 [ 995.986709][T20094] ? __pfx____sys_sendmsg+0x10/0x10 [ 995.986734][T20094] ? rcu_read_lock_any_held+0xb3/0x120 [ 995.986780][T20094] ? __fget_files+0x2a/0x420 [ 995.986799][T20094] ? __fget_files+0x3a0/0x420 [ 995.986828][T20094] __sys_sendmsg+0x164/0x220 [ 995.986849][T20094] ? __pfx___sys_sendmsg+0x10/0x10 [ 995.986877][T20094] ? __pfx_ksys_write+0x10/0x10 [ 995.986898][T20094] ? __do_fast_syscall_32+0xbe/0x570 [ 995.986920][T20094] __do_fast_syscall_32+0x1f7/0x570 [ 995.986938][T20094] ? rcu_is_watching+0x15/0xb0 [ 995.986957][T20094] ? do_fast_syscall_32+0x34/0x80 [ 995.986980][T20094] do_fast_syscall_32+0x34/0x80 [ 995.987001][T20094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 995.987022][T20094] RIP: 0023:0xf7fa4539 [ 995.987037][T20094] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 995.987053][T20094] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 995.987073][T20094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 995.987086][T20094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 995.987097][T20094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 995.987108][T20094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 995.987118][T20094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 995.987146][T20094] [ 996.480265][T20096] binder: BC_ACQUIRE_RESULT not supported [ 996.486025][T20096] binder: 20095:20096 ioctl c0306201 800001c0 returned -22 [ 996.524771][T20096] netlink: 'syz.6.3951': attribute type 1 has an invalid length. [ 996.612763][T20098] gretap1: entered allmulticast mode [ 996.634343][T20098] bond1: (slave gretap1): making interface the new active one [ 996.642632][T20098] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 997.029064][T15506] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 998.575126][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 998.687379][T20136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3962'. [ 998.740989][ T44] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 998.750815][ T44] usb 1-1: config 0 has no interface number 1 [ 998.758169][ T44] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 998.776703][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.822187][ T44] usb 1-1: config 0 descriptor?? [ 998.959672][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 998.966658][ T44] usb 1-1: MIDIStreaming interface descriptor not found [ 999.010364][ T44] gspca_main: spca561-2.14.0 probing abcd:cdee [ 999.151004][T20149] libceph: resolve '. [ 999.151004][T20149] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 999.151004][T20149] ' (ret=-3): failed [ 999.250740][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3960'. [ 999.260453][T20131] openvswitch: netlink: Flow actions attr not present in new flow. [ 999.274827][ T44] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 999.291900][ T44] usb 1-1: USB disconnect, device number 29 [ 999.400522][T20153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3966'. [ 999.849899][T15506] usb 3-1: unable to get BOS descriptor or descriptor too short [ 999.858663][T15506] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 999.866657][T15506] usb 3-1: can't read configurations, error -71 [ 999.920540][ T44] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1000.081586][T20166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1000.103406][ T44] usb 7-1: config 0 has no interfaces? [ 1000.121250][ T44] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1000.134008][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.152264][ T44] usb 7-1: Product: syz [ 1000.156452][ T44] usb 7-1: Manufacturer: syz [ 1000.188949][ T44] usb 7-1: SerialNumber: syz [ 1000.224596][ T44] usb 7-1: config 0 descriptor?? [ 1000.457256][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1000.526741][T20155] veth0_macvtap: left promiscuous mode [ 1000.782798][T20155] veth0_macvtap: entered promiscuous mode [ 1000.798742][ T44] usb 7-1: USB disconnect, device number 16 [ 1001.196935][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1001.196951][ T30] audit: type=1326 audit(1765498568.082:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.234823][ T30] audit: type=1326 audit(1765498568.092:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.257501][ T30] audit: type=1326 audit(1765498568.092:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.334997][ T30] audit: type=1326 audit(1765498568.092:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.383921][ T30] audit: type=1326 audit(1765498568.092:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.427701][ T30] audit: type=1326 audit(1765498568.092:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.489002][ T30] audit: type=1326 audit(1765498568.092:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.519085][ T44] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1001.548993][ T30] audit: type=1326 audit(1765498568.092:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.624531][ T30] audit: type=1326 audit(1765498568.092:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.657199][ T30] audit: type=1326 audit(1765498568.092:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20182 comm="syz.0.3977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1001.700009][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 1001.718698][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.754474][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.797165][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1001.828589][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.898278][ T44] usb 1-1: config 0 descriptor?? [ 1001.973896][T20193] kvm: apic: phys broadcast and lowest prio [ 1002.072063][T20091] veth0_macvtap: left promiscuous mode [ 1002.268416][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1002.269055][T17502] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 1002.286644][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1002.329219][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1002.354346][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1002.400119][ T44] ft260 0003:0403:6030.003D: unknown main item tag 0x7 [ 1002.600792][T20204] libceph: resolve '. [ 1002.600792][T20204] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1002.600792][T20204] ' (ret=-3): failed [ 1002.632546][ T44] ft260 0003:0403:6030.003D: chip code: 6424 8183 [ 1002.860468][ T44] ft260 0003:0403:6030.003D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1003.098560][ T44] ft260 0003:0403:6030.003D: failed to retrieve status: -32, no wakeup [ 1003.407969][T20216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.430711][T20216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.669402][T15506] usb 1-1: reset high-speed USB device number 30 using dummy_hcd [ 1003.851064][T20218] fuse: Invalid gid '00000000000000000004' [ 1003.868753][T20218] fuse: Invalid gid '00000000000000000004' [ 1003.972932][T20221] --map-set only usable from mangle table [ 1004.399050][ T5889] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1004.998925][T20232] netdevsim netdevsim6: Firmware load for '/../file0' refused, path contains '..' component [ 1005.154652][T17502] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1005.212421][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 1005.238017][T17502] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1005.241624][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.256257][T17502] usb 3-1: can't read configurations, error -71 [ 1005.304330][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.316940][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1005.352015][ T5889] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1005.361209][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.403786][T20240] netlink: 'syz.2.3994': attribute type 1 has an invalid length. [ 1005.445329][ T5889] usb 6-1: config 0 descriptor?? [ 1005.590586][T20240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.599149][T15506] usb 1-1: device descriptor read/64, error -71 [ 1005.817352][T20244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3995'. [ 1005.845453][T15506] usb 1-1: reset high-speed USB device number 30 using dummy_hcd [ 1005.862914][T15506] usb 1-1: device reset changed ep0 maxpacket size! [ 1005.884926][ T44] usb 1-1: USB disconnect, device number 30 [ 1005.894447][ T5889] HID 045e:07da: Invalid code 65791 type 1 [ 1005.921922][T17502] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1006.036403][ T5889] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003E/input/input50 [ 1006.124677][ T5889] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1006.140011][ T44] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1006.147435][T17502] usb 3-1: Using ep0 maxpacket: 16 [ 1006.183405][ T5889] usb 6-1: USB disconnect, device number 51 [ 1006.197801][T17502] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1006.266708][T17502] usb 3-1: config 1 has no interface number 0 [ 1006.294450][T17502] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1006.300774][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 1006.324264][T17502] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1006.325769][T20247] fido_id[20247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1006.362988][ T44] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1006.371445][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1006.382095][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1006.394636][T17502] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1006.431159][T17502] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1006.486600][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1006.496949][T17502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.527459][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1006.551091][T17502] usb 3-1: Product: syz [ 1006.572935][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1006.583042][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.589150][T17502] usb 3-1: Manufacturer: syz [ 1006.622263][T17502] usb 3-1: SerialNumber: syz [ 1006.651418][T20242] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1006.672264][T20242] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1006.804158][T20250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1006.856108][ T44] usb 1-1: GET_CAPABILITIES returned 0 [ 1006.856148][ T44] usbtmc 1-1:16.0: can't read capabilities [ 1006.932167][ T44] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1006.971131][ T44] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1007.105343][ T44] usb 1-1: USB disconnect, device number 31 [ 1007.326267][T20253] netlink: 'syz.1.3997': attribute type 14 has an invalid length. [ 1007.706107][T20269] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1007.714232][T20269] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1008.416788][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1008.416805][ T30] audit: type=1326 audit(1765498575.302:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1008.495790][ T30] audit: type=1326 audit(1765498575.302:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1008.605092][ T30] audit: type=1326 audit(1765498575.302:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1008.605252][T17502] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1008.664049][ T44] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1008.777548][ T30] audit: type=1326 audit(1765498575.302:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1008.811102][ T30] audit: type=1326 audit(1765498575.302:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1008.869503][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 1008.885933][T17502] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 1008.886278][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.916183][ T30] audit: type=1326 audit(1765498575.302:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1008.942315][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.952298][ T44] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1008.974397][ T30] audit: type=1326 audit(1765498575.302:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1008.997824][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.028062][ T44] usb 7-1: config 0 descriptor?? [ 1009.054838][T17502] aqc111 3-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0e:b0:df:b1:24:e9 [ 1009.055399][ T30] audit: type=1326 audit(1765498575.302:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1009.154151][ T30] audit: type=1326 audit(1765498575.302:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1009.239172][ T10] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 1009.259138][T17502] usb 3-1: USB disconnect, device number 60 [ 1009.268144][T17502] aqc111 3-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1009.333863][ T30] audit: type=1326 audit(1765498575.312:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20279 comm="syz.6.4003" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 1009.430339][T17502] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1009.460431][T17502] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1009.492941][T17502] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1009.528661][ T44] ft260 0003:0403:6030.0040: unknown main item tag 0x7 [ 1009.779382][ T44] ft260 0003:0403:6030.0040: chip code: 6424 8183 [ 1010.006232][ T44] ft260 0003:0403:6030.0040: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 1010.231545][ T44] ft260 0003:0403:6030.0040: failed to retrieve status: -32, no wakeup [ 1010.242286][T20311] FAULT_INJECTION: forcing a failure. [ 1010.242286][T20311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.261702][T20311] CPU: 1 UID: 0 PID: 20311 Comm: syz.1.4010 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.261730][T20311] Tainted: [L]=SOFTLOCKUP [ 1010.261738][T20311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1010.261753][T20311] Call Trace: [ 1010.261761][T20311] [ 1010.261769][T20311] dump_stack_lvl+0x189/0x250 [ 1010.261796][T20311] ? __pfx____ratelimit+0x10/0x10 [ 1010.261819][T20311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1010.261840][T20311] ? __pfx__printk+0x10/0x10 [ 1010.261865][T20311] ? __might_fault+0xb0/0x130 [ 1010.261901][T20311] should_fail_ex+0x414/0x560 [ 1010.261929][T20311] _copy_from_user+0x2d/0xb0 [ 1010.261948][T20311] get_compat_msghdr+0xad/0x4a0 [ 1010.261975][T20311] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1010.262006][T20311] ___sys_sendmsg+0x193/0x2a0 [ 1010.262027][T20311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.262048][T20311] ? kstrtoull+0x12f/0x1d0 [ 1010.262097][T20311] ? __fget_files+0x2a/0x420 [ 1010.262110][T20311] ? __fget_files+0x3a0/0x420 [ 1010.262128][T20311] __sys_sendmmsg+0x28e/0x430 [ 1010.262151][T20311] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1010.262178][T20311] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1010.262221][T20311] ? ksys_write+0x22a/0x250 [ 1010.262231][T20311] ? exc_page_fault+0x82/0x100 [ 1010.262245][T20311] ? __pfx_ksys_write+0x10/0x10 [ 1010.262258][T20311] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1010.262271][T20311] __do_fast_syscall_32+0x1f7/0x570 [ 1010.262281][T20311] ? rcu_is_watching+0x15/0xb0 [ 1010.262301][T20311] ? do_fast_syscall_32+0x34/0x80 [ 1010.262324][T20311] do_fast_syscall_32+0x34/0x80 [ 1010.262341][T20311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1010.262362][T20311] RIP: 0023:0xf702d539 [ 1010.262375][T20311] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1010.262384][T20311] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1010.262396][T20311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800088c0 [ 1010.262404][T20311] RDX: 0000000000000001 RSI: 0000000004040000 RDI: 0000000000000000 [ 1010.262411][T20311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1010.262417][T20311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1010.262423][T20311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1010.262445][T20311] [ 1010.782549][ T44] usb 7-1: reset high-speed USB device number 17 using dummy_hcd [ 1010.834144][T20319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.867809][T20319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.940825][T20321] netlink: 'syz.2.4013': attribute type 5 has an invalid length. [ 1010.968313][T20321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1010.978305][T20321] bond0: Unable to set down delay as MII monitoring is disabled [ 1012.000341][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1012.046639][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1012.116267][ T10] usb 6-1: can't read configurations, error -71 [ 1012.135721][T15506] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1012.309226][T15506] usb 1-1: Using ep0 maxpacket: 8 [ 1012.397566][T15506] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1012.426595][T15506] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1012.449825][T15506] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1012.461153][T15506] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1012.473997][T15506] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1012.487086][T15506] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1012.497249][T15506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.788958][T15506] usb 1-1: GET_CAPABILITIES returned 0 [ 1012.809097][T15506] usbtmc 1-1:16.0: can't read capabilities [ 1012.816378][T20339] netlink: 'syz.5.4016': attribute type 11 has an invalid length. [ 1012.878556][T20348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.922547][T20348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.077989][ T10] usb 1-1: USB disconnect, device number 32 [ 1013.290640][ T5889] usb 7-1: USB disconnect, device number 17 [ 1013.796585][T20367] binder: 20366:20367 ioctl 40086602 80000080 returned -22 [ 1014.047629][T20375] netlink: 'syz.1.4024': attribute type 5 has an invalid length. [ 1014.072136][T20375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1014.104457][T20375] bond0: Unable to set down delay as MII monitoring is disabled [ 1014.900519][ T10] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 1015.490199][T17270] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 1015.760959][T20399] ip6gre1: entered allmulticast mode [ 1016.804418][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4037'. [ 1017.682624][T20429] libceph: resolve '. [ 1017.682624][T20429] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1017.682624][T20429] ' (ret=-3): failed [ 1017.723172][T20430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.739746][T20430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.779818][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1017.813182][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1017.848456][ T10] usb 6-1: can't read configurations, error -71 [ 1017.928521][T20432] loop2: detected capacity change from 0 to 3 [ 1017.944523][T20432] ldm_validate_privheads(): Disk read failed. [ 1017.983349][T20432] Dev loop2: unable to read RDB block 3 [ 1017.989501][T20432] loop2: unable to read partition table [ 1018.058756][T20432] loop2: partition table beyond EOD, truncated [ 1018.066323][T20432] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1018.244706][T20436] bridge0: port 3(syz_tun) entered blocking state [ 1018.274736][T20436] bridge0: port 3(syz_tun) entered disabled state [ 1018.359290][T20436] syz_tun: entered allmulticast mode [ 1018.364005][T17270] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1018.381298][T17270] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1018.387102][T20436] syz_tun: entered promiscuous mode [ 1018.402538][T20436] bridge0: port 3(syz_tun) entered blocking state [ 1018.409125][T20436] bridge0: port 3(syz_tun) entered forwarding state [ 1018.424985][T17270] usb 1-1: can't read configurations, error -71 [ 1018.674342][T20441] geneve2: entered promiscuous mode [ 1018.679690][T20441] geneve2: entered allmulticast mode [ 1019.159588][T15506] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1019.339099][T15506] usb 7-1: Using ep0 maxpacket: 32 [ 1019.346599][T15506] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1019.383819][T15506] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1019.401358][T15506] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.648548][T15506] usb 7-1: Product: syz [ 1019.657393][T15506] usb 7-1: Manufacturer: syz [ 1019.669623][T15506] usb 7-1: SerialNumber: syz [ 1019.710247][T15506] usb 7-1: config 0 descriptor?? [ 1019.762757][T15506] cdc_ether 7-1:0.0: skipping garbage [ 1019.768165][T15506] usb 7-1: bad CDC descriptors [ 1019.839063][T15506] usb 7-1: unsupported MDLM descriptors [ 1020.366549][T20462] FAULT_INJECTION: forcing a failure. [ 1020.366549][T20462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.448192][T20462] CPU: 0 UID: 0 PID: 20462 Comm: syz.2.4049 Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.448221][T20462] Tainted: [L]=SOFTLOCKUP [ 1020.448228][T20462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1020.448238][T20462] Call Trace: [ 1020.448247][T20462] [ 1020.448256][T20462] dump_stack_lvl+0x189/0x250 [ 1020.448281][T20462] ? __pfx____ratelimit+0x10/0x10 [ 1020.448304][T20462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1020.448323][T20462] ? __pfx__printk+0x10/0x10 [ 1020.448345][T20462] ? __might_fault+0xb0/0x130 [ 1020.448377][T20462] should_fail_ex+0x414/0x560 [ 1020.448404][T20462] _copy_from_iter+0x1cd/0x1630 [ 1020.448426][T20462] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1020.448452][T20462] ? policy_nodemask+0x27c/0x720 [ 1020.448471][T20462] ? __pfx__copy_from_iter+0x10/0x10 [ 1020.448501][T20462] ? set_page_refcounted+0xa0/0x1e0 [ 1020.448521][T20462] ? page_copy_sane+0x4e/0x280 [ 1020.448547][T20462] copy_page_from_iter+0xdd/0x170 [ 1020.448567][T20462] tun_get_user+0x1d40/0x3dc0 [ 1020.448580][T20462] ? tun_get_user+0x6fc/0x3dc0 [ 1020.448597][T20462] ? aa_file_perm+0x44c/0x1530 [ 1020.448609][T20462] ? __pfx_tun_get_user+0x10/0x10 [ 1020.448620][T20462] ? __lock_acquire+0x6b6/0x2cf0 [ 1020.448632][T20462] ? kstrtoull+0x12f/0x1d0 [ 1020.448648][T20462] ? ref_tracker_alloc+0x318/0x460 [ 1020.448664][T20462] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1020.448680][T20462] ? tun_get+0x1c/0x2f0 [ 1020.448692][T20462] ? tun_get+0x1c/0x2f0 [ 1020.448702][T20462] ? tun_get+0x1c/0x2f0 [ 1020.448714][T20462] tun_chr_write_iter+0x113/0x200 [ 1020.448725][T20462] vfs_write+0x5c9/0xb30 [ 1020.448738][T20462] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1020.448748][T20462] ? __pfx_vfs_write+0x10/0x10 [ 1020.448766][T20462] ? __fget_files+0x2a/0x420 [ 1020.448782][T20462] ksys_write+0x145/0x250 [ 1020.448791][T20462] ? exc_page_fault+0x82/0x100 [ 1020.448806][T20462] ? __pfx_ksys_write+0x10/0x10 [ 1020.448817][T20462] ? __do_fast_syscall_32+0xbe/0x570 [ 1020.448829][T20462] __do_fast_syscall_32+0x1f7/0x570 [ 1020.448839][T20462] ? rcu_is_watching+0x15/0xb0 [ 1020.448850][T20462] ? do_fast_syscall_32+0x34/0x80 [ 1020.448862][T20462] do_fast_syscall_32+0x34/0x80 [ 1020.448881][T20462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1020.448900][T20462] RIP: 0023:0xf70dd539 [ 1020.448915][T20462] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1020.448930][T20462] RSP: 002b:00000000f54cd520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1020.448950][T20462] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800000c0 [ 1020.448963][T20462] RDX: 000000000000004e RSI: 00000000f7476ff4 RDI: 0000000000000000 [ 1020.448974][T20462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1020.448985][T20462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1020.448996][T20462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1020.449031][T20462] [ 1020.910620][T20464] netlink: 'syz.0.4050': attribute type 12 has an invalid length. [ 1021.173914][T20464] bond1: option primary_reselect: invalid value (255) [ 1021.188840][T20464] bond1 (unregistering): Released all slaves [ 1021.243870][T20469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 1021.549036][ T5828] usb 7-1: USB disconnect, device number 18 [ 1021.839523][ T44] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 1022.291976][T20500] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1022.577808][T15506] IPVS: starting estimator thread 0... [ 1022.654635][T20514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4064'. [ 1022.672104][T20510] IPVS: using max 50 ests per chain, 120000 per kthread [ 1023.538272][T20537] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4070'. [ 1023.801348][T17502] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1023.816089][T20544] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4072'. [ 1023.894555][T20544] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4072'. [ 1024.029108][T17502] usb 3-1: Using ep0 maxpacket: 8 [ 1024.037089][T17502] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1024.048188][T17502] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1024.061798][T17502] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1024.114721][T17502] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1024.206939][T17502] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.234794][T17502] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1024.278948][T17502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.392908][T20550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.414117][T20550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.629038][T17502] usb 3-1: GET_CAPABILITIES returned 0 [ 1024.646418][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1024.647701][T17502] usbtmc 3-1:16.0: can't read capabilities [ 1024.669016][ T44] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1024.692124][ T44] usb 1-1: can't read configurations, error -71 [ 1024.792783][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1024.836572][ T5889] usb 3-1: USB disconnect, device number 61 [ 1025.406391][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1025.406403][ T30] audit: type=1326 audit(1765498592.312:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1025.509235][ T980] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1025.536957][ T30] audit: type=1326 audit(1765498592.342:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1025.645587][ T30] audit: type=1326 audit(1765498592.352:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1025.697400][ T980] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1025.729418][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.768412][ T30] audit: type=1326 audit(1765498592.352:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1025.768433][ T980] usb 7-1: Product: syz [ 1025.940156][ T44] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1026.018979][ T30] audit: type=1326 audit(1765498592.352:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1026.047743][ T980] usb 7-1: Manufacturer: syz [ 1026.091302][ T30] audit: type=1326 audit(1765498592.352:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1026.149920][ T980] usb 7-1: SerialNumber: syz [ 1026.165576][ T30] audit: type=1326 audit(1765498592.352:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1026.187891][ T30] audit: type=1326 audit(1765498592.352:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1026.220636][ T30] audit: type=1326 audit(1765498592.372:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1026.223122][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 1026.251849][ T30] audit: type=1326 audit(1765498592.372:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20558 comm="syz.0.4078" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 1026.282255][T20576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.288342][ T980] usb 7-1: config 0 descriptor?? [ 1026.296576][T20576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.326228][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.354819][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.389252][ T44] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1026.460224][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.541238][ T44] usb 1-1: config 0 descriptor?? [ 1026.576861][ T980] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1026.960164][ T44] ft260 0003:0403:6030.0041: unknown main item tag 0x7 [ 1026.989203][T20557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.023071][T20557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.334924][ T44] ft260 0003:0403:6030.0041: chip code: 6424 8183 [ 1027.549964][ T44] ft260 0003:0403:6030.0041: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 1027.737151][ T44] ft260 0003:0403:6030.0041: failed to retrieve status: -32, no wakeup [ 1028.033434][ T980] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1028.124949][ T980] usb 7-1: USB disconnect, device number 19 [ 1028.249169][ T44] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 1028.552130][T20614] libceph: resolve '. [ 1028.552130][T20614] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1028.552130][T20614] ' (ret=-3): failed [ 1028.648968][ T980] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1028.914141][ T980] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.932051][ T980] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1028.979318][ T980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1029.012976][ T980] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1029.038540][ T980] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1029.076855][ T980] usb 6-1: Product: syz [ 1029.085801][ T980] usb 6-1: Manufacturer: syz [ 1029.096655][ T980] usb 6-1: SerialNumber: syz [ 1029.114458][ T980] usb 6-1: config 0 descriptor?? [ 1029.155794][ T980] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1029.209045][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1029.347626][T17502] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1029.503205][ T980] usb 6-1: USB disconnect, device number 56 [ 1029.730610][T17502] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1029.742698][T17502] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 1029.800062][T17502] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.828994][T17502] usb 7-1: Product: syz [ 1029.924225][T17502] usb 7-1: Manufacturer: syz [ 1029.937852][T17502] usb 7-1: SerialNumber: syz [ 1029.985353][T17502] usb 7-1: config 0 descriptor?? [ 1030.087939][T17502] gm12u320 7-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 1030.124997][T17502] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5 [ 1030.172197][T17502] usb-storage 7-1:0.0: USB Mass Storage device detected [ 1030.280799][T17502] usb-storage 7-1:0.0: device ignored [ 1030.319849][T15506] usb 1-1: USB disconnect, device number 36 [ 1030.836533][T15506] usb 7-1: USB disconnect, device number 20 [ 1030.967501][T20643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4100'. [ 1030.981023][T20646] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1031.459551][T20659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.487284][T20659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.181179][T20661] netlink: 'syz.5.4105': attribute type 14 has an invalid length. [ 1032.219033][ T44] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1032.254891][T20674] libceph: resolve '. [ 1032.254891][T20674] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1032.254891][T20674] ' (ret=-3): failed [ 1032.325382][T20674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4109'. [ 1032.379240][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1032.386949][ T44] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1032.397235][ T44] usb 7-1: config 0 has no interface number 0 [ 1032.403834][ T44] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.425393][ T44] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.467357][ T44] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1032.497689][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.535588][ T44] usb 7-1: config 0 descriptor?? [ 1032.719155][T20685] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1033.224426][T20704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.233912][T20704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.270379][ T44] uclogic 0003:28BD:0071.0042: failed retrieving string descriptor #100: -71 [ 1033.291584][ T44] uclogic 0003:28BD:0071.0042: failed retrieving pen parameters: -71 [ 1033.324380][ T44] uclogic 0003:28BD:0071.0042: pen probing failed: -71 [ 1033.347443][ T44] uclogic 0003:28BD:0071.0042: failed probing parameters: -71 [ 1033.387304][ T44] uclogic 0003:28BD:0071.0042: probe with driver uclogic failed with error -71 [ 1033.453066][ T44] usb 7-1: USB disconnect, device number 21 [ 1033.522556][T20707] bond1: Removing last ns target with arp_interval on [ 1033.555870][T20720] FAULT_INJECTION: forcing a failure. [ 1033.555870][T20720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.569254][T20720] CPU: 0 UID: 0 PID: 20720 Comm: syz.1.4123 Tainted: G L syzkaller #0 PREEMPT(full) [ 1033.569283][T20720] Tainted: [L]=SOFTLOCKUP [ 1033.569290][T20720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.569301][T20720] Call Trace: [ 1033.569308][T20720] [ 1033.569316][T20720] dump_stack_lvl+0x189/0x250 [ 1033.569343][T20720] ? __pfx____ratelimit+0x10/0x10 [ 1033.569366][T20720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.569385][T20720] ? __pfx__printk+0x10/0x10 [ 1033.569408][T20720] ? __might_fault+0xb0/0x130 [ 1033.569442][T20720] should_fail_ex+0x414/0x560 [ 1033.569469][T20720] _copy_from_iter+0x3b0/0x1630 [ 1033.569495][T20720] ? aa_label_sk_perm+0x4c4/0x610 [ 1033.569517][T20720] ? __page_table_check_zero+0x397/0x3e0 [ 1033.569535][T20720] ? __pfx__copy_from_iter+0x10/0x10 [ 1033.569573][T20720] memcpy_from_msg+0x3c/0xa0 [ 1033.569593][T20720] isotp_sendmsg+0x6f9/0x14a0 [ 1033.569625][T20720] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1033.569638][T20720] ? aa_sk_perm+0x7ee/0x920 [ 1033.569661][T20720] ? __pfx_aa_sk_perm+0x10/0x10 [ 1033.569678][T20720] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1033.569700][T20720] ? __asan_memset+0x22/0x50 [ 1033.569717][T20720] ? __import_iovec+0x40e/0x7f0 [ 1033.569734][T20720] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1033.569762][T20720] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1033.569780][T20720] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1033.569798][T20720] __sock_sendmsg+0x21c/0x270 [ 1033.569823][T20720] ____sys_sendmsg+0x52d/0x820 [ 1033.569847][T20720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.569880][T20720] ___sys_sendmsg+0x21f/0x2a0 [ 1033.569902][T20720] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.569922][T20720] ? kstrtoull+0x12f/0x1d0 [ 1033.569973][T20720] ? __fget_files+0x2a/0x420 [ 1033.569994][T20720] ? __fget_files+0x3a0/0x420 [ 1033.570024][T20720] __sys_sendmmsg+0x28e/0x430 [ 1033.570048][T20720] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1033.570075][T20720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1033.570116][T20720] ? ksys_write+0x22a/0x250 [ 1033.570132][T20720] ? exc_page_fault+0x82/0x100 [ 1033.570156][T20720] ? __pfx_ksys_write+0x10/0x10 [ 1033.570178][T20720] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1033.570202][T20720] __do_fast_syscall_32+0x1f7/0x570 [ 1033.570220][T20720] ? rcu_is_watching+0x15/0xb0 [ 1033.570239][T20720] ? do_fast_syscall_32+0x34/0x80 [ 1033.570262][T20720] do_fast_syscall_32+0x34/0x80 [ 1033.570279][T20720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.570300][T20720] RIP: 0023:0xf702d539 [ 1033.570315][T20720] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1033.570332][T20720] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1033.570351][T20720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800088c0 [ 1033.570364][T20720] RDX: 0000000000000001 RSI: 0000000004040000 RDI: 0000000000000000 [ 1033.570390][T20720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.570402][T20720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1033.570413][T20720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.570440][T20720] [ 1033.593440][T20716] loop2: detected capacity change from 0 to 7 [ 1033.644176][T20721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1033.780991][T20718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.880691][T20716] Dev loop2: unable to read RDB block 7 [ 1033.939861][T20716] loop2: unable to read partition table [ 1033.950164][T20716] loop2: partition table beyond EOD, truncated [ 1033.956768][T20718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1033.975769][T20726] xt_hashlimit: invalid rate [ 1033.978187][T20716] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1034.186733][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4127'. [ 1034.233329][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4127'. [ 1034.303032][T20732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.379598][T20732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.088974][T17502] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1035.246247][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4134'. [ 1035.285234][T17502] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1035.316549][T17502] usb 1-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 1035.388565][T17502] usb 1-1: config 0 has no interface number 0 [ 1035.429601][T17502] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1035.477553][T17502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.503083][T17502] usb 1-1: Product: syz [ 1035.516426][T17502] usb 1-1: Manufacturer: syz [ 1035.526576][T17502] usb 1-1: SerialNumber: syz [ 1035.577007][T17502] usb 1-1: config 0 descriptor?? [ 1035.670112][T17502] uvcvideo 1-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1035.678245][T17502] uvcvideo 1-1:0.64: No valid video chain found. [ 1035.890982][T20744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.903467][T20744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.185986][T20766] binder: 20762:20766 ioctl c0306201 80000080 returned -14 [ 1036.380846][T20770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.393120][T20770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.805868][T20775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.866888][T20776] FAULT_INJECTION: forcing a failure. [ 1036.866888][T20776] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.925922][T20776] CPU: 1 UID: 0 PID: 20776 Comm: syz.6.4144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.925952][T20776] Tainted: [L]=SOFTLOCKUP [ 1036.925958][T20776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1036.925964][T20776] Call Trace: [ 1036.925969][T20776] [ 1036.925974][T20776] dump_stack_lvl+0x189/0x250 [ 1036.925992][T20776] ? __pfx____ratelimit+0x10/0x10 [ 1036.926007][T20776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1036.926019][T20776] ? __pfx__printk+0x10/0x10 [ 1036.926036][T20776] ? __pfx___might_resched+0x10/0x10 [ 1036.926047][T20776] ? fs_reclaim_acquire+0x7d/0x100 [ 1036.926061][T20776] should_fail_ex+0x414/0x560 [ 1036.926077][T20776] should_failslab+0xa8/0x100 [ 1036.926090][T20776] __kvmalloc_node_noprof+0x175/0x920 [ 1036.926103][T20776] ? hash_netiface_create+0x3a9/0x1040 [ 1036.926113][T20776] ? hash_netiface_create+0x2fe/0x1040 [ 1036.926125][T20776] hash_netiface_create+0x3a9/0x1040 [ 1036.926139][T20776] ? __nla_parse+0x40/0x60 [ 1036.926148][T20776] ? __pfx_hash_netiface_create+0x10/0x10 [ 1036.926159][T20776] ip_set_create+0xa9a/0x19c0 [ 1036.926169][T20776] ? ip_set_create+0x49f/0x19c0 [ 1036.926185][T20776] ? __pfx_ip_set_create+0x10/0x10 [ 1036.926215][T20776] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1036.926226][T20776] ? unwind_get_return_address+0x4d/0x90 [ 1036.926237][T20776] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1036.926255][T20776] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1036.926290][T20776] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1036.926353][T20776] netlink_rcv_skb+0x208/0x470 [ 1036.926371][T20776] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1036.926381][T20776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1036.926398][T20776] ? bpf_lsm_capable+0x9/0x20 [ 1036.926410][T20776] ? security_capable+0x7e/0x2e0 [ 1036.926424][T20776] nfnetlink_rcv+0x282/0x2590 [ 1036.926434][T20776] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1036.926451][T20776] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1036.926465][T20776] ? __dev_queue_xmit+0x289/0x3140 [ 1036.926476][T20776] ? __dev_queue_xmit+0x289/0x3140 [ 1036.926488][T20776] ? __dev_queue_xmit+0x1955/0x3140 [ 1036.926498][T20776] ? ___sys_sendmsg+0x21f/0x2a0 [ 1036.926512][T20776] ? __dev_queue_xmit+0x289/0x3140 [ 1036.926526][T20776] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1036.926539][T20776] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1036.926554][T20776] ? ref_tracker_free+0x63a/0x7d0 [ 1036.926567][T20776] ? __asan_memcpy+0x40/0x70 [ 1036.926576][T20776] ? __pfx_ref_tracker_free+0x10/0x10 [ 1036.926598][T20776] ? skb_clone+0x246/0x3a0 [ 1036.926610][T20776] ? __netlink_deliver_tap+0x807/0x850 [ 1036.926621][T20776] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.926635][T20776] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.926649][T20776] netlink_unicast+0x82f/0x9e0 [ 1036.926664][T20776] ? __pfx_netlink_unicast+0x10/0x10 [ 1036.926675][T20776] ? netlink_sendmsg+0x642/0xb30 [ 1036.926685][T20776] ? skb_put+0x11b/0x210 [ 1036.926696][T20776] netlink_sendmsg+0x805/0xb30 [ 1036.926712][T20776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.926724][T20776] ? __import_iovec+0x5d4/0x7f0 [ 1036.926733][T20776] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1036.926746][T20776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1036.926755][T20776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.926767][T20776] __sock_sendmsg+0x21c/0x270 [ 1036.926781][T20776] ____sys_sendmsg+0x505/0x820 [ 1036.926803][T20776] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1036.926826][T20776] ? kstrtouint+0x6e/0xe0 [ 1036.926853][T20776] ___sys_sendmsg+0x21f/0x2a0 [ 1036.926873][T20776] ? __pfx____sys_sendmsg+0x10/0x10 [ 1036.926898][T20776] ? rcu_read_lock_any_held+0xb3/0x120 [ 1036.926948][T20776] ? __fget_files+0x2a/0x420 [ 1036.926969][T20776] ? __fget_files+0x3a0/0x420 [ 1036.926999][T20776] __sys_sendmsg+0x164/0x220 [ 1036.927020][T20776] ? __pfx___sys_sendmsg+0x10/0x10 [ 1036.927045][T20776] ? __pfx_ksys_write+0x10/0x10 [ 1036.927067][T20776] ? __do_fast_syscall_32+0xbe/0x570 [ 1036.927090][T20776] __do_fast_syscall_32+0x1f7/0x570 [ 1036.927108][T20776] ? rcu_is_watching+0x15/0xb0 [ 1036.927128][T20776] ? do_fast_syscall_32+0x34/0x80 [ 1036.927151][T20776] do_fast_syscall_32+0x34/0x80 [ 1036.927169][T20776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1036.927190][T20776] RIP: 0023:0xf708d539 [ 1036.927206][T20776] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1036.927222][T20776] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1036.927243][T20776] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1036.927256][T20776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1036.927267][T20776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1036.927278][T20776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1036.927289][T20776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1036.927319][T20776] [ 1037.780342][ T44] usb 1-1: USB disconnect, device number 37 [ 1037.789959][T20740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1038.191058][T17502] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1038.229018][T17270] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1038.278954][ T44] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1038.360849][T17502] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.376357][T17502] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1038.392200][T17270] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.409610][T17502] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1038.420566][T17270] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1038.433428][T17502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1038.444710][T17270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.448298][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.458964][T17502] usb 3-1: SerialNumber: syz [ 1038.469685][ T44] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1038.472308][T17270] usb 6-1: config 0 descriptor?? [ 1038.479038][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.512923][ T44] usb 1-1: config 0 descriptor?? [ 1038.517219][T17270] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22 [ 1038.538114][ T44] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 1038.700994][T17502] usb 3-1: 0:2 : does not exist [ 1038.709647][T17502] usb 3-1: unit 255 not found! [ 1038.746497][T17502] usb 3-1: USB disconnect, device number 62 [ 1039.151970][ T5979] udevd[5979]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 1039.466651][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4154'. [ 1039.484538][T20810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.493875][T20810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.511615][T20809] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1040.175145][ T44] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1040.341622][ T44] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 1040.365796][ T44] usb 3-1: config 5 has no interface number 0 [ 1040.383293][ T44] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1040.407434][ T44] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1040.430828][ T44] usb 3-1: config 5 interface 123 has no altsetting 0 [ 1040.455443][ T44] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1040.464748][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.474727][ T44] usb 3-1: Product: syz [ 1040.498165][ T44] usb 3-1: Manufacturer: syz [ 1040.507087][ T44] usb 3-1: SerialNumber: syz [ 1040.574761][T20834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4162'. [ 1040.661942][T20836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.681922][T20836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.795917][ T44] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1040.839190][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1040.839206][ T30] audit: type=1326 audit(1765498607.712:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20828 comm="syz.1.4161" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1040.987008][ T44] usb 3-1: USB disconnect, device number 63 [ 1041.060126][T15506] usb 6-1: USB disconnect, device number 57 [ 1041.891775][T15506] usb 1-1: USB disconnect, device number 38 [ 1042.169098][T20853] loop2: detected capacity change from 0 to 3 [ 1042.182342][ T5979] ldm_validate_privheads(): Disk read failed. [ 1042.266467][ T5979] Dev loop2: unable to read RDB block 3 [ 1042.275539][ T5979] loop2: unable to read partition table [ 1042.291131][ T5979] loop2: partition table beyond EOD, truncated [ 1042.341773][T20853] ldm_validate_privheads(): Disk read failed. [ 1042.394202][T20853] Dev loop2: unable to read RDB block 3 [ 1042.410018][T20853] loop2: unable to read partition table [ 1042.449724][T20853] loop2: partition table beyond EOD, truncated [ 1042.470596][T20853] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1042.630574][ T5198] ldm_validate_privheads(): Disk read failed. [ 1042.637117][ T5198] Dev loop2: unable to read RDB block 3 [ 1042.643547][ T5198] loop2: unable to read partition table [ 1042.652538][ T5198] loop2: partition table beyond EOD, truncated [ 1043.189942][T20862] syzkaller0: entered promiscuous mode [ 1043.195560][T20862] syzkaller0: entered allmulticast mode [ 1043.301558][T20862] tipc: Started in network mode [ 1043.306514][T20862] tipc: Node identity bee22f4176, cluster identity 4711 [ 1043.314918][T20862] tipc: Enabled bearer , priority 0 [ 1043.332283][T20861] tipc: Resetting bearer [ 1043.421474][T20861] tipc: Disabling bearer [ 1043.808042][T20876] loop2: detected capacity change from 0 to 7 [ 1043.821794][ T5979] Dev loop2: unable to read RDB block 7 [ 1043.837146][ T5979] loop2: unable to read partition table [ 1043.937627][ T5979] loop2: partition table beyond EOD, truncated [ 1044.032391][T20880] libceph: resolve '. [ 1044.032391][T20880] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1044.032391][T20880] ' (ret=-3): failed [ 1044.094522][T20876] Dev loop2: unable to read RDB block 7 [ 1044.101434][T20876] loop2: unable to read partition table [ 1044.116746][T20876] loop2: partition table beyond EOD, truncated [ 1044.207015][T20876] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1044.490831][ T980] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1044.728467][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.739719][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.754581][ T980] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1044.772232][ T980] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1044.782464][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.812953][ T980] usb 3-1: config 0 descriptor?? [ 1045.349053][ T44] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1045.362157][ T980] plantronics 0003:047F:FFFF.0043: report_id 0 is invalid [ 1045.378913][ T980] plantronics 0003:047F:FFFF.0043: item 0 0 1 8 parsing failed [ 1045.406577][ T980] plantronics 0003:047F:FFFF.0043: parse failed [ 1045.497208][ T980] plantronics 0003:047F:FFFF.0043: probe with driver plantronics failed with error -22 [ 1045.509677][ T44] usb 6-1: device descriptor read/64, error -71 [ 1045.845731][ T44] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1045.877394][T20910] netlink: 'syz.1.4187': attribute type 12 has an invalid length. [ 1045.885462][T20910] netlink: 'syz.1.4187': attribute type 29 has an invalid length. [ 1045.893341][T20910] netlink: 'syz.1.4187': attribute type 1 has an invalid length. [ 1045.904180][T20910] netlink: 'syz.1.4187': attribute type 2 has an invalid length. [ 1045.912166][T20910] netlink: 'syz.1.4187': attribute type 1 has an invalid length. [ 1045.920799][T20910] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1045.978954][ T44] usb 6-1: device descriptor read/64, error -71 [ 1046.023232][T20910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.123972][ T44] usb usb6-port1: attempt power cycle [ 1046.248964][ T980] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 1046.469137][ T44] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1046.491017][ T44] usb 6-1: device descriptor read/8, error -71 [ 1046.504185][ T980] usb 1-1: not running at top speed; connect to a high speed hub [ 1046.542452][ T980] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1046.559273][ T980] usb 1-1: config 1 has an invalid descriptor of length 78, skipping remainder of the config [ 1046.595787][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1046.624436][ T980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.726480][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.742121][ T44] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1046.769544][ T44] usb 6-1: device descriptor read/8, error -71 [ 1046.776735][ T980] usb 1-1: Product: ǡ탦꼵쵒갖匚원⬴댉팂䢁쵩硢堣ᮂ軀ᄤ뼜ꌧ袛핛₅戨෻䄃밓舐隣╮⅟뼧꥟껮㙢ꓥ龀몰ꥼ䰧뺁䩁ᱟ뫽逬♎餃횻ꮩ㲟헸দ뛖䝊滆퍝虗⍃德ᅭᲊ쌟ﺇ⒙ᒣ⫌䌂蜶肀ꠌ矒ᒭ埡䌕ཹӡ⛖糈ᶺꍤ藅瀒䙎蠊螯⅃㇠ﵽ⣖欁ﺸ㓂ꈢ [ 1046.870019][ T5904] usb 3-1: USB disconnect, device number 64 [ 1046.921294][ T44] usb usb6-port1: unable to enumerate USB device [ 1046.946762][ T980] usb 1-1: Manufacturer: ໩﬛鼄画 [ 1046.958080][ T980] usb 1-1: SerialNumber: 䞠㱴籒㞰縙蜦볹䑗ᐭܩ᣿犳ⷶ◵ᡕ뀹禀ᰉ捵묦ꃿ뀵䄟앂⇑䅧偟礝鈭㪵목➱恺๥ꭦ썭飦ꢳ幂鲈ꪯꆔ連踤伷캜┗ 㝤嶖缗䉅㛺춛麀嫮핂迬禡慎ዻ䖂꣨姵⪶樑흴⡑뮭醞런隕깴娣ꌴ較얞⵷☯맀콞怊⹻粶䮙䈵噍௄㲣苬厖鎟뮫꣤⓮ﮐ럠僴᳕㢱㠢ఇႡ૨뫿틧⸸켱 [ 1047.108689][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 1047.360628][T20915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.377007][T20915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.684189][T20949] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4199'. [ 1048.870452][T20959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4204'. [ 1049.005610][T20964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.021356][ T44] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1049.027116][T20964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.181382][ T44] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1049.207035][ T44] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1049.244335][ T44] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.332784][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1049.347833][ T980] usb 1-1: 0:2 : does not exist [ 1049.357838][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1049.400215][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.418348][ T980] usb 1-1: USB disconnect, device number 39 [ 1049.443512][ T44] usb 3-1: config 0 descriptor?? [ 1049.485398][T20953] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1049.717788][T20953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1049.753061][T20953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1049.791879][T20953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1050.175252][ T44] apple 0003:05AC:027C.0044: hidraw0: USB HID v0.04 Device [HID 05ac:027c] on usb-dummy_hcd.2-1/input0 [ 1050.379144][ T44] usb 3-1: USB disconnect, device number 65 [ 1050.391636][T20980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4211'. [ 1050.444181][T20978] fido_id[20978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1050.870321][T20985] libceph: resolve '. [ 1050.870321][T20985] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1050.870321][T20985] ' (ret=-3): failed [ 1051.417505][ T30] audit: type=1326 audit(1765498618.322:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.506398][ T30] audit: type=1326 audit(1765498618.352:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.578800][ T30] audit: type=1326 audit(1765498618.352:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.691030][ T30] audit: type=1326 audit(1765498618.352:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.799008][ T44] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1051.799415][ T30] audit: type=1326 audit(1765498618.352:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.848937][ T30] audit: type=1326 audit(1765498618.352:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.894436][ T30] audit: type=1326 audit(1765498618.352:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.930185][ T30] audit: type=1326 audit(1765498618.352:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1051.973710][ T30] audit: type=1326 audit(1765498618.352:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1052.028944][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 1052.062950][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.088956][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.095118][ T30] audit: type=1326 audit(1765498618.352:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20996 comm="syz.2.4217" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 1052.158414][ T44] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1052.195863][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.254330][ T44] usb 3-1: config 0 descriptor?? [ 1052.384485][T21004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.391716][T21004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.579018][T13840] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1052.691651][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1052.749087][T13840] usb 6-1: Using ep0 maxpacket: 8 [ 1052.822404][T13840] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1052.830982][T13840] usb 6-1: config 2 has no interface number 0 [ 1052.846470][T13840] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1052.863567][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1052.878473][T13840] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1052.891780][T13840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.907781][T13840] usb 6-1: Product: syz [ 1052.917800][T13840] usb 6-1: Manufacturer: syz [ 1052.933271][T13840] usb 6-1: SerialNumber: syz [ 1052.945834][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1052.963898][T13840] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 1053.029517][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1053.189137][ T44] ft260 0003:0403:6030.0045: unknown main item tag 0x7 [ 1053.394389][ T44] ft260 0003:0403:6030.0045: chip code: 6424 8183 [ 1053.414045][T21016] fuse: Unknown parameter 'w'?' [ 1053.589196][ T44] ft260 0003:0403:6030.0045: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 1053.797061][ T44] ft260 0003:0403:6030.0045: failed to retrieve status: -32, no wakeup [ 1054.459757][ T44] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 1055.025453][T21030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1055.066730][T21030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1055.203224][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1055.217145][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.223650][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.345241][T17270] usb 6-1: USB disconnect, device number 62 [ 1055.958963][T17502] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 1056.159132][ T44] usb 3-1: device descriptor read/64, error -71 [ 1056.303510][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4236'. [ 1056.428994][ T44] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 1056.579669][ T44] usb 3-1: device firmware changed [ 1056.585181][ T5904] usb 3-1: USB disconnect, device number 66 [ 1056.738959][ T5904] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1056.889558][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1056.897056][ T5904] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1056.911263][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.931545][ T5904] usb 3-1: config 0 descriptor?? [ 1056.952852][ T5904] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1057.413533][T21078] delete_channel: no stack [ 1057.525263][T21080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.534317][T21080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.549465][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4240'. [ 1057.798997][ T5904] gspca_vc032x: reg_w err -71 [ 1057.824646][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1057.976395][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1057.986602][T21083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4242'. [ 1058.001930][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.017314][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.030090][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.048141][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.058291][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.068948][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.081366][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.209353][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.216418][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.221868][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.227286][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.232649][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.238179][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.244017][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.323325][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.336931][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 1058.388156][ T5904] gspca_vc032x: Unknown sensor... [ 1058.408564][ T5904] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1058.456908][ T5904] usb 3-1: USB disconnect, device number 67 [ 1058.733613][T21090] loop9: detected capacity change from 0 to 7 [ 1058.766087][T17502] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1058.779353][T17502] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1058.793424][T17502] usb 1-1: can't read configurations, error -71 [ 1058.824519][T21090] Dev loop9: unable to read RDB block 7 [ 1058.839964][T21090] loop9: unable to read partition table [ 1058.845811][T21090] loop9: partition table beyond EOD, truncated [ 1058.852151][T21090] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1059.379087][T21093] netlink: 'syz.0.4246': attribute type 14 has an invalid length. [ 1059.510341][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1059.510358][ T30] audit: type=1326 audit(1765498626.422:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21103 comm="syz.5.4250" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x0 [ 1060.361316][T21116] netlink: 'syz.0.4252': attribute type 5 has an invalid length. [ 1060.381976][T21121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1060.523617][T21116] libceph: resolve '. [ 1060.523617][T21116] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1060.523617][T21116] ' (ret=-3): failed [ 1060.676725][T21130] netlink: 'syz.2.4257': attribute type 8 has an invalid length. [ 1060.778990][T17502] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 1061.189150][ T5904] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1061.217958][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4260'. [ 1061.504613][T21156] binder: 21155:21156 ioctl c0306201 80000080 returned -14 [ 1062.016281][T21174] binder: 21171:21174 ioctl c00c620f 0 returned -14 [ 1062.248632][T21180] FAULT_INJECTION: forcing a failure. [ 1062.248632][T21180] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.372028][T21180] CPU: 1 UID: 0 PID: 21180 Comm: syz.2.4272 Tainted: G L syzkaller #0 PREEMPT(full) [ 1062.372060][T21180] Tainted: [L]=SOFTLOCKUP [ 1062.372067][T21180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1062.372078][T21180] Call Trace: [ 1062.372086][T21180] [ 1062.372096][T21180] dump_stack_lvl+0x189/0x250 [ 1062.372121][T21180] ? __pfx____ratelimit+0x10/0x10 [ 1062.372143][T21180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1062.372163][T21180] ? __pfx__printk+0x10/0x10 [ 1062.372190][T21180] ? __pfx___might_resched+0x10/0x10 [ 1062.372210][T21180] ? fs_reclaim_acquire+0x7d/0x100 [ 1062.372233][T21180] should_fail_ex+0x414/0x560 [ 1062.372251][T21180] should_failslab+0xa8/0x100 [ 1062.372269][T21180] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1062.372296][T21180] ? __alloc_skb+0x255/0x430 [ 1062.372320][T21180] ? napi_skb_cache_get+0x4a5/0x780 [ 1062.372341][T21180] ? napi_skb_cache_get+0x151/0x780 [ 1062.372368][T21180] __alloc_skb+0x255/0x430 [ 1062.372395][T21180] ? __pfx___alloc_skb+0x10/0x10 [ 1062.372423][T21180] ? netlink_ack_tlv_len+0x6c/0x210 [ 1062.372437][T21180] netlink_ack+0x146/0xa50 [ 1062.372472][T21180] netlink_rcv_skb+0x28c/0x470 [ 1062.372494][T21180] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1062.372513][T21180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1062.372537][T21180] ? bpf_lsm_capable+0x9/0x20 [ 1062.372548][T21180] ? security_capable+0x7e/0x2e0 [ 1062.372565][T21180] nfnetlink_rcv+0x282/0x2590 [ 1062.372575][T21180] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1062.372587][T21180] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1062.372611][T21180] ? __dev_queue_xmit+0x289/0x3140 [ 1062.372630][T21180] ? __dev_queue_xmit+0x289/0x3140 [ 1062.372651][T21180] ? __dev_queue_xmit+0x1955/0x3140 [ 1062.372669][T21180] ? ___sys_sendmsg+0x21f/0x2a0 [ 1062.372687][T21180] ? __dev_queue_xmit+0x289/0x3140 [ 1062.372701][T21180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1062.372713][T21180] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1062.372728][T21180] ? ref_tracker_free+0x63a/0x7d0 [ 1062.372747][T21180] ? __asan_memcpy+0x40/0x70 [ 1062.372763][T21180] ? __pfx_ref_tracker_free+0x10/0x10 [ 1062.372802][T21180] ? skb_clone+0x246/0x3a0 [ 1062.372824][T21180] ? __netlink_deliver_tap+0x807/0x850 [ 1062.372837][T21180] ? netlink_deliver_tap+0x2e/0x1b0 [ 1062.372851][T21180] ? netlink_deliver_tap+0x2e/0x1b0 [ 1062.372865][T21180] netlink_unicast+0x82f/0x9e0 [ 1062.372879][T21180] ? __pfx_netlink_unicast+0x10/0x10 [ 1062.372903][T21180] ? netlink_sendmsg+0x642/0xb30 [ 1062.372920][T21180] ? skb_put+0x11b/0x210 [ 1062.372941][T21180] netlink_sendmsg+0x805/0xb30 [ 1062.372969][T21180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.372985][T21180] ? __import_iovec+0x5d4/0x7f0 [ 1062.372995][T21180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1062.373007][T21180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1062.373017][T21180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.373028][T21180] __sock_sendmsg+0x21c/0x270 [ 1062.373049][T21180] ____sys_sendmsg+0x505/0x820 [ 1062.373073][T21180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.373097][T21180] ? kstrtouint+0x6e/0xe0 [ 1062.373125][T21180] ___sys_sendmsg+0x21f/0x2a0 [ 1062.373140][T21180] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.373154][T21180] ? rcu_read_lock_any_held+0xb3/0x120 [ 1062.373180][T21180] ? __fget_files+0x2a/0x420 [ 1062.373199][T21180] ? __fget_files+0x3a0/0x420 [ 1062.373231][T21180] __sys_sendmsg+0x164/0x220 [ 1062.373252][T21180] ? __pfx___sys_sendmsg+0x10/0x10 [ 1062.373277][T21180] ? __pfx_ksys_write+0x10/0x10 [ 1062.373290][T21180] ? __do_fast_syscall_32+0xbe/0x570 [ 1062.373302][T21180] __do_fast_syscall_32+0x1f7/0x570 [ 1062.373312][T21180] ? rcu_is_watching+0x15/0xb0 [ 1062.373323][T21180] ? do_fast_syscall_32+0x34/0x80 [ 1062.373337][T21180] do_fast_syscall_32+0x34/0x80 [ 1062.373355][T21180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1062.373376][T21180] RIP: 0023:0xf70dd539 [ 1062.373392][T21180] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1062.373408][T21180] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1062.373427][T21180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1062.373440][T21180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1062.373452][T21180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1062.373463][T21180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1062.373475][T21180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1062.373503][T21180] [ 1063.234910][T21182] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1063.244498][T21182] block device autoloading is deprecated and will be removed. [ 1063.399852][T21190] syzkaller1: entered promiscuous mode [ 1063.413010][T21190] syzkaller1: entered allmulticast mode [ 1063.479699][T21190] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1063.564003][T17502] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1063.576569][T17502] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1063.608666][T17502] usb 6-1: can't read configurations, error -71 [ 1063.688933][ T980] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1063.828968][ T980] usb 3-1: device descriptor read/64, error -71 [ 1063.964868][T21208] libceph: resolve '. [ 1063.964868][T21208] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1063.964868][T21208] ' (ret=-3): failed [ 1064.108963][ T980] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1064.258991][ T980] usb 3-1: device descriptor read/64, error -71 [ 1064.309794][T17502] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1064.377360][ T980] usb usb3-port1: attempt power cycle [ 1064.468809][T21213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4282'. [ 1064.468944][T17502] usb 6-1: Using ep0 maxpacket: 8 [ 1064.490779][T17502] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.508959][T17502] usb 6-1: config 0 has no interfaces? [ 1064.612553][T21215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.627587][T21215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.670143][T17502] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1064.679582][T17502] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.687649][T17502] usb 6-1: Product: syz [ 1064.739345][T17502] usb 6-1: Manufacturer: syz [ 1064.743974][T17502] usb 6-1: SerialNumber: syz [ 1064.879571][ T980] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1064.899713][ T980] usb 3-1: device descriptor read/8, error -71 [ 1064.942284][T17502] usb 6-1: config 0 descriptor?? [ 1065.142696][T21219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.159578][ T980] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1065.175778][T21219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.189379][ T980] usb 3-1: device descriptor read/8, error -71 [ 1065.299693][ T980] usb usb3-port1: unable to enumerate USB device [ 1065.333692][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4285'. [ 1066.205168][ T980] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1066.383665][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.403837][ T980] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1066.423816][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.503547][ T980] usb 1-1: config 0 descriptor?? [ 1066.526739][ T980] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 1066.909087][ T980] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1067.078934][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 1067.086881][ T980] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.146505][ T980] usb 3-1: config 0 has no interface number 0 [ 1067.276427][ T980] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1067.295334][ T980] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1067.307608][ T44] usb 6-1: USB disconnect, device number 64 [ 1067.345827][ T980] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1067.388211][ T980] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 1067.388229][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.388239][ T980] usb 3-1: Product: syz [ 1067.388247][ T980] usb 3-1: Manufacturer: syz [ 1067.388256][ T980] usb 3-1: SerialNumber: syz [ 1067.391281][ T980] usb 3-1: config 0 descriptor?? [ 1067.394579][ T980] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1067.573645][ T980] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -12 [ 1067.603181][T17502] usb 3-1: USB disconnect, device number 73 [ 1067.654001][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.254137][T21247] loop2: detected capacity change from 0 to 3 [ 1068.262524][ T5979] ldm_validate_privheads(): Disk read failed. [ 1068.278139][ T5979] Dev loop2: unable to read RDB block 3 [ 1068.288772][ T5979] loop2: unable to read partition table [ 1068.297359][ T5979] loop2: partition table beyond EOD, truncated [ 1068.318614][T21247] ldm_validate_privheads(): Disk read failed. [ 1068.326310][T21247] Dev loop2: unable to read RDB block 3 [ 1068.332570][T21247] loop2: unable to read partition table [ 1068.338440][T21247] loop2: partition table beyond EOD, truncated [ 1068.352657][T21247] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1069.236479][T13840] usb 1-1: USB disconnect, device number 42 [ 1069.988964][T13840] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1070.202840][T13840] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1070.248439][T13840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.283886][T13840] usb 1-1: Product: syz [ 1070.297948][T13840] usb 1-1: Manufacturer: syz [ 1070.417046][T13840] usb 1-1: SerialNumber: syz [ 1070.463848][T13840] usb 1-1: config 0 descriptor?? [ 1071.138655][T13840] usb 1-1: Firmware version (0.0) predates our first public release. [ 1071.168572][T13840] usb 1-1: Please update to version 0.2 or newer [ 1071.339284][T13840] usb 1-1: Firmware: build z*B [ 1071.771421][T21303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1071.780487][T21274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1071.821003][T13840] usb 1-1: USB disconnect, device number 43 [ 1071.903970][T21305] FAULT_INJECTION: forcing a failure. [ 1071.903970][T21305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.940161][T21305] CPU: 0 UID: 0 PID: 21305 Comm: syz.1.4309 Tainted: G L syzkaller #0 PREEMPT(full) [ 1071.940179][T21305] Tainted: [L]=SOFTLOCKUP [ 1071.940183][T21305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1071.940190][T21305] Call Trace: [ 1071.940194][T21305] [ 1071.940200][T21305] dump_stack_lvl+0x189/0x250 [ 1071.940217][T21305] ? __pfx____ratelimit+0x10/0x10 [ 1071.940232][T21305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1071.940243][T21305] ? __pfx__printk+0x10/0x10 [ 1071.940258][T21305] ? __might_fault+0xb0/0x130 [ 1071.940277][T21305] should_fail_ex+0x414/0x560 [ 1071.940294][T21305] _copy_from_iter+0x1cd/0x1630 [ 1071.940311][T21305] ? __build_skb_around+0x22d/0x3c0 [ 1071.940328][T21305] ? __pfx__copy_from_iter+0x10/0x10 [ 1071.940342][T21305] ? __alloc_skb+0x2f1/0x430 [ 1071.940357][T21305] ? __pfx___alloc_skb+0x10/0x10 [ 1071.940372][T21305] ? netlink_sendmsg+0x642/0xb30 [ 1071.940382][T21305] ? skb_put+0x11b/0x210 [ 1071.940393][T21305] netlink_sendmsg+0x6b2/0xb30 [ 1071.940409][T21305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.940421][T21305] ? __import_iovec+0x5d4/0x7f0 [ 1071.940430][T21305] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1071.940442][T21305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1071.940452][T21305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.940464][T21305] __sock_sendmsg+0x21c/0x270 [ 1071.940478][T21305] ____sys_sendmsg+0x505/0x820 [ 1071.940492][T21305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1071.940505][T21305] ? kstrtouint+0x6e/0xe0 [ 1071.940520][T21305] ___sys_sendmsg+0x21f/0x2a0 [ 1071.940532][T21305] ? __pfx____sys_sendmsg+0x10/0x10 [ 1071.940545][T21305] ? rcu_read_lock_any_held+0xb3/0x120 [ 1071.940572][T21305] ? __fget_files+0x2a/0x420 [ 1071.940584][T21305] ? __fget_files+0x3a0/0x420 [ 1071.940601][T21305] __sys_sendmsg+0x164/0x220 [ 1071.940613][T21305] ? __pfx___sys_sendmsg+0x10/0x10 [ 1071.940627][T21305] ? __pfx_ksys_write+0x10/0x10 [ 1071.940640][T21305] ? __do_fast_syscall_32+0xbe/0x570 [ 1071.940651][T21305] __do_fast_syscall_32+0x1f7/0x570 [ 1071.940661][T21305] ? rcu_is_watching+0x15/0xb0 [ 1071.940672][T21305] ? do_fast_syscall_32+0x34/0x80 [ 1071.940684][T21305] do_fast_syscall_32+0x34/0x80 [ 1071.940693][T21305] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1071.940705][T21305] RIP: 0023:0xf702d539 [ 1071.940715][T21305] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1071.940724][T21305] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1071.940735][T21305] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1071.940743][T21305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1071.940748][T21305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1071.940754][T21305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1071.940760][T21305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1071.940775][T21305] [ 1072.390789][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4312'. [ 1072.851277][T21325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4317'. [ 1072.869338][T13840] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1073.028936][T13840] usb 6-1: Using ep0 maxpacket: 16 [ 1073.036449][T13840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1073.048490][T13840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1073.076664][T13840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.089466][T13840] usb 6-1: Product: syz [ 1073.093795][T13840] usb 6-1: Manufacturer: syz [ 1073.098830][T13840] usb 6-1: SerialNumber: syz [ 1073.149837][ T980] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1073.189858][T21332] program syz.2.4320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.310902][ T980] usb 1-1: config 0 has no interfaces? [ 1073.319049][ T980] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1073.338147][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.359452][ T980] usb 1-1: Product: syz [ 1073.363640][ T980] usb 1-1: Manufacturer: syz [ 1073.380043][ T980] usb 1-1: SerialNumber: syz [ 1073.423531][ T980] usb 1-1: config 0 descriptor?? [ 1073.434807][T21338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4322'. [ 1073.517219][T21318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.531137][T21318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.560359][T13840] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1073.580171][T13840] usb 6-1: USB disconnect, device number 65 [ 1073.665602][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.735140][T21326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.762428][T21326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.789242][T21326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.798506][T21326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.860490][T21344] delete_channel: no stack [ 1074.068948][T13840] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1074.240694][T13840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1074.264833][T13840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1074.287562][T13840] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1074.309315][T13840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.384139][ T5965] usb 1-1: USB disconnect, device number 44 [ 1074.405482][T13840] usb 6-1: config 0 descriptor?? [ 1074.696902][T13840] usbhid 6-1:0.0: can't add hid device: -71 [ 1074.713200][T13840] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1074.780281][T13840] usb 6-1: USB disconnect, device number 66 [ 1074.808431][T21370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.815676][T21370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.910767][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1075.031107][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1075.041461][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1075.054811][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1075.071087][T21377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4334'. [ 1075.180155][ T980] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1075.330890][ T980] usb 1-1: device descriptor read/64, error -71 [ 1075.695538][ T980] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1075.925117][ T980] usb 1-1: device descriptor read/64, error -71 [ 1076.043124][ T980] usb usb1-port1: attempt power cycle [ 1076.077433][T13840] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1076.358968][T13840] usb 6-1: Using ep0 maxpacket: 8 [ 1076.418973][ T980] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1076.460130][ T980] usb 1-1: device descriptor read/8, error -71 [ 1076.548962][T21405] --map-set only usable from mangle table [ 1076.597189][T13840] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 1076.605450][T13840] usb 6-1: config 2 has no interface number 0 [ 1076.642322][T13840] usb 6-1: config 2 interface 31 has no altsetting 0 [ 1076.743222][T13840] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1076.759022][ T980] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1076.771287][T13840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.788191][ T30] audit: type=1326 audit(1765498643.692:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21408 comm="syz.6.4345" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 1076.788362][T13840] usb 6-1: Product: syz [ 1076.870459][ T980] usb 1-1: device descriptor read/8, error -71 [ 1076.879026][T13840] usb 6-1: Manufacturer: syz [ 1076.888949][T13840] usb 6-1: SerialNumber: syz [ 1076.900074][T21412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.918753][T13840] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 1076.937053][T21412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.971957][T21413] syzkaller0: entered promiscuous mode [ 1076.977470][T21413] syzkaller0: entered allmulticast mode [ 1076.994165][ T980] usb usb1-port1: unable to enumerate USB device [ 1077.202726][T21421] syzkaller1: entered promiscuous mode [ 1077.212884][T21421] syzkaller1: entered allmulticast mode [ 1078.139961][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4355'. [ 1078.409020][ T980] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1078.458606][T21452] loop9: detected capacity change from 0 to 7 [ 1078.465793][T21452] Dev loop9: unable to read RDB block 7 [ 1078.472317][T21452] loop9: unable to read partition table [ 1078.478135][T21452] loop9: partition table beyond EOD, truncated [ 1078.484999][T21452] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1078.562735][ T980] usb 1-1: config 0 has no interfaces? [ 1078.578825][ T980] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1078.589281][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.597299][ T980] usb 1-1: Product: syz [ 1078.601909][ T980] usb 1-1: Manufacturer: syz [ 1078.606521][ T980] usb 1-1: SerialNumber: syz [ 1078.618344][ T980] usb 1-1: config 0 descriptor?? [ 1078.695297][T13840] usb 6-1: USB disconnect, device number 67 [ 1078.836810][T21440] veth0_macvtap: left promiscuous mode [ 1078.902208][T21440] veth0_macvtap: entered promiscuous mode [ 1078.912484][ T980] usb 1-1: USB disconnect, device number 49 [ 1079.048087][T21465] netlink: 'syz.5.4363': attribute type 14 has an invalid length. [ 1079.270539][T21467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.284502][T21467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.306569][T21467] tipc: Started in network mode [ 1079.311801][T21467] tipc: Node identity 061c3148b0f6, cluster identity 4711 [ 1079.319220][T21467] tipc: Enabled bearer , priority 0 [ 1079.326870][T21467] syzkaller0: entered promiscuous mode [ 1079.332769][T21467] syzkaller0: entered allmulticast mode [ 1079.347086][T21467] tipc: Resetting bearer [ 1079.356688][T21466] tipc: Resetting bearer [ 1079.385452][T21466] tipc: Disabling bearer [ 1079.595282][ T4099] veth0_macvtap: left promiscuous mode [ 1080.481783][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4373'. [ 1080.662017][T21502] libceph: resolve '. [ 1080.662017][T21502] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1080.662017][T21502] ' (ret=-3): failed [ 1080.867251][T21509] binder: 21507:21509 ioctl c0306201 80000080 returned -14 [ 1081.084602][T21511] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4378'. [ 1081.162490][T21513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1081.169736][T21513] IPv6: NLM_F_CREATE should be set when creating new route [ 1081.548970][T15506] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1081.678547][T21524] xt_hashlimit: invalid rate [ 1081.712124][T15506] usb 1-1: Using ep0 maxpacket: 16 [ 1081.721664][T15506] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1081.738977][T15506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.764533][T15506] usb 1-1: Product: syz [ 1081.768706][T15506] usb 1-1: Manufacturer: syz [ 1081.799410][T15506] usb 1-1: SerialNumber: syz [ 1081.816752][T15506] usb 1-1: config 0 descriptor?? [ 1081.874757][T21526] netlink: 'syz.5.4386': attribute type 21 has an invalid length. [ 1081.882801][T21526] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4386'. [ 1082.068630][T15506] usb_8dev 1-1:0.0 can0: sending command message failed [ 1082.070913][T21528] FAULT_INJECTION: forcing a failure. [ 1082.070913][T21528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1082.099054][T21528] CPU: 0 UID: 0 PID: 21528 Comm: syz.1.4387 Tainted: G L syzkaller #0 PREEMPT(full) [ 1082.099081][T21528] Tainted: [L]=SOFTLOCKUP [ 1082.099088][T21528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.099098][T21528] Call Trace: [ 1082.099105][T21528] [ 1082.099113][T21528] dump_stack_lvl+0x189/0x250 [ 1082.099139][T21528] ? __pfx____ratelimit+0x10/0x10 [ 1082.099171][T21528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1082.099192][T21528] ? __pfx__printk+0x10/0x10 [ 1082.099227][T21528] should_fail_ex+0x414/0x560 [ 1082.099256][T21528] _copy_to_user+0x31/0xb0 [ 1082.099277][T21528] simple_read_from_buffer+0xe1/0x170 [ 1082.099303][T21528] proc_fail_nth_read+0x1b3/0x220 [ 1082.099327][T21528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.099348][T21528] ? rw_verify_area+0x2a6/0x4d0 [ 1082.099365][T21528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1082.099386][T21528] vfs_read+0x200/0xa30 [ 1082.099402][T21528] ? fdget_pos+0x247/0x320 [ 1082.099427][T21528] ? __pfx___mutex_lock+0x10/0x10 [ 1082.099445][T21528] ? __pfx_vfs_read+0x10/0x10 [ 1082.099463][T21528] ? __fget_files+0x2a/0x420 [ 1082.099488][T21528] ? __fget_files+0x3a0/0x420 [ 1082.099508][T21528] ? __fget_files+0x2a/0x420 [ 1082.099538][T21528] ksys_read+0x145/0x250 [ 1082.099558][T21528] ? __pfx_ksys_read+0x10/0x10 [ 1082.099579][T21528] ? __do_fast_syscall_32+0xbe/0x570 [ 1082.099602][T21528] __do_fast_syscall_32+0x1f7/0x570 [ 1082.099619][T21528] ? rcu_is_watching+0x15/0xb0 [ 1082.099638][T21528] ? do_fast_syscall_32+0x34/0x80 [ 1082.099659][T21528] do_fast_syscall_32+0x34/0x80 [ 1082.099680][T21528] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1082.099701][T21528] RIP: 0023:0xf702d539 [ 1082.099718][T21528] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1082.099733][T21528] RSP: 002b:00000000f541d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1082.099753][T21528] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d620 [ 1082.099766][T21528] RDX: 000000000000000f RSI: 00000000f73c6ff4 RDI: 0000000000000000 [ 1082.099777][T21528] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1082.099787][T21528] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1082.099797][T21528] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1082.099825][T21528] [ 1082.109132][T15506] usb_8dev 1-1:0.0 can0: can't get firmware version [ 1082.148979][T13840] usb 6-1: new full-speed USB device number 68 using dummy_hcd [ 1082.452822][T21530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4388'. [ 1082.472932][T21530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4388'. [ 1082.484085][T15506] usb_8dev 1-1:0.0: probe with driver usb_8dev failed with error -22 [ 1082.497373][T15506] usb 1-1: USB disconnect, device number 50 [ 1082.600989][T13840] usb 6-1: not running at top speed; connect to a high speed hub [ 1082.620108][T13840] usb 6-1: config 1 has an invalid interface number: 134 but max is 0 [ 1082.628283][T13840] usb 6-1: config 1 has no interface number 0 [ 1082.647148][T13840] usb 6-1: config 1 interface 134 has no altsetting 0 [ 1082.665707][T13840] usb 6-1: New USB device found, idVendor=19d2, idProduct=0330, bcdDevice=fc.7d [ 1082.675927][T13840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.689539][T13840] usb 6-1: Product: syz [ 1082.694339][T13840] usb 6-1: Manufacturer: syz [ 1082.699489][T13840] usb 6-1: SerialNumber: syz [ 1082.722068][T17270] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 1082.947041][T21526] netlink: 'syz.5.4386': attribute type 10 has an invalid length. [ 1082.957598][T21526] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1083.081294][T13840] option 6-1:1.134: GSM modem (1-port) converter detected [ 1083.094588][T13840] usb 6-1: USB disconnect, device number 68 [ 1083.111828][T13840] option 6-1:1.134: device disconnected [ 1083.129498][ T10] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1083.280026][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1083.288692][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1083.297950][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.307879][ T10] usb 1-1: Product: syz [ 1083.324486][ T10] usb 1-1: Manufacturer: syz [ 1083.330173][ T10] usb 1-1: SerialNumber: syz [ 1083.586996][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1083.901193][T21552] bridge0: port 3(syz_tun) entered blocking state [ 1083.909055][T21552] bridge0: port 3(syz_tun) entered disabled state [ 1083.916242][T21552] syz_tun: entered allmulticast mode [ 1083.924580][T21552] syz_tun: entered promiscuous mode [ 1083.930388][T21552] bridge0: port 3(syz_tun) entered blocking state [ 1083.936927][T21552] bridge0: port 3(syz_tun) entered forwarding state [ 1083.986550][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4397'. [ 1084.098993][ T10] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1084.143348][ T30] audit: type=1326 audit(1765498651.052:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.159092][T21558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.185452][T21558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.237536][T21540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.248936][ T30] audit: type=1326 audit(1765498651.052:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.253863][T21540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.279192][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1084.285351][ T30] audit: type=1326 audit(1765498651.052:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.293745][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1084.346014][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1084.382424][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1084.394293][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.413079][ T10] usb 6-1: Product: syz [ 1084.423255][ T10] usb 6-1: Manufacturer: syz [ 1084.437406][ T10] usb 6-1: SerialNumber: syz [ 1084.442771][T21560] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4399'. [ 1084.454731][ T5965] usb 1-1: USB disconnect, device number 51 [ 1084.485996][ T5965] usblp0: removed [ 1084.505598][ T10] usb 6-1: config 0 descriptor?? [ 1084.534113][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1084.568736][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1084.619415][ T30] audit: type=1326 audit(1765498651.052:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.650748][ T30] audit: type=1326 audit(1765498651.052:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.714383][ T30] audit: type=1326 audit(1765498651.052:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.801059][ T30] audit: type=1326 audit(1765498651.052:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.872764][ T30] audit: type=1326 audit(1765498651.052:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.901274][ T30] audit: type=1326 audit(1765498651.052:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1084.948378][ T30] audit: type=1326 audit(1765498651.052:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.1.4398" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf702d539 code=0x7ffc0000 [ 1085.057617][T21572] Cannot find map_set index 2 as target [ 1085.147688][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1085.156051][ T10] em28xx 6-1:0.0: Config register raw data: 0x41 [ 1085.407017][T21581] tipc: Enabled bearer , priority 0 [ 1085.429301][T21581] syzkaller0: entered promiscuous mode [ 1085.437225][T21581] syzkaller0: entered allmulticast mode [ 1085.486507][T21581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4406'. [ 1085.512572][T21581] tipc: Resetting bearer [ 1085.545404][T21580] tipc: Resetting bearer [ 1085.554509][T17270] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1085.564037][T17270] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1085.574701][T21580] tipc: Disabling bearer [ 1085.590029][T17270] usb 3-1: can't read configurations, error -71 [ 1085.736739][T21587] macvlan0: entered promiscuous mode [ 1085.753680][T21587] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 1085.780212][T21587] netlink: 'syz.0.4408': attribute type 2 has an invalid length. [ 1085.936588][ T31] INFO: task kworker/0:10:18186 blocked for more than 143 seconds. [ 1086.027904][ T31] Tainted: G L syzkaller #0 [ 1086.037097][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1086.064000][ T31] task:kworker/0:10 state:D stack:21968 pid:18186 tgid:18186 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1086.271643][ T31] Workqueue: usb_hub_wq hub_event [ 1086.276801][ T31] Call Trace: [ 1086.284540][ T31] [ 1086.293594][ T31] __schedule+0x14bc/0x5000 [ 1086.303545][ T31] ? __pfx___schedule+0x10/0x10 [ 1086.327327][ T31] ? schedule+0x91/0x360 [ 1086.339766][ T31] schedule+0x165/0x360 [ 1086.350602][ T31] schedule_timeout+0x9a/0x270 [ 1086.366628][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1086.378920][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1086.391817][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1086.402915][ T31] ? wait_for_completion+0x267/0x5d0 [ 1086.416129][ T31] wait_for_completion+0x2bf/0x5d0 [ 1086.428108][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1086.439509][ T31] i2c_del_adapter+0x591/0x760 [ 1086.450975][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1086.463891][ T31] ? rcu_is_watching+0x15/0xb0 [ 1086.482153][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 1086.493824][ T31] ? kfree+0x4d/0x660 [ 1086.915645][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1086.920615][ T31] dvb_usb_device_exit+0x1be/0x350 [ 1086.936692][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1086.948117][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1086.976044][T15506] usb 6-1: USB disconnect, device number 69 [ 1086.983340][T15506] em28xx 6-1:0.0: Disconnecting em28xx [ 1086.994056][T15506] em28xx 6-1:0.0: Freeing device [ 1086.995349][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1087.016239][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1087.023443][ T31] cxusb_probe+0x603/0x700 [ 1087.028261][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 1087.045671][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1087.058898][ T31] usb_probe_interface+0x668/0xc90 [ 1087.067258][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1087.078125][ T31] really_probe+0x26d/0xad0 [ 1087.094491][ T31] __driver_probe_device+0x18c/0x320 [ 1087.108446][ T31] driver_probe_device+0x4f/0x240 [ 1087.116439][ T31] __device_attach_driver+0x279/0x430 [ 1087.124707][ T31] bus_for_each_drv+0x251/0x2e0 [ 1087.132065][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1087.144687][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1087.153262][ T31] __device_attach+0x2b8/0x430 [ 1087.191242][ T31] ? __pfx___device_attach+0x10/0x10 [ 1087.198785][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1087.206040][ T31] device_initial_probe+0xa1/0xd0 [ 1087.214357][ T31] bus_probe_device+0x12a/0x220 [ 1087.221451][ T31] ? device_add+0x726/0xb80 [ 1087.227836][ T31] device_add+0x7b6/0xb80 [ 1087.234597][ T31] usb_set_configuration+0x1a87/0x2110 [ 1087.240253][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1087.246539][ T31] usb_probe_device+0x1c4/0x3c0 [ 1087.252559][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1087.258681][ T31] really_probe+0x26d/0xad0 [ 1087.268836][ T31] __driver_probe_device+0x18c/0x320 [ 1087.275449][ T31] driver_probe_device+0x4f/0x240 [ 1087.282047][ T31] __device_attach_driver+0x279/0x430 [ 1087.287598][ T31] bus_for_each_drv+0x251/0x2e0 [ 1087.295644][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1087.301638][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1087.307036][ T31] __device_attach+0x2b8/0x430 [ 1087.311870][ T31] ? __pfx___device_attach+0x10/0x10 [ 1087.317171][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1087.322163][ T31] device_initial_probe+0xa1/0xd0 [ 1087.327207][ T31] bus_probe_device+0x12a/0x220 [ 1087.332126][ T31] ? device_add+0x726/0xb80 [ 1087.336641][ T31] device_add+0x7b6/0xb80 [ 1087.341070][ T31] usb_new_device+0xa39/0x1720 [ 1087.345990][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1087.351242][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.356451][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1087.361804][ T31] hub_event+0x29b1/0x4ef0 [ 1087.366259][ T31] ? __pfx_hub_event+0x10/0x10 [ 1087.374792][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1087.380986][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.386179][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1087.393003][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 1087.399136][ T31] process_scheduled_works+0xad1/0x1770 [ 1087.405548][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1087.411616][ T31] worker_thread+0x8a0/0xda0 [ 1087.416217][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1087.422928][ T31] ? __kthread_parkme+0x7b/0x200 [ 1087.427866][ T31] kthread+0x711/0x8a0 [ 1087.432135][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1087.437260][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.441982][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.447194][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1087.452471][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.457078][ T31] ret_from_fork+0x599/0xb30 [ 1087.461691][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.466817][ T31] ? __switch_to_asm+0x39/0x70 [ 1087.471603][ T31] ? __switch_to_asm+0x33/0x70 [ 1087.476378][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.481350][ T31] ret_from_fork_asm+0x1a/0x30 [ 1087.486141][ T31] [ 1087.489852][ T31] [ 1087.489852][ T31] Showing all locks held in the system: [ 1087.516899][ T31] 1 lock held by khungtaskd/31: [ 1087.522032][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1087.531986][ T31] 2 locks held by getty/5584: [ 1087.533559][T21597] ip6gre2: entered allmulticast mode [ 1087.536665][ T31] #0: ffff888034e250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1087.558445][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 1087.571218][ T31] 4 locks held by udevd/10639: [ 1087.575983][ T31] #0: ffff888062a300a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1087.586992][ T31] #1: ffff88805d7e2088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1087.596662][ T31] #2: ffff888020713c38 (kn->active#21){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1087.606381][ T31] #3: ffff88802f5d5198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1087.615786][ T31] 5 locks held by kworker/0:10/18186: [ 1087.621198][ T31] #0: ffff888141ea3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1087.632615][ T31] #1: ffffc90004d37b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1087.644606][ T31] #2: ffff888142fa9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 1087.653560][ T31] #3: ffff88802f5d5198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 1087.662877][ T31] #4: ffff88805732a160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x430 [ 1087.672161][ T31] 1 lock held by syz.6.4404/21573: [ 1087.677254][ T31] #0: ffffffff8df47400 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1087.687425][ T31] [ 1087.692670][ T31] ============================================= [ 1087.692670][ T31] [ 1087.719019][ T31] NMI backtrace for cpu 0 [ 1087.719038][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.719061][ T31] Tainted: [L]=SOFTLOCKUP [ 1087.719068][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1087.719078][ T31] Call Trace: [ 1087.719086][ T31] [ 1087.719093][ T31] dump_stack_lvl+0x189/0x250 [ 1087.719119][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.719139][ T31] ? __pfx__printk+0x10/0x10 [ 1087.719172][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1087.719195][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1087.719216][ T31] ? __pfx__printk+0x10/0x10 [ 1087.719243][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1087.719270][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1087.719294][ T31] sys_info+0x135/0x170 [ 1087.719311][ T31] watchdog+0xf95/0xfe0 [ 1087.719338][ T31] ? watchdog+0x20a/0xfe0 [ 1087.719368][ T31] kthread+0x711/0x8a0 [ 1087.719394][ T31] ? __pfx_watchdog+0x10/0x10 [ 1087.719416][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.719438][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1087.719461][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1087.719484][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.719506][ T31] ret_from_fork+0x599/0xb30 [ 1087.719526][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.719553][ T31] ? __switch_to_asm+0x39/0x70 [ 1087.719572][ T31] ? __switch_to_asm+0x33/0x70 [ 1087.719592][ T31] ? __pfx_kthread+0x10/0x10 [ 1087.719613][ T31] ret_from_fork_asm+0x1a/0x30 [ 1087.719647][ T31] [ 1087.719655][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1087.874615][ C1] NMI backtrace for cpu 1 [ 1087.874634][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.874655][ C1] Tainted: [L]=SOFTLOCKUP [ 1087.874661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1087.874672][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1087.874698][ C1] Code: 13 ee 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 50 0d 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1087.874712][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1087.874727][ C1] RAX: 67b8fbc7ccc1a400 RBX: ffffffff81978eba RCX: 67b8fbc7ccc1a400 [ 1087.874740][ C1] RDX: 0000000000000001 RSI: ffffffff8d78fe62 RDI: ffffffff8bc07960 [ 1087.874752][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 1087.874764][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f81f770 [ 1087.874776][ C1] R13: 1ffff110038d4b70 R14: 0000000000000001 R15: 0000000000000001 [ 1087.874787][ C1] FS: 0000000000000000(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000 [ 1087.874801][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1087.874812][ C1] CR2: 00000000f7448c4c CR3: 000000002fcfa000 CR4: 00000000003526f0 [ 1087.874827][ C1] Call Trace: [ 1087.874834][ C1] [ 1087.874841][ C1] default_idle+0x13/0x20 [ 1087.874856][ C1] default_idle_call+0x73/0xb0 [ 1087.874872][ C1] do_idle+0x1ea/0x520 [ 1087.874889][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 1087.874912][ C1] ? __pfx_do_idle+0x10/0x10 [ 1087.874935][ C1] cpu_startup_entry+0x44/0x60 [ 1087.874952][ C1] start_secondary+0x101/0x110 [ 1087.874972][ C1] common_startup_64+0x13e/0x147 [ 1087.874998][ C1] [ 1088.065590][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1088.072466][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1088.083139][ T31] Tainted: [L]=SOFTLOCKUP [ 1088.087444][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1088.097479][ T31] Call Trace: [ 1088.100743][ T31] [ 1088.103660][ T31] dump_stack_lvl+0x99/0x250 [ 1088.108237][ T31] ? __asan_memcpy+0x40/0x70 [ 1088.112810][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1088.117994][ T31] ? __pfx__printk+0x10/0x10 [ 1088.122583][ T31] vpanic+0x237/0x6d0 [ 1088.126558][ T31] ? __pfx_vpanic+0x10/0x10 [ 1088.131049][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1088.136502][ T31] panic+0xb9/0xc0 [ 1088.140208][ T31] ? __pfx_panic+0x10/0x10 [ 1088.144610][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1088.149971][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1088.156112][ T31] watchdog+0xfdf/0xfe0 [ 1088.160259][ T31] ? watchdog+0x20a/0xfe0 [ 1088.164583][ T31] kthread+0x711/0x8a0 [ 1088.168643][ T31] ? __pfx_watchdog+0x10/0x10 [ 1088.173309][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.177889][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.183072][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 1088.188258][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.192836][ T31] ret_from_fork+0x599/0xb30 [ 1088.197414][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1088.202516][ T31] ? __switch_to_asm+0x39/0x70 [ 1088.207268][ T31] ? __switch_to_asm+0x33/0x70 [ 1088.212017][ T31] ? __pfx_kthread+0x10/0x10 [ 1088.216596][ T31] ret_from_fork_asm+0x1a/0x30 [ 1088.221366][ T31] [ 1088.224718][ T31] Kernel Offset: disabled [ 1088.229025][ T31] Rebooting in 86400 seconds..