last executing test programs: 4m27.147555106s ago: executing program 1 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000500000000000010000001400020077673000e9ffffff000000000000000054000880"], 0x7c}, 0x1, 0x0, 0x0, 0x24000855}, 0x0) 4m26.955981249s ago: executing program 1 (id=465): r0 = userfaultfd(0x80001) r1 = dup2(r0, r0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, 0x10) r2 = syz_clone(0x100, &(0x7f0000000040)="6e32829d0ba5e67b62ef5b0a4d9af4a87ef1fae7049ffcc045f4255633b3ca7392717034269b9a1a7c0e43686f8f0eab8eaf5be27588cd440a4b284281a9ef136ff634f21c7cd960468c311f715abef4e17176cde2ee372eab322214047777fe97f777c3c030f505e570cae0a6805c134adfc97bec2d1ee3f32dec35cfa012fc73410d17284cf26aca64d59a3e447bb4f358061f2bd407278e76d9854a6a0a9bfafedbfe8ae6af7a9e0b798542f772a79083ec27e7bbae663dfbe7a808abff6dbf0b887e25f8b29c9064b01bd678a3a190be8f9753845bfc0d1237d51d41f7892a7bc8f808bf", 0xe6, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="d84de896a838619e37e45ed8f5f772f87ddd75242d268dd00b72477c2ff197d26d1b148658b060480ba9cce065d6b81b260ea731d6c6677e608fde252e94f100ae68e4996721540fd32882fbb23f0ec552d49a90fafe197553819198e917a1fdedecf547ca407918bbbabc4f653d9967cd6ea84a89e45be8c90524f430cde2d4acaf2ae347c1328117afa1ee97c6cbe8857755d643602b90000c8c6b941ce9e3041d61106e0599efe7af56be514d978355a3f1e0cf45dc108a246165e4ab297dfa2d5fb163eca2be135c221654da860cb475d876109b96c9d82e8f61a7eeba7e7140e7c3f701885fa7b2d0a5829f2252ef3b538186895184c5fb60aaeb93cda43e9e115cf49358120642f01a1e050b072d2b308ff8d3699fe22a41f0416b2a21d21e0635eec416b4b941008867fd8b3d07ffa317e06dccf197101a94c0fb8eeee97eb0aa8e3505b224c623d7e6f32b51dcae6a2e392ced5dbf436dcb631eca0fb17055a3ab75e8774c757da9524fc823e99cebdbb5fdc2172361a137b25598a4b5686250c97bde42ec6801e53924f33808607a9e76b93267a8b34abc6aa60a335715860165f2bc0d0688dad076e0442c64ad0c748065398c0b6389b705dd7fb6f5af61e6c140bbaaf3795b901117ce3e8172a55e485a64667e435127fbc4a566b335d1ebc0ef6412b5064c7354d5daf04d1252e337390f9f87f3a53b6fe674bd9133b60875df9071b09a038838626d53efa9a8ac57f26e579cecf16bb8297e9149249ed7207cbf90869dd9a82e3d53d32a7e1d73f5fa4c94dab1f39c19cbaea6147fa244a79ffc64441c6b17a2d233630b2a7639d509fdfdbbe4d1dd7810d5039fc54513669acb24411e1c62c2d51648ed279482ca3945f3e994f2ac9bea21353efe23448b1545cec0f042070d6a70beb25c99381630fa3fd1ca8e2f792b25a1a1edf9e2bfcbc9058f2aaefcfb796c5c08f1a680ff7f680f8f9721c4e717dd32185af4d7b5f97df547c7b3eef49f454c259dfaebcb1c2985af186d8b5df4ec7aeeac56ed207bdb7b161f31e9eec6ad2bde090b154cec80641e4171e08f3eb9de0daf22c1e8d028f64fdeb2f6880669c9608314864d51ef1b9512ffe83462df67804f5a0b99fab081b3be0245463f363306229aae72b74598be16fe8096e9bbc514114115757d59f447aa57753b3c1e9de2670129cef924c260a5c757aa6f7772021d876acc2d1b043fabfff0e38418032fcf543de7cf3aad4e830e5eceecf7e866f35c8247e1edff35e91d59aa26272934e11504b15706dddedb8502039c595a3d6307276e1ce21e06f5a27523a47c014f0c1b330eac288848fcf5121bc5881dcc5d9551f6e7f6b4850c407313b03bc7ce0435aad47711a157e9fe65448d43fab487edc366aa5f16eeb0fda6af502cf5da694acca652e2842e60db9c90f9fa0440640a700808fa86edf812e7c1d46b1e8c1a24a226225d345ad895b7d407bd5f79c26ad5c609fce394f0a311ff02a161da25ada365fe602fc505e6fe0aeba5e968d80e5b9ed7c9fa9e0a89535571d909d766f5784f841ce1e7ede6c65baff9b0d1986f76085e6ad55c632dffb917c2661caacade5d3b85b7f13016b81961156127cda675baa660c04a272c3d9b22c021678467517c9475c7b12886362559cd3ba8d626bca4adbc4bfa4af227d537006585b49cdc316c199d03d7d31a85f8a81bc7941f81cdd9d06aa6645fb7e8310e754461e0608a3cdbe04977b9dc5d35e57ac6f148c0bf1a45d29299f00cd0b44cf6564ec004f361e931e17de076d1d5f2cee2d44b0a986f5771aedd5dd615fc5502f6e6e50aef7018891d0ebcf9ff9f06837881f1d99ca418a4fb0dc78a571954e2fc73ad35f2f08eabfb017c0105eb7d8f0e3012cd1e417a764ff7efd4c4b71683f373ed5a481e3ce83c0feb19920e50e7b9f928de49777b6cbf9ae46fcdc5795a33e51fbcc8f879ffe75b4c6162997f43b576b664d80ebd3976f4765cf74f941b84c27b192cff3f1ed749a8c22657e7d433a89addced688bd72089ec17343f7afa2aa00f4b5c86f1cf0c1a19c974ca902820c1e690a4c71594902c7b69e9dfcd7eb1bd2065108861fedb5c32ea4e01a7569a0e42741783b10c966d06403845e1a5cdbf6f918c6f824ae179cf3a8290f8a595e762f21d67fef2683f2031b4ed741dafd0759b7c0f8a06ea4f0789c9e1a22608c38dbf2e6259d965e81d0aa3a66d588ad2bc650ae46708dfa730b179a13086aea3614df52067c5cf9a82b5232e157f859fdb91f00c5a9d72b9380cdbebc57e7fde4f56342a529e14ef7aceefd2ddd01dd9c4f01a6acd6445452b8768a25f21c9dbbe6c5c4dc0df08a6d4b6304fb596962191b62393d823f5cf280489c39fcf3921e1af1f6fadd29609cfd340060be3b2921e961ebb770aa58cefa716cf3c84811200853209dcb801ec15bb45ab2c5ac4deb7ba58f04628a5fbae117b4ff24a492918cadb1c8d14719f35e50650281f9d1f260bbb73fec394f9df5bdd0c007f182989aa7d412f26ea03e712aa88e943ef53aa79b3b7483c7f99e77fcc36a9ed6fa7fd533882a9f04cd5cd8a9aa145f8340ecc317cdc66e15503ade058fb42cc7d06debe09680d8097e0643c063906a572bef2a75c883e7fa3d7079014400c32c43639528777274873401a97d23c1b23ecc08d4667cccc2389e48f64bf581a55ff3b639f3194ba8e30cdea9d1cb6d2165c9d2aed65370d70f6c8b7237e0930a8a7c30375dddb08c792e31b7385e202c70e1ed66382dde36ec147a2f0c85e819b863076a61dd57760a8ec79bbfeac627ae67cde901cc1f8527cc7f24f5339d673c63b1c48a62c97a5600bcb131abcf83e620abbd8cecd09f1befdc19b53739362a94aec1374374b1f4d7111139b48062b1f1774e6217f003b30f3dd5bdd4ab11a15d5f45f30d94bd868faf3d14f89b55baa901d1ddbaa71854c7fb01b9c4207d0067682e3b52de90d5e6b43e6364aa1008bdca85b2d9ba2eefa672af6dd0ede9c8cd5a1001f5b8a96aec418bc8d886dbc1339d1a562017e01977ac9e489746213e76a8faba8b1a6221b96ef231b2ca09528bb906e73989d8a25718f644e4d3d80c9cdeb100dcd0ccd1b798dea518388c6387355038238687b70daffe75f4b5082a55d650a9dd56c085e4c1682c3963eaf654b308100db39ccb5d463e26e5dde3c4694d93adddda10109518e328f08c06ca557e14fdc7e408d64981044e6aa8c315053a9cb386caf900b8ec111a16f5755f4b7d10aceeb31e09c3d1827d2d7dc874d2faca6e00e37121746af130709a585e8cd904d5f86f1f1d4071c7f1141d40e74b36af82a68cee3247264c66bb451a4ff2c824e67a3f17e073db720e236c9b93a057725ac4cb28cf2e179c58fb642cdf0374f64c757880a309633d4f32765dd64008d0a381bf1cae754f56495cf6ca622b3abfc880fa2fb25c987482e5df91dac0769a9c67119357a99ad959d44f2b03fbc6547a83c4ca0a41319922a6dc64d0c71d5dc8aa970dbbb9b72c2237a6f3d533293ccd75a08e5eceda0d5daedfc2ddad8ea6225bb597a9aa061709930643ad961724e61eb5e97c9c0850c4bcfa1682fb8ddcf1ae545e360700b9626e9719a4026c73ca91bdb60e7ae7f9960230add866b6deed0465beacd15f916d44542b3042bbfb978e860b3da0985f24cdd8d6bb105063679e72c61fdaf2a272c19703609308c29c5246a7dd0f61db83a0f170aefdb300685a2c34eff18415278e861e8c0beeba894bc77f380d04d571030d05893f486803e033ff1052467836eb873006d811e58b4a9a14e4aa77091a69daf632cb5a7512a610d015679afcd92cf6e74fa546297457960139c95907a947be17f85e0cc849332c2fb74bccf971a8829d976ee2747edf8ab0846858ffc36859e56a7d2de3c8e7d8c148cdc00bc027b7314d97b375e0ac3458eec1a04afcdd6c12df8b481701b7ea86a1147aad68fc485e9eb84cc6ff78350c6be60675ad1877c26e7b5315502051439ad0e31433faed26028c6ec7eba1a1311bf30f85764a2818957ed569d9719e96a05684c150b1d4a32c3a254e2a4ba6490fa0de410d1b84ad099a2fbb49664c465fca207cf1791550bc2b0d60ef1c7836f7c0740242a457fbf086d65cbb6dbce8f4a3fe34450b5c6c9262441d6073ff51408119388c532b6f7b3c88948b1739cc5c0af6dec4608329e8fbef40f052bef043f1d9a82045c78a87a717a0ed407f652f5165b1030d749d1a6c54583ec2b3cf381a891c2be70558dea03f85f53efb3826d4bea25cba33bb11a53df563c2168b1de14243f19fb992f1c43250ddf23f8b01899afa1f4c086f0ea6dfc39bc582f4c7d2ae9c5344611925bc1614719785f1c6221229ad540c4cf597b8208bf1afb01175de40c212bccbd490329122a1384adb220b19197d8dd5afada3bc878e5b1a33a8a6487d4bc8569eba1617fc7fa9dd510f5a41b0a53529af750df94d071d5bc147c4b77e2126eeb67209fb6455da25075752e14797d0883dac826deb4278fa898c0323011ee2177de3c5abbbd3391f2b33238cf924578b0283ff24e7d1be16dcbee6797eb5d031279cfb579a1c86ade2c7070137a66454957662a1ebb5bfb8723326d7b51013fddd63d5583972c1c3227f93bf07b3180c31f085cacf8f53dfe29eddd80b37b065866b1b4f9c74932cf2b7dd1b70e887093737eda7a873f379545b904441dd6300cd1a6e29f6c7f4394094cc1f45d5e2f987073094f3fb480a591f22d591063977c9237a800864b2f87dd2819e687a440a628806133d57f9270c7b6d07f685906d61f8c5a4747215fd2fad560e45c5a9660feb80168f328c14c35885075a2767a3a4038b5e1a9f4ab82ba45bf7b16b48297a2539f59c0686f61817dcc82b6fb0660612165bdf89d819500d4e53d5d5c10e51a231f0f6621c48c00a7430a87ed16126323f488a34181ee1fc3ad7f294068c5d34fcea7313537e6e56c94aa58ea154db6bd31d0ea89db35b71676ce2117da55f218035cb39c301443cb7201332229349b98411e1085cafead97ca2388f60996076ac0ba25a64d61ecc60fd6137720eb04fd8dbe727d923caba0d9451b57b7e6d2173adecaa972d54c9b0f8074b2ec099c68c26d3ef346fde17c17e8fc4c14b1c0618de431fefd0d9c015723e220d35ce95d8e3057ce3fbb0a7758c53fef59e1341bb6069f667dcd0dd4aa953a6dece2325fff1ad14235237d581325b67735d3b5c24174fca505b2d0ae41e0a6e361cb9adb65c97d45061182430f646b9445f13a9cf9eea3ba40cc1f656cb9e9d2c60c868b92e70a03f6d571a4c25d5dda781d6342c8d4fa88fd965a6b4b8f91982bdff672f613f4d395ad5c03711e17617df015dd9be5f86a327405e95698ac429fa8825cc3c080458ef3568c9b0446bbe251748dd6ce2a01f386dd052fa5808c187355bcd47282807479e25cd97a3c58c088512f0c490a6e04b56f192c2a565b358e1427aac1fae6dbaace888b8ab1f575fb01f905cb526cf170dbcefccb5402a48b73756b453d64be287b6dc855bc52b456dbc3c8157f9f6385641ebb769b7ffc2b9826ab1285e30a7719cfd8f7f369f65d653b9f3edf51f7d715aab133895de3d80b6dd2c7b02c3ce2eafa94d994e7899a5bfc0f4b490fc5ddc852b267cd626a558d94d4311ff38d4b917059b9047043b4b497e4961fcb502c5dc22a64d3d804c846292472d9960ba7ec19d66244242fde3395ccc67c6445271b289638091dc1d") ioctl$KVM_RUN(r1, 0xae80, 0x0) lsetxattr$security_capability(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), &(0x7f0000001240)=@v1={0x1000000, [{0x2827, 0x6}]}, 0xc, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001300)={'ip_vti0\x00', &(0x7f0000001280)={'gretap0\x00', 0x0, 0x7800, 0x700, 0xfffffff7, 0x10, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x66, 0x0, 0x10, 0x29, 0x0, @private=0xa010101, @empty, {[@rr={0x7, 0x1b, 0x16, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @remote, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x17}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001340)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x9, 0x5, 0x3, 0x100, 0x8, 0x1530000, r3}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) sched_setattr(r2, &(0x7f00000013c0)={0x38, 0x0, 0x71, 0x80000000, 0xe33, 0xb, 0x2, 0x8001, 0x425fb205, 0xffffedb6}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000001400), &(0x7f0000001440)={'fscrypt:', @desc2}, &(0x7f0000001480)={0x0, "1cc44e17908510569a995327e839fd1c9338469f80493ed2e51bc0144d07a9f3cbe9f6a11312854a438a4384b6301d9e10e68baa6b2117fe4a8f7c7f57034ad6", 0x1b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xd5) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001500)=@assoc_value={0x0}, &(0x7f0000001540)=0x8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001580)='mountstats\x00') r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x181000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001600)={{r7}, "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"}) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) recvmmsg(r1, &(0x7f0000002f00)=[{{&(0x7f0000002640)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000026c0)=""/80, 0x50}, {&(0x7f0000002740)=""/134, 0x86}, {&(0x7f0000002800)=""/85, 0x55}, {&(0x7f0000002880)=""/57, 0x39}], 0x4}, 0xfffffe26}, {{&(0x7f0000002900)=@generic, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002980)=""/87, 0x57}, {&(0x7f0000002a00)=""/70, 0x46}, {&(0x7f0000002a80)=""/158, 0x9e}, {&(0x7f0000002b40)=""/95, 0x5f}, {&(0x7f0000002bc0)=""/21, 0x15}], 0x5, &(0x7f0000002c80)=""/32, 0x20}, 0xf70}, {{&(0x7f0000002cc0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d40)=""/242, 0xf2}, {&(0x7f0000002e40)=""/8, 0x8}], 0x2, &(0x7f0000002ec0)=""/50, 0x32}, 0x1}], 0x3, 0x40000120, &(0x7f0000002fc0)={0x0, 0x3938700}) r9 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003000)={'wlan0\x00'}) ioctl$KVM_RUN(r1, 0xae80, 0x0) write$ppp(r7, &(0x7f0000003040)="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", 0x1000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r6, 0xc01064c1, &(0x7f0000004040)={0x0, 0x1, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000004080)={"37fef857eab395769bfefd5a10add01eacd6a0ca0fe89b5e4c31e553597be0b2", r10}) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000040c0)={r5, 0x3}, 0x8) sendmsg$inet(r7, &(0x7f0000004280)={&(0x7f0000004100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000004240)=[{&(0x7f0000004140)="b23acd200a6b134c792671f3f2b2b57c9cbc75b0483a523393bcc915e4c5ceb07bcc891392707df05cb862895f51a4255a7c8c0577b6a4c75026eed06447c9ada1e7693f1cdac778553ce77fa63b918b796a2eb535932a31cdd06f6863eb3f24df4b750554c4cc805ecd6e11ad4868460da62b8a9f2bb18c8c08352c14059773c3b0960385b3200ad26c473b740a6d44a6c34ca4d9f2d15074f001779c5600da2ef92fa143da1f129023318dd77f2a404322962192667c46a6997bad071680f490beeecc49e80ca48c037220ee35620548557b5f625263618d76089b7b3b7b", 0xdf}], 0x1}, 0x4014) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000004380)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004340)={&(0x7f0000004300)={0x40, 0x1411, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x3d75329ac5d20d55}, 0x1) connect$vsock_stream(r6, &(0x7f00000043c0)={0x28, 0x0, 0x0, @hyper}, 0x10) write(r8, &(0x7f0000004400)="aaad338a25d61e119266d5d0c632c32aae3c45a6bff6cfc3fe0579e6038c3f656e609fdb8455681640eae87d3146f16e341106e2285c841147c8381f4920f5da366a3b75aee4d2c03b8d54f80b25345b5c320911d6fe5061bc9d23d8b928111b6d417cffb1adea88a068c6b5963328df3aa856b561f43d1d0e1be6ac78021e299d5601ea326b42bad27f9d6afcaac24d5153c5636e3fee4e4d363a2080150aff6f7ef11da1cf4ec8bc39c8fa393b6295be4d8bc7bd8024222eca124fa0badeca854f90576e3f856d970d93fec916c795b61993c713b682c3051dc1069806d6f4b169dadecfed1863c941a5", 0xeb) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000045c0)=@req={0x28, &(0x7f0000004580)={'bond0\x00', @ifru_data=&(0x7f0000004540)="264b40061dd313ed5064ed4f744e79e67c0c58be3d95dcf27b39ea279d946e6e"}}) 4m25.800267134s ago: executing program 1 (id=469): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xbc, 0x1000000}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4m25.044112403s ago: executing program 1 (id=472): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x82d, 0x80000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14044010}, 0x8810) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) setpriority(0x2, 0x0, 0x6) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x8006, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x40, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x5, 0x8}, {0x8, 0x3}, {0xb, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 4m24.708484969s ago: executing program 3 (id=474): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000a40)=""/87) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000c40)={0x20, r4, 0x0}) keyctl$session_to_parent(0x12) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x13, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r7, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x3}) prctl$PR_SCHED_CORE(0x4d, 0x40003, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000790000000000000000e50000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, 0xffffffffffffffff, 0x32, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xcfe}}, 0x30) 4m22.312174875s ago: executing program 3 (id=479): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000980)={'veth1_to_bridge\x00', &(0x7f0000000940)=@ethtool_rxfh_indir={0x39, 0x3, [0xffffff6e, 0x2, 0x81]}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x8, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x10e, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffd, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffd, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x2]}, 0x45c) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x62}, 0x20000050) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x2, 0x9}) listen(r7, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f00000000c0)={0x80002011}) shutdown(r7, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000100)={0x30, r11, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 4m21.75914895s ago: executing program 4 (id=483): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e0001f0ffffffffffffff0007000000", @ANYRES32, @ANYBLOB="000000000a0002000000000000000000080009"], 0x30}}, 0x0) 4m21.317345996s ago: executing program 0 (id=486): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x40}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340), 0x14) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "668f4918bdecc7bf", "a590d6cbe29665fffe6115bb3dbf924c", "c8beb772", "c8f6140f4d4f5b4c"}, 0x28) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000010140), 0x48c02, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000010440)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 4m20.882875675s ago: executing program 1 (id=487): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x7, 0xf5f0) syz_emit_ethernet(0x59, &(0x7f00000023c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000108004500004b00000000fd069078ac1414bb6019bbe70432f5ae", @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="84c2000090780000080a000000060000000500007d1db7d620a37cdea10300ca228a8b6754416b51481257"], 0x0) syz_emit_ethernet(0x72, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x3c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@hopopts={0x33, 0x4, '\x00', [@calipso={0x7, 0x8}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x18df]}}, @ra={0x5, 0x2, 0x4}]}], {{0x0, 0x0, r2, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) read(r1, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000280), 0x2) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xb0, 0xff, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x7, 0xaf}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xea, 0x0, 0x2}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x55, 0x5, 0x9, 0x8, 0x6}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0x81, 0x3, 0x7f, 0xf0f, 0x97af, [0xc0, 0xc000, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2bd9b5cf7fa6552ae585cf68e925e814"}]}, 0x1, [{0x9b, &(0x7f00000000c0)=@string={0x9b, 0x3, "78d9df3d5819c0141b6d80a5afc7f0354ad5bf529a9d45877042b24ddfc0c1cffc9db3b99bffb0a157176751533aa61f9ae640a6a2aa466b1c8732e238c9a4cee825b4614730b82ee251b424f75b81b3a30fbb0084ada82c4abf93ae98ac95a263a5a4113a5485dd51ca9c7e654dfa695d4d648c70b3eef5fb68aabac000ef51412be96aa23ba9a6ef22ea6005178bb1135ffa6ef0cfd0c71b"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0xb, 0x74, {0x74, 0x0, "f5ab7bd91b2847b5c7c756db3d25cfb7c643290aacd2f653e643699a9e60816ea555730b2a4e7832cd76d4902b4a924368c500b62a933409cef591933162b4d5b1aa1bd5159df637b4a197829f112ceffe049fc5316a9ab3591d6da3ddb8e2a07c4e642be003e1477be88070de4d3b7ded00"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0x5, 0x6, "ae8d8530dd8b"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x81, {0x7f, "7cc6a9db78ea8797b547e7afc22dd4d647754857c32557ba99c5f0c9d328954f1da7c1fdc56b771e0b482ba6f31521ba9879aea4385d87e352a430456be1b41e63dc4f0451f03fc08eb2fb7cecdce95d2e0b93c3cf176a4d2e2115e9eca4d8d47838a01b95d3aa93222ac30da3b6fcd4bd40839e1517ffdb310ac4fc7ea9a9"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xc0}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0xf7}}) 4m19.648186773s ago: executing program 4 (id=488): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newroute={0x44, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PREF={0x5, 0x14, 0x2d}]}, 0x44}, 0x1, 0x2}, 0x10) r1 = socket$kcm(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000004, 0x13, 0xffffffffffffffff, 0x10000000) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}], [{@euid_gt}, {@subj_user={'subj_user', 0x3d, '{[.\\('}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000200)="c5a7d6c4b34b549f4e3436bb75f487dd3f78a2") r6 = syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x500c2, &(0x7f0000000540)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@allow_other}], [{@uid_gt}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@hash}, {@audit}, {@flag='async'}, {@subj_role={'subj_role', 0x3d, '\x10,[@\'@.,,.-%\\[&'}}]}}, 0x1, 0x0, &(0x7f0000000440)="efc935a64cf599f87ae5f1abcaca54b52f24443ed0604c068ae328a041379c4f7bd4673b44eb7e1184cef73e7ecb228b130923452c21ca926ced641c4ffc7f42c8bebbb0b5ef02f5e6eec56ebce85ceb5dc14de786d9180b5e353cc92bdf6aa15809abf7db16cf447180f5327844b6450b") syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x12, 0x0, r6, &(0x7f0000000240), &(0x7f0000000340)='./file0\x00', 0x2, 0x800, 0x1}) 4m19.530753022s ago: executing program 3 (id=489): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000980)={'veth1_to_bridge\x00', &(0x7f0000000940)=@ethtool_rxfh_indir={0x39, 0x3, [0xffffff6e, 0x2, 0x81]}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x8, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x10e, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffd, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffd, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x2]}, 0x45c) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x62}, 0x20000050) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x0, 0x8, 0x6, 0x2}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f00000000c0)={0x80002011}) shutdown(r7, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000100)={0x30, r11, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 4m19.175111742s ago: executing program 4 (id=490): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe40, 0x0, &(0x7f00000006c0)="ffffffff106c3ed990f77e9eb3cf", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="f40f20e035000010000f22e0b9b3090000b812e50000ba000000000f3064362e0f22070f2339e067c7442400f5ffffffc744240200800000c7442406000000000f011c243e660f388118b8c3399484ef66bafc0cb03e3e0f666e000f0f40001d64d0d1", 0x5d}], 0x1, 0x0, 0x0, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 4m18.982286162s ago: executing program 0 (id=492): syz_emit_ethernet(0x7c, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x46, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x700, [0xfffb]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 4m18.687906947s ago: executing program 0 (id=493): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) close(r0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x1, 0x1}, {0x2, 0x1}}], 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) (async) close(r0) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x1, 0x1}, {0x2, 0x1}}], 0x8) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) (async) 4m18.323555025s ago: executing program 4 (id=495): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000002100", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m18.231953208s ago: executing program 0 (id=496): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0xc800) keyctl$update(0x2, 0x0, &(0x7f0000000300)="31a7", 0x2) add_key$user(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x60100, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c81, 0x9) r2 = dup(r0) unshare(0x2010000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e23, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x24) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, 0x0) listen(r4, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000000c0)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r10, 0xc0045009, &(0x7f0000000280)=0x4) r11 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) syz_usb_connect(0x4, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r9, @ANYRES32=r3, @ANYRES32=r9, @ANYRES8=0x0, @ANYRES32=r6, @ANYRES8=r3, @ANYRES8=r11, @ANYRES8=r1, @ANYRESHEX=r0], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 4m18.000048405s ago: executing program 2 (id=497): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce19", 0x59}, {&(0x7f0000000800)="104b0b7073fbd7f77a846bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c", 0x6a}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d9", 0xc9}, {&(0x7f0000000340)="195ca1e84c12829160283de4f634ba203fee4d872e86c3dd408dbae7edffb39f301f8a933a640bd2581f26fde59de5869a945b960d6d87a4706b64ec96592d5ea5e105bd583c18cd854dc50ce949f490816d2288b71f1384d3db8dd0c7a17cd6a21e8bb8da0e70d1def896758b6e0ec3cd1b9e78a6fac968a75f559657b3ad63d17d13c5f1a162443df8cf3f630949cfcbc2f54adbc26f6f", 0x98}], 0x4}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)="33ca667d023e", 0x6}, {&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468ef760112d01b4046540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d933167102a2", 0x71}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="97ee3b3f46983bb5afd79fe0b01666b2e1daf0709becb91257e88f024ddf07e66c8c7e6258b63b2b9a7cfe015be3d6f9805eea42c6ca6c3cee479f419d63066c0913def93694cf34e6cd93de6cfc6485ecb798231941cd45eba3ba6c232631d78832a9f7fb1b51c81ff248af73dd239f0dd900a024a118b51d0bb4049198388f722aeba7e1f972ef22746c7f62090334575b91bdde999b63e4d36fc9414a4e29ae87f6486d32e9b5046aa05fc23afb5a8a2e6f79346107249edc7d8fe6841b11b2a89d6b25a5db85151ac9048918dbcee8217db4d82ef34b59e60b005adf5e8f5a37823a20a64baf25", 0xe9}, {&(0x7f0000000200)="066bb3d3b0b8b5d4577115b4ad68b3b7447796b717b00cba3b8c82501372953c238c4a37c0f717764be024ab7165a0247ba060e50777c0b41420a065cbd33c8e748d5deaf3bd", 0x46}, {&(0x7f0000000940)="c0e25e28e2affcddead2a5f7f2e0da0d076f7adefcde2176a074b72a1d08b01afd61054f933b223a57a5ad1c97acffa70b864aeea61a758c179beb9a7e795a5fdd01932e24d0429cb1faa7f6b2cd5fe5b02a1ef34dfe1d63d8cb31f17a6d4b09e79ce01943e2f3ea11130bb7894bb14a717dfc0e6598bdef68b786573e8bc4b8cfb513d03ac4b5c9d97472012adb4dd145087c2fe926d47e843d1f0fba3dc8d911f39d9e8cb4fbadf88bec39e4b1ee3df626d32972efa33ec619099c07c0a412e3e84502ba402a97958dbc2923c56282ec1a80c1e82fb78c612fb629e8da610f68c34d53f1", 0xe5}], 0x3}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m17.412660658s ago: executing program 4 (id=498): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0x1, 0x3ad2, 0xd, 0x401}, 0x44, [0x7fff, 0x7, 0x0, 0x5, 0x2, 0x2, 0x5, 0x101, 0x40, 0x1, 0x1, 0x4, 0xa9e, 0xe, 0x7, 0x8, 0xd800000, 0x3, 0x7fffffff, 0x0, 0xae, 0x401, 0x2, 0x8, 0x4, 0xc, 0x100, 0xfffffff8, 0x1, 0x4, 0x40, 0x8, 0x2, 0x1, 0x5, 0x5, 0x0, 0x3, 0x7b, 0xfff, 0x5, 0x8, 0x7ff, 0x2, 0x8, 0x1000, 0x1, 0x3, 0xfffffff8, 0x7fff, 0x9, 0x2, 0x8, 0x3, 0x8, 0x14000000, 0x2, 0x2, 0x3, 0xb9, 0x80000000, 0xf2a3, 0x55c5, 0x8], [0x639a, 0x8, 0x1, 0x2, 0x2, 0xd, 0x3, 0x3ff, 0x2, 0x40, 0x9, 0x7, 0x0, 0x3, 0x1, 0x2, 0x100, 0x4, 0xea, 0x585, 0x401, 0x5, 0x7ff, 0x6, 0x2, 0x8, 0x5, 0x2, 0x9, 0x6, 0xe9, 0x9, 0x63e9, 0x30, 0x2, 0xb7e9, 0x9, 0xee2b, 0x200, 0x0, 0x1, 0x9, 0x7f, 0x5, 0x84, 0x3, 0xfffffff9, 0x4, 0x10001, 0xec4, 0x10000, 0x0, 0x6, 0x401, 0x62fc, 0xf, 0x0, 0xb, 0x8001, 0x7, 0x2, 0x5, 0x3, 0x9], [0x9, 0x8, 0x0, 0x65, 0x72, 0xffff07ef, 0x7f, 0x8, 0x7fffffff, 0x3, 0x3, 0x8, 0xfff, 0xe, 0x8f3b, 0x7, 0x1261, 0x7ff, 0x7b, 0x3, 0x73e02ca9, 0x5, 0x6, 0x5, 0x8, 0x0, 0x8, 0x3, 0x3, 0x0, 0x958, 0xa000000, 0x4, 0xf1, 0x67bd, 0x80, 0x4, 0x3, 0x3, 0x100, 0x48, 0x52, 0x9, 0x9, 0xe, 0xc, 0x1, 0x4, 0xd691, 0x1ff, 0x5, 0xfffffff8, 0x2f82ec71, 0x6, 0x0, 0x8000, 0x8f, 0xff, 0x7, 0xbe8, 0x379, 0x40], [0x6, 0x7ff, 0xd8, 0x8, 0x9, 0x808, 0x3, 0x8, 0x8969, 0x2, 0x5, 0x87, 0x8001, 0x9, 0x2, 0x4, 0x3ff, 0x6, 0xe, 0x2, 0x0, 0x7fff, 0x3, 0x0, 0x7, 0x8, 0x8, 0x4, 0xff, 0xffff, 0x142, 0x1a1, 0x7, 0xf0dc, 0x7ff, 0x31d, 0xffffff80, 0x7fffffff, 0x7, 0x8, 0xd, 0x5, 0x0, 0x40a, 0x8, 0x2890, 0xff, 0x7, 0x36c1cf1c, 0x6, 0xcc6c, 0x8000, 0x1ff, 0xffffffff, 0x8, 0x3, 0x3, 0x3, 0x0, 0x86d, 0x80000000, 0x4, 0xb, 0xd42]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x100}, 0x4d, [0x1100, 0x902, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0xffffffff, 0x82, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89c, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4], [0xffffffff, 0x7, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7c6b, 0x3, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x800000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0xffffffff, 0x2, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x7, 0x0, 0x2, 0x3, 0x0, 0xfffffffd], [0x81, 0x100, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x10000, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa528, 0x0, 0x0, 0x0, 0x2, 0x8000, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1ff]}, 0x45c) 4m15.503311399s ago: executing program 2 (id=499): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000980)={'veth1_to_bridge\x00', &(0x7f0000000940)=@ethtool_rxfh_indir={0x39, 0x3, [0xffffff6e, 0x2, 0x81]}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x8, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x10e, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x3, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xfffd, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffd, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x2]}, 0x45c) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x62}, 0x20000050) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r8, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x2, 0x9}) listen(r7, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f00000000c0)={0x80002011}) shutdown(r7, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r6, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000100)={0x30, r11, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 4m13.891253359s ago: executing program 4 (id=500): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x460000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) shmctl$SHM_LOCK(0x0, 0xb) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x3, 0xdb, '\x00', 0xc0b5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_create_resource$binfmt(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000, 0x500000000000000}) 4m13.808049463s ago: executing program 1 (id=501): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x7, r4, 0x2}) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r9, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4m13.390911425s ago: executing program 2 (id=502): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x600000000000000) 4m13.244465661s ago: executing program 0 (id=503): r0 = syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) r2 = semget$private(0x0, 0x4, 0x20) semop(r2, &(0x7f00000022c0)=[{0x3, 0x1, 0x1000}], 0x1) semctl$SETVAL(r2, 0x3, 0x10, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffa}) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r3, &(0x7f0000000100)={0x78}, 0xfeb1) write$UHID_INPUT(r3, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 4m13.035833028s ago: executing program 3 (id=504): r0 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101600, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00') r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0xe, 0xc18, 0x5932}}}}}}, 0x0) 4m12.852773988s ago: executing program 2 (id=505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0xffffffff}}, 0xa4}}, 0x4) 4m12.639546825s ago: executing program 3 (id=506): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x1, 0x71, 0x200000004}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "88634d58"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) removexattr(0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r5, 0x0, 0x0) (async) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000210a010100a537860f47a0"], 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x40804) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0xf8c0, 0x2, 0x2, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x39, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x7, 0x2}, {0x2, 0x12, "4107220ce208a140432b078b444114c1"}, {0x1, 0x2}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) 4m12.400345117s ago: executing program 2 (id=507): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="a905000000007464000100000000020000e5c0", 0x13}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24004044) 4m11.729520771s ago: executing program 0 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000340)={0xffff, 0x2, 'client1\x00', 0x1, "160d8e619074a3ed", "7d9cbb14c25c5f3b39b1a18aee6baaf00fdc8525dc4eff0ead43c33530ee759e", 0x2, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0xb, @raw_data="4355303869080408cd249ec7efb301198680b5be6e23aeee037757247f8e7cf0314d80d8580d64e14364154a0a387d927cd57e123ba1efbe01652a5f640684fa5e893e897ccc3074465e163176e53cd24bf2af34498cc63505008850dd4c66c27b1a79895f7fd2f1e0808bce73abcfc38c2403597d41733d28f53f05bb06b0d4f2abb107a766aeb4184284d3088a97541741bb90239de08950c97b7a438137b639689d695fd868a1a509524b4a3a3d3e5afbd859c1ec4e282a50c8b1a2d85bdb653a9ce0918200"}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x1}) socket$alg(0x26, 0x5, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x80800) getrlimit(0xd, &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4099, 0x1003, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r7, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0], 0x240) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r9, 0x4b4c, &(0x7f0000000080)) 4m11.415165123s ago: executing program 3 (id=509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x4d, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1}, 0x1000000}], 0x1, 0x4004804) 4m11.119029936s ago: executing program 2 (id=510): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x2b8, 0x2b8, 0x130, 0x2b8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'bridge0\x00', {}, {0xc10c421ca43f3e7e}, 0x88, 0x3, 0xb3}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x29}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0x1e01, 0xffffff00, 0xff, 'wg2\x00', 'macvlan0\x00', {}, {}, 0xff, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x0, 'veth0_to_bond\x00', 'gre0\x00', {}, {}, 0x89, 0x1, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x44}, 0xffffff00, 0xffffff00, 'batadv0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2f, 0x7, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 3m56.303705933s ago: executing program 32 (id=501): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x7, r4, 0x2}) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r9, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3m56.189062399s ago: executing program 33 (id=500): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x460000, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) shmctl$SHM_LOCK(0x0, 0xb) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x3, 0xdb, '\x00', 0xc0b5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_create_resource$binfmt(0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000, 0x500000000000000}) 3m55.923148949s ago: executing program 34 (id=508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x2, 0x1, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000340)={0xffff, 0x2, 'client1\x00', 0x1, "160d8e619074a3ed", "7d9cbb14c25c5f3b39b1a18aee6baaf00fdc8525dc4eff0ead43c33530ee759e", 0x2, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r4, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0xb, @raw_data="4355303869080408cd249ec7efb301198680b5be6e23aeee037757247f8e7cf0314d80d8580d64e14364154a0a387d927cd57e123ba1efbe01652a5f640684fa5e893e897ccc3074465e163176e53cd24bf2af34498cc63505008850dd4c66c27b1a79895f7fd2f1e0808bce73abcfc38c2403597d41733d28f53f05bb06b0d4f2abb107a766aeb4184284d3088a97541741bb90239de08950c97b7a438137b639689d695fd868a1a509524b4a3a3d3e5afbd859c1ec4e282a50c8b1a2d85bdb653a9ce0918200"}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x1}) socket$alg(0x26, 0x5, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x80800) getrlimit(0xd, &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4099, 0x1003, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r7, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=0x0], 0x240) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r9, 0x4b4c, &(0x7f0000000080)) 3m55.694717689s ago: executing program 35 (id=510): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x1c8, 0x2b8, 0x2b8, 0x130, 0x2b8, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0xffffffff, 0xffffffff, 'bond_slave_0\x00', 'bridge0\x00', {}, {0xc10c421ca43f3e7e}, 0x88, 0x3, 0xb3}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x29}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0x1e01, 0xffffff00, 0xff, 'wg2\x00', 'macvlan0\x00', {}, {}, 0xff, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x0, 'veth0_to_bond\x00', 'gre0\x00', {}, {}, 0x89, 0x1, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x44}, 0xffffff00, 0xffffff00, 'batadv0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2f, 0x7, 0x2}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 3m55.381394248s ago: executing program 36 (id=509): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x4d, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)='$', 0x1}], 0x1}, 0x1000000}], 0x1, 0x4004804) 50.914448908s ago: executing program 9 (id=1056): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x6a855000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrusage(0xffffffffffffffff, 0x0) 50.550447804s ago: executing program 7 (id=1057): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4\x8c\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9a8}\xf8\xf9\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14MD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5Q\x10v)\xcc\x1c{\xdb\x86\xa4\xd9\x7f\x06\xc1\xad\x81\xafpY\x92\xc8\xc9\xf4\xe9\xab\xa9S\xcc\x89\x85\xc0\xd2\x91tw\xea\xdb\x11\xa3\xd3\xd6\xb5~\xa7\xf1\n\xae\xb6\x92r\xad&{\x95\xf0#\xe1\xda', 0x4) syz_usb_connect(0x5, 0xd5, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xd6, 0xbf, 0x35, 0x10, 0x4e8, 0x689a, 0x8804, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x1, 0x0, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0xfa, 0x1, 0x5, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x2, 0x10, 0x8, 0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xf, 0x3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7688}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0xf, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}, @generic={0x68, 0x30, "882c60b10c291f241f4f2966bf592b165fe1579d6bdcdb77fd6a8f6131b027f5337c7249910f87a03fb8f04244c43682119c9a296a0e425d08414af97d5b312c2ea510d91ee3e86001f2c00f43951bff0c0d55667fa6fa19e0e3a7e77d4c7453957b14d39f47"}]}}, {{0x9, 0x5, 0xd, 0x18, 0x400, 0x2, 0xe, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc4, 0x29a4}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x7, 0x3, 0x81}}]}}]}}]}}, 0x0) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x100000000, 0x1000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="300000001c00c92429bd70000000020007000000", @ANYRES32=r5, @ANYBLOB="80008f0b0a000200aaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) unshare(0x2c020400) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, &(0x7f00000009c0)={0xffffffffffffff9b, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}, 0x0, 0x0, 0x0}, 0x0) 50.144701598s ago: executing program 6 (id=1058): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) lseek(r0, 0xd2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x14) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x3) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000280)={r7, 0x2, 0x2, r7}) close_range(r4, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) 49.896060917s ago: executing program 5 (id=1060): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) fsopen(0x0, 0x0) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0xfe]}}], 0xffc8) 49.609075022s ago: executing program 9 (id=1062): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1f00000003000000b8"]) 49.488225073s ago: executing program 8 (id=1063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r2, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0xb, @raw_data="4355303869080408cd249ec7efb301198680b5be6e23aeee037757247f8e7cf0314d80d8580d64e14364154a0a387d927cd57e123ba1efbe01652a5f640684fa5e893e897ccc3074465e163176e53cd24bf2af34498cc63505008850dd4c66c27b1a79895f7fd2f1e0808bce73abcfc38c2403597d41733d28f53f05bb06b0d4f2abb107a766aeb4184284d3088a97541741bb90239de08950c97b7a438137b639689d695fd868a1a509524b4a3a3d3e5afbd859c1ec4e282a50c8b1a2d85bdb653a9ce0918200"}) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x81, 0x0, 0x1}) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80, 0x80800) getrlimit(0xd, &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f0000000600)=""/4099, 0x1003, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f0000001640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x240) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1000905"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r6, 0x4b4c, &(0x7f0000000080)) 49.488018105s ago: executing program 5 (id=1064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3, {}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x1f000000, 0x4012}, 0x90) 49.259401637s ago: executing program 9 (id=1065): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000001340)}) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) epoll_create1(0x80000) (async) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x2, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="a0c5021f3bb0029844d377f2"]}]}]}, 0x2c}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = dup(r6) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000002c0)=0xc) semget$private(0x0, 0x1, 0x402) (async) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000001300)={&(0x7f0000000300)="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", 0x1000}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000000)={0x0, r4, 0x1}) ftruncate(r9, 0x3) (async) r10 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000000080), 0x400000000000207, 0x0) 48.355463298s ago: executing program 5 (id=1066): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x20000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) 47.376052042s ago: executing program 7 (id=1067): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/reserved_size', 0x149a82, 0x0) write$cgroup_pressure(r0, &(0x7f00000018c0)={'some', 0x20, 0x15d, 0x20, 0xc}, 0x2f) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'veth0_vlan\x00', &(0x7f0000000680)=@ethtool_per_queue_op={0x4b, 0xe, [0x8, 0x401, 0x8000, 0x80010001, 0x7, 0x5, 0x9, 0x3, 0x8, 0xffffff78, 0x6, 0x3, 0x6, 0x800, 0x800, 0x2, 0xb, 0x13b038a0, 0x10000, 0x51, 0x3ff, 0x5, 0x14, 0x81, 0xc, 0xfffffff8, 0x6, 0x79c1, 0x1, 0xa, 0x8, 0x3, 0x401, 0x100, 0x5, 0x0, 0x2, 0x74, 0x0, 0xfffffffd, 0x100, 0x2, 0x431d, 0x7, 0xffffff81, 0x0, 0x7, 0x7, 0x26, 0x7, 0x8000, 0x9, 0x0, 0x80000000, 0x285, 0x0, 0x4, 0x8, 0x3ff, 0x7, 0x9447, 0x3, 0x2, 0x5, 0xfffffff9, 0x7df4, 0x10, 0x7fff, 0x6, 0x53, 0x8, 0x6, 0xffff, 0x6f72, 0xffff8001, 0x5, 0x4, 0xfffffff0, 0x7fffffff, 0x0, 0x7, 0x401, 0x6, 0x0, 0x7fffffff, 0xf, 0x5, 0xfffffffa, 0x5, 0xed, 0x1, 0x5, 0x9, 0x6b8, 0x6, 0x10, 0x1, 0x7, 0xfffffff8, 0x584d, 0x0, 0x7, 0xf77c, 0x4, 0xd809, 0x5, 0x7, 0x743, 0x3, 0x8, 0x9, 0x4, 0x8001, 0x14c44f91, 0x8, 0x3, 0x5, 0x200, 0x2, 0x1, 0x3, 0xfffffffb, 0xfffffff8, 0x80000001, 0x9, 0x1000, 0x8], "23b81e90e3a0714c2f0bc1421a3b8fc42fb64373ed1fa39a95e14f023f3cf7380bfec26473175a7432c750cbd0f56b9b882434c8f5e116af97e974f0fa879ccaf0bb23dc7a89ffab4f437ce5709216b779b2102fcc471e8df5155fc861126cb253640db40322559650c2f10e7332a9de1036d8a37a42ccf93a6af71e4b0d5e7477daafef5d7fcada3b4c477416e30164e195abd08ceb463df6b09fd328faad0dda960a21d15bcf5b90ddd6d80f27008a2b9fd4878951dafed2548724c990ce5f11f69e7af688df2f138eb85d34b81009c25479b0"}}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x10103, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x18d1, 0x503d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x49b}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf4, 0x0, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x5, 0x4}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x9, 0x7f, 0x3, 0x20, 0x1}, 0xe4, &(0x7f0000000080)={0x5, 0xf, 0xe4, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x6, 0xf00f, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0xa59, 0xf000, 0x6, [0xc03f, 0xc030, 0x3f00, 0xff0030, 0xf, 0x3f30]}, @generic={0x87, 0x10, 0x4, "6584d3a3bb64c5f5ea3e1f2bd69be5dd8fdef8ed430bb67e1fb687dbdc540c35d7d0ac8ea93186897bb9d09ff794c8984cd85cfd3d789d43a53d608df79520d24de61d76ef2ed7bff757316e43556edb1818203e1cc98a7717875e18fd95c830f758e45b3bad3e6346e9d11f669659ffed1de7a907991b9115d77b62481da8b4ad7bf3b1"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "3ecd36ab69e34fe83661f5f322a8d322"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "77a8cd23afa50b347720ea243f5765c2"}]}, 0x7, [{0xeb, &(0x7f0000000340)=@string={0xeb, 0x3, "5d979812070f96fde31821487ae8545bbb7ac50e0f4ec865528ea5d81740c20a9c07467f58726aa6a55e1292e0dc0eb51d51921969d8f1c6f9564d25be555b4ea1b34cac0c8be200aa143832c110dae49b40867e0a7b3b85c70773d7ae220e80e86c149de03af4dc4994bd21fd7ba20737f446b04829c40b3b36246b77da71d22b295ad0b4ffc48d9c667890527811fd5efa3c0d6e73698a64194586f75bb30b84f8f3150fb53bed38dbc3cc77a3bb33f7abc24e2944b6a3d5d26750237673190da6ae23cf202686654da25cde0e755021214d2b216396412fa8495fe10d52d108c0ffad352996c546"}}, {0x2b, &(0x7f0000000180)=@string={0x2b, 0x3, "290a69d3ea4ed81565ac1adb5dc44df5e6f2a24af929b880a7984d5d8819543399d8851acefa498f80"}}, {0x18, &(0x7f00000001c0)=@string={0x18, 0x3, "24ff2c65484d2f396c0250809a63b59222daa20d5d4f"}}, {0xc3, &(0x7f0000000440)=@string={0xc3, 0x3, "416d46489097961d4b5fab7a644dc3e335905477e31de086b7a67efaa4888a65f447d5537d0d71b32a3da2b2fc6b8996e229111ddb9ebb059644d6dbb8bc322317d259bdceb1882cf2795cd7fc2af27cebc5259a536e190ce9bd40425dcc31301811ad8ac2581940b155ac69a191421724ee290e30c4168689a769d583f307a37ef8ee59e283ff7e978803e1991ed5d25fd55b5be30af4156aaed53efafc2b1d63ff0391479a3f9c6de541f49b123ed9866f066740b6137c9627779c18c65668b2"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0c}}, {0x40, &(0x7f0000000280)=@string={0x40, 0x3, "e1a7bd70a15a593fa4ae1e154c89fc4ae6469f29ae3168ef9df1cf96e1f52dcf7c763d4125d9ee0dac5eeea7c215871b66e5d5e6a069d0c4aa854583762f"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x416}}]}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 47.255833081s ago: executing program 5 (id=1068): r0 = syz_io_uring_setup(0x12ac, &(0x7f00000002c0)={0x0, 0x7495, 0x0, 0x2, 0x2de}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000200)={0x634b99b9ea925bb5, 0xb9cd8224dab94072}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a000080000000", @ANYRES32=0x0, @ANYRESOCT=r5], 0x24}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x369f40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x1}) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r7, 0xc0585609, &(0x7f0000000300)={0x10001, 0x1, 0x4, 0x70000, 0xfffffff7, {0x0, 0xea60}, {0x5, 0x1, 0x8, 0x10, 0xe, 0x2, "4699ccbf"}, 0x4, 0x4, {}, 0x6}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r8, 0x0) 46.682323486s ago: executing program 6 (id=1069): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0x1, 0x3ad2, 0xd, 0x401}, 0x44, [0x7fff, 0x7, 0x0, 0x5, 0x2, 0x2, 0x5, 0x101, 0x40, 0x1, 0x1, 0x4, 0xa9e, 0xe, 0x7, 0x8, 0xd800000, 0x3, 0x7fffffff, 0x0, 0xae, 0x401, 0x2, 0x8, 0x4, 0xc, 0x100, 0xfffffff8, 0x1, 0x4, 0x40, 0x8, 0x2, 0x1, 0x5, 0x5, 0x0, 0x3, 0x7b, 0xfff, 0x5, 0x8, 0x7ff, 0x2, 0x8, 0x1000, 0x1, 0x3, 0xfffffff8, 0x7fff, 0x9, 0x2, 0x8, 0x3, 0x8, 0x14000000, 0x2, 0x2, 0x3, 0xb9, 0x80000000, 0xf2a3, 0x55c5, 0x8], [0x639a, 0x8, 0x1, 0x2, 0x2, 0xd, 0x3, 0x3ff, 0x2, 0x40, 0x9, 0x7, 0x0, 0x3, 0x1, 0x2, 0x100, 0x4, 0xea, 0x585, 0x401, 0x5, 0x7ff, 0x6, 0x2, 0x8, 0x5, 0x2, 0x9, 0x6, 0xe9, 0x9, 0x63e9, 0x30, 0x2, 0xb7e9, 0x9, 0xee2b, 0x200, 0x0, 0x1, 0x9, 0x7f, 0x5, 0x84, 0x3, 0xfffffff9, 0x4, 0x10001, 0xec4, 0x10000, 0x0, 0x6, 0x401, 0x62fc, 0xf, 0x0, 0xb, 0x8001, 0x7, 0x2, 0x5, 0x3, 0x9], [0x9, 0x8, 0x0, 0x65, 0x72, 0xffff07ef, 0x7f, 0x8, 0x7fffffff, 0x3, 0x3, 0x8, 0xfff, 0xe, 0x8f3b, 0x7, 0x1261, 0x7ff, 0x7b, 0x3, 0x73e02ca9, 0x5, 0x6, 0x5, 0x8, 0x0, 0x8, 0x3, 0x3, 0x0, 0x958, 0xa000000, 0x4, 0xf1, 0x67bd, 0x80, 0x4, 0x3, 0x3, 0x100, 0x48, 0x52, 0x9, 0x9, 0xe, 0xc, 0x1, 0x4, 0xd691, 0x1ff, 0x5, 0xfffffff8, 0x2f82ec71, 0x6, 0x0, 0x8000, 0x8f, 0xff, 0x7, 0xbe8, 0x379, 0x40], [0x6, 0x7ff, 0xd8, 0x8, 0x9, 0x808, 0x3, 0x8, 0x8969, 0x2, 0x5, 0x87, 0x8001, 0x9, 0x2, 0x4, 0x3ff, 0x6, 0xe, 0x2, 0x0, 0x7fff, 0x3, 0x0, 0x7, 0x8, 0x8, 0x4, 0xff, 0xffff, 0x142, 0x1a1, 0x7, 0xf0dc, 0x7ff, 0x31d, 0xffffff80, 0x7fffffff, 0x7, 0x8, 0xd, 0x5, 0x0, 0x40a, 0x8, 0x2890, 0xff, 0x7, 0x36c1cf1c, 0x6, 0xcc6c, 0x8000, 0x1ff, 0xffffffff, 0x8, 0x3, 0x3, 0x3, 0x0, 0x86d, 0x80000000, 0x4, 0xb, 0xd42]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x100}, 0x4d, [0x2000000, 0x902, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0xffffffff, 0x82, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffd, 0x4, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89c, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4], [0xffffffff, 0x7, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7c6b, 0x3, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x800000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0xffffffff, 0x2, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x7, 0x0, 0x2, 0x3, 0x0, 0xfffffffd], [0x81, 0x100, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x10000, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa528, 0x0, 0x0, 0x0, 0x2, 0x8000, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1ff]}, 0x45c) 46.259292609s ago: executing program 6 (id=1070): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff030000007b0000ff0f0000612000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xca, &(0x7f0000000600)=""/202, 0x41000, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x30}, 0x94) 46.257931862s ago: executing program 5 (id=1071): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x83, 0x7, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x340, 0x1a0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [0xff000000], 'tunl0\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x340}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {0x7f}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast1, @empty, [0x0, 0x0, 0xffffffff, 0xff], [0xffffff00, 0xff, 0xff000000, 0xffffff00], 'nicvf0\x00', 'vlan0\x00', {0xff}, {}, 0x11, 0x1, 0x5, 0x42}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2f}, @ipv6=@local, 0x1b, 0x28, 0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) (async) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044080}, 0x0) (async) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000006c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) (async) syz_emit_ethernet(0xbe, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000b000000000fe019078ac1e0001ac1414aa0301907803240000450000000001000000290005ac1414aa640101028677fffeffff000ce256b28c59881681fb520009020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de6a70a05a0dc91e5c6000a6580a5e97612fe86001273bc23f9ffffffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d8606ff"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001a0001000000000000000000fe80000000000000000000000000001eac1414bb00"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000006c0000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x138}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e0000fffff700000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) write$cgroup_int(r5, &(0x7f0000000700)=0x2, 0x12) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000040)) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) (async) sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={0xffffffffffffffff}, 0x13f, 0x293a41b3187dcbde}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000780)={0x14, 0x88, 0xfa00, {r10, 0x10, 0x0, @in6={0xa, 0x4e23, 0xfffffff7, @private2, 0x5}}}, 0x90) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8) (async) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "6e21bdda"}]}}, 0x0}, 0x0) 46.164045978s ago: executing program 9 (id=1072): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x30c01, 0x0) socket(0xa, 0x1, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008080}, 0x200c0084) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x400) r5 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000000140)={[&(0x7f0000001680)='A\\\x98\xae!\\A=3\x06\xc7F\xb2?=t\xbe\t\xb7d8|-\x9ax\xc1\xe4\xd1\xf5=\xe1\xe0\xf5\x91&\xdc\x85r\xbe\xe1N\xe2F\xad\x1d\x8d^\xb5\xe8\xf9\x90\x94\xa8\x9f}\'\x9aT\xd9\xdc\xf2\xc0L\xf5\xf0J\x96{\xff}W#\xc1\xc4e\xab\x02\x19\xad\xdeH\xc5\xb0&\xcd*>\x89wB\xed\x13\x8b\x987\xacS\xcc\x97q\xb9\xea\x96\xa3\xab<6\xd63\xbd\xe5\f4\xf1\x97\xc2\x98\x8a\xce[\xf3\xa3\xb2\x9d\xf9\x84\xbe\xbb\x12\xddT\ac\x90y\xd3\xca{\x10V\x1b3\xe7\x87jr\xb9\xc7\x10\x1a/\xcbV\x8d\xdc]\x87{\x95\x1c\x06\x86\xd45Z\xbe\x19\xde\x15\xc9\x88\xdb\x00d\xb7\xd2\x96\xf5$\x1f<\xfc>\xbf\xaa{D\xcf\vX`\xd3\xd2\x9b\x8b\x06\xd6\xa9\x85A\xa4\xa1\f\xee\xe3\x95\x9dLz\x10\xdcI(\x04+\xa5\xa1\xc2oC\xd0\xb1\xe5S\xb5\xb3\x98|\xb1\x82\xb5\xf4*\xc9\x1c\xdf5\x82\x93N\xdc\x96l\xfd\xbe@\xfb{q'], 0xc0ff7f0000}, 0x1100) 45.994585747s ago: executing program 6 (id=1073): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x3, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffff000) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040a0702"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000180)={0x2750, 0x3, 0x1fff, 0x7, 0x1, "0982aa2594a49e680d061bb20756a5e7af8bc6", 0x3, 0x10000}) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x88002) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0x3, &(0x7f0000000c80)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) 45.858006402s ago: executing program 9 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000004000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c00008008000340"], 0x1874}}, 0x0) 45.504169793s ago: executing program 9 (id=1075): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0x400) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xb4}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 44.695116788s ago: executing program 6 (id=1076): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) r1 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000000)=0x2}}) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 44.559769794s ago: executing program 8 (id=1077): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="a905000000007464000100000000000b00e5c0", 0x13}, {&(0x7f0000000300)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}], 0x2}}], 0x1, 0x24004044) 44.168075901s ago: executing program 5 (id=1078): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x38, 0x4, 0x0, 0x1b, 0xe0, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x17, 0xb1, [@private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010102]}, @cipso={0x86, 0x5a, 0x1, [{0x1, 0xd, "2168f3c6d416bfbf684a04"}, {0x7, 0x2}, {0x1, 0xd, "6b5555e7b742848d471fad"}, {0x0, 0x3, "fc"}, {0x5, 0x3, "94"}, {0x5, 0x12, "048814648444dd0c6daff4e6881d895d"}, {0x1, 0x11, "6bef76409573034c76ce7f73b68d51"}, {0x0, 0xf, "98ec24ce775acaede3cdd54d0c"}]}, @timestamp_addr={0x44, 0x54, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@multicast1, 0xf}, {@broadcast, 0x540c}, {@remote, 0x3}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010100}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/zoneinfo\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffea6) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(r4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r7, r7, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x25, 0x148, 0x100, 0x60, 0x228, 0x2a8, 0x2a8, 0x228, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0x100, 0x0, {0x200003ae, 0x7f00}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00', {0xfffffffffffffffc}}}}, {{@ip={@empty, @empty, 0xff000000, 0xffffff00, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x1d, 0x3}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@statistic={{0x38}, {0x0, 0xfffd, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) 44.16775967s ago: executing program 7 (id=1079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) syz_emit_ethernet(0xc7, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000b900660000000690780a010100ac1414aa4e224003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0800000907800001308abb9bfe0c34c72d50c66fa8369f6e78713122a9c444be69caceb3fbd4ef8047b79a36a872deec48dd348ec97b002070da8a3a7bd8c13d16b504e30cb848738e88b1b9edc866a6e617a9d05c1349ae919e74c12bb7db9f9f0eb4c9685f35146d7b7545afcfe76d44f2f964ff4eb4e5b4f29cce5efafc688feb80d5ed831f43179cece2400e4ca8410f17c3492127062"], 0x0) (async) syz_emit_ethernet(0xc7, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000b900660000000690780a010100ac1414aa4e224003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0800000907800001308abb9bfe0c34c72d50c66fa8369f6e78713122a9c444be69caceb3fbd4ef8047b79a36a872deec48dd348ec97b002070da8a3a7bd8c13d16b504e30cb848738e88b1b9edc866a6e617a9d05c1349ae919e74c12bb7db9f9f0eb4c9685f35146d7b7545afcfe76d44f2f964ff4eb4e5b4f29cce5efafc688feb80d5ed831f43179cece2400e4ca8410f17c3492127062"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c1400003e000701feffffff00000000047c000008004280040008002814018024141d"], 0x144c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 44.113287688s ago: executing program 8 (id=1080): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 43.508486366s ago: executing program 7 (id=1081): syz_usb_ep_write(0xffffffffffffffff, 0x8d, 0x2, &(0x7f00000001c0)="d0be") (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r2, 0x6f58, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r5) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) creat(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000000)={0x4000004, 0x0, 0x3, 0xfffffffffffff803, 0x40}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) (async) ioctl$TIOCGPKT(r0, 0x40045431, &(0x7f00000001c0)) 43.50818166s ago: executing program 8 (id=1082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0xf000000, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) 42.696208738s ago: executing program 8 (id=1083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc0fff00000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 42.505349244s ago: executing program 7 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 42.236313259s ago: executing program 7 (id=1085): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) lseek(r0, 0xd2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x14) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x22102, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = eventfd(0x3) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000280)={r5, 0x2, 0x2, r5}) close_range(r4, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) 42.02807918s ago: executing program 8 (id=1086): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 38.534769589s ago: executing program 6 (id=1087): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000002c0)=0x3) r3 = memfd_create(0x0, 0x3) ftruncate(r3, 0xffff) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={r3, 0x80000000, 0x10000, 0x100000000}) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) r5 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)={0x70000004}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x45, 0x2}, @const={0x3, {0x400, 0x5, 0x9, 0x3}}}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000140), &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0x220}, {0x1000, 0x40}]}, 0x14, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000029000b0027bd700000000000050000000c00018008", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) 0s ago: executing program 37 (id=1075): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, 0x0, 0x400) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xb4}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) kernel console output (not intermixed with test programs): : set [1, 0] type 2 family 0 port 6081 - 0 [ 292.972998][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.983230][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.005371][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.020261][ T5940] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 293.021288][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.029233][ T5940] usb 9-1: can't read configurations, error -61 [ 293.051710][ T5940] usb usb9-port1: attempt power cycle [ 293.095868][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.103743][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.151780][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.177461][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.313374][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.330598][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.380903][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.425746][ T5940] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 293.446600][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.477775][ T5940] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 293.515443][ T5940] usb 9-1: can't read configurations, error -61 [ 293.582731][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.633951][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.667298][ T5940] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 293.729212][ T5940] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 293.756177][ T5940] usb 9-1: can't read configurations, error -61 [ 293.766352][ T5940] usb usb9-port1: unable to enumerate USB device [ 293.869208][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.929835][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.096242][ T7953] FAULT_INJECTION: forcing a failure. [ 294.096242][ T7953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.144334][ T7953] CPU: 1 UID: 0 PID: 7953 Comm: syz.5.511 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 294.144369][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.144396][ T7953] Call Trace: [ 294.144404][ T7953] [ 294.144414][ T7953] dump_stack_lvl+0x189/0x250 [ 294.144446][ T7953] ? __pfx____ratelimit+0x10/0x10 [ 294.144469][ T7953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.144494][ T7953] ? __pfx__printk+0x10/0x10 [ 294.144522][ T7953] ? __might_fault+0xb0/0x130 [ 294.144563][ T7953] should_fail_ex+0x414/0x560 [ 294.144590][ T7953] _copy_from_user+0x2d/0xb0 [ 294.144621][ T7953] generic_map_delete_batch+0x2d4/0x660 [ 294.144650][ T7953] ? generic_map_delete_batch+0x32e/0x660 [ 294.144681][ T7953] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 294.144707][ T7953] ? __fget_files+0x2a/0x420 [ 294.144731][ T7953] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 294.144759][ T7953] bpf_map_do_batch+0x415/0x5f0 [ 294.144786][ T7953] __sys_bpf+0x7a1/0x860 [ 294.144820][ T7953] ? __pfx___sys_bpf+0x10/0x10 [ 294.144865][ T7953] ? ksys_write+0x22a/0x250 [ 294.144901][ T7953] ? __pfx_ksys_write+0x10/0x10 [ 294.144927][ T7953] ? rcu_is_watching+0x15/0xb0 [ 294.144959][ T7953] __x64_sys_bpf+0x7c/0x90 [ 294.144988][ T7953] do_syscall_64+0xfa/0x3b0 [ 294.145010][ T7953] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.145032][ T7953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.145053][ T7953] ? clear_bhb_loop+0x60/0xb0 [ 294.145077][ T7953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.145097][ T7953] RIP: 0033:0x7fb572b8e9a9 [ 294.145114][ T7953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.145131][ T7953] RSP: 002b:00007fb5709f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.145152][ T7953] RAX: ffffffffffffffda RBX: 00007fb572db5fa0 RCX: 00007fb572b8e9a9 [ 294.145166][ T7953] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 294.145179][ T7953] RBP: 00007fb5709f6090 R08: 0000000000000000 R09: 0000000000000000 [ 294.145191][ T7953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.145203][ T7953] R13: 0000000000000000 R14: 00007fb572db5fa0 R15: 00007fb572edfa28 [ 294.145234][ T7953] [ 294.576725][ T7961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.978667][ T7973] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 295.018809][ T7973] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 295.998573][ T7987] Invalid logical block size (-21931) [ 297.266892][ T8016] input: syz0 as /devices/virtual/input/input20 [ 297.393615][ T8019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.458669][ T8018] input: syz0 as /devices/virtual/input/input21 [ 297.772767][ T8019] netlink: 68 bytes leftover after parsing attributes in process `syz.7.525'. [ 302.804311][ T8092] netlink: 132 bytes leftover after parsing attributes in process `syz.6.544'. [ 303.008396][ T5942] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 303.205662][ T5942] usb 10-1: Using ep0 maxpacket: 8 [ 303.213070][ T5942] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 303.222073][ T5942] usb 10-1: config 179 has no interface number 0 [ 303.234675][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 303.269770][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 303.315187][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 303.365253][ T5942] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 303.423965][ T5942] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 303.457404][ T5942] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 303.474852][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.542681][ T8090] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 303.839611][ T5942] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input22 [ 304.267442][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.310802][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.340728][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.9.543'. [ 304.390723][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.9.543'. [ 304.588682][ T5938] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 304.815408][ T5938] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 304.844089][ T5938] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.899774][ T5938] usb 9-1: config 0 has no interface number 0 [ 304.927237][ T5938] usb 9-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 304.941032][ T5938] usb 9-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 304.961984][ T5938] usb 9-1: Product: syz [ 304.969717][ T8126] input: syz0 as /devices/virtual/input/input23 [ 305.005171][ T5938] usb 9-1: Manufacturer: syz [ 305.035915][ T5938] usb 9-1: SerialNumber: syz [ 305.063292][ T8127] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 305.070121][ T8127] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.080979][ T5938] usb 9-1: config 0 descriptor?? [ 305.093886][ T8127] vhci_hcd vhci_hcd.0: Device attached [ 305.114178][ T5938] usb 9-1: Found UVC 0.00 device syz (046c:14e8) [ 305.147968][ T5938] uvcvideo 9-1:0.105: Entity type for entity Output 1 was not initialized! [ 305.184273][ T5938] usb 9-1: Failed to create links for entity 1 [ 305.201004][ T5938] usb 9-1: Failed to register entities (-22). [ 305.356351][ T5942] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 305.357757][ T5938] usb 9-1: USB disconnect, device number 6 [ 305.763842][ T8130] vhci_hcd: connection reset by peer [ 305.865647][ T5938] usb 10-1: USB disconnect, device number 2 [ 305.865737][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 305.880154][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.916705][ T3521] vhci_hcd: stop threads [ 305.921827][ T3521] vhci_hcd: release socket [ 305.930427][ T3521] vhci_hcd: disconnect device [ 306.184680][ T8146] loop8: detected capacity change from 0 to 8 [ 306.251681][ T8146] Dev loop8: unable to read RDB block 8 [ 306.305397][ T8146] loop8: unable to read partition table [ 306.315814][ T8146] loop8: partition table beyond EOD, truncated [ 306.322248][ T8146] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 306.605363][ T8151] netlink: 4400 bytes leftover after parsing attributes in process `syz.8.555'. [ 306.664770][ T8151] workqueue: name exceeds WQ_NAME_LEN. Truncating to: `] Iq!>s*!)\+` [ 306.674645][ T8156] syz_tun: entered allmulticast mode [ 306.708865][ T8157] FAULT_INJECTION: forcing a failure. [ 306.708865][ T8157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.741930][ T8154] dvmrp1: entered allmulticast mode [ 306.747514][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.9.556 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 306.747539][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.747548][ T8157] Call Trace: [ 306.747554][ T8157] [ 306.747560][ T8157] dump_stack_lvl+0x189/0x250 [ 306.747582][ T8157] ? __pfx____ratelimit+0x10/0x10 [ 306.747606][ T8157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.747623][ T8157] ? __pfx__printk+0x10/0x10 [ 306.747643][ T8157] ? __might_fault+0xb0/0x130 [ 306.747672][ T8157] should_fail_ex+0x414/0x560 [ 306.747690][ T8157] _copy_from_user+0x2d/0xb0 [ 306.747713][ T8157] ___sys_recvmsg+0x12e/0x510 [ 306.747732][ T8157] ? __pfx____sys_recvmsg+0x10/0x10 [ 306.747769][ T8157] ? __might_fault+0xb0/0x130 [ 306.747791][ T8157] do_recvmmsg+0x307/0x770 [ 306.747812][ T8157] ? __pfx_do_recvmmsg+0x10/0x10 [ 306.747835][ T8157] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.747866][ T8157] __x64_sys_recvmmsg+0x190/0x240 [ 306.747883][ T8157] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 306.747896][ T8157] ? rcu_is_watching+0x15/0xb0 [ 306.747917][ T8157] ? do_syscall_64+0xbe/0x3b0 [ 306.747936][ T8157] do_syscall_64+0xfa/0x3b0 [ 306.747952][ T8157] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.747967][ T8157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.747981][ T8157] ? clear_bhb_loop+0x60/0xb0 [ 306.747999][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.748013][ T8157] RIP: 0033:0x7f2b1b78e9a9 [ 306.748026][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.748038][ T8157] RSP: 002b:00007f2b1c53f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 306.748053][ T8157] RAX: ffffffffffffffda RBX: 00007f2b1b9b6080 RCX: 00007f2b1b78e9a9 [ 306.748064][ T8157] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 306.748074][ T8157] RBP: 00007f2b1c53f090 R08: 0000000000000000 R09: 0000000000000000 [ 306.748083][ T8157] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 306.748092][ T8157] R13: 0000000000000000 R14: 00007f2b1b9b6080 R15: 00007f2b1badfa28 [ 306.748113][ T8157] [ 307.070665][ T8154] netlink: 14 bytes leftover after parsing attributes in process `syz.5.557'. [ 307.298256][ T8159] netlink: 52 bytes leftover after parsing attributes in process `syz.9.558'. [ 307.327329][ T8154] syz_tun (unregistering): left allmulticast mode [ 307.595178][ T5939] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 307.658266][ T8174] netlink: 24 bytes leftover after parsing attributes in process `syz.7.562'. [ 307.683972][ T8179] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 307.769987][ T8183] netlink: 'syz.7.562': attribute type 10 has an invalid length. [ 307.861220][ T5939] usb 7-1: config 0 has an invalid interface number: 95 but max is 0 [ 307.869697][ T5939] usb 7-1: config 0 has no interface number 0 [ 307.876961][ T5939] usb 7-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 307.907619][ T5939] usb 7-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 307.917597][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.038574][ T5939] usb 7-1: Product: syz [ 308.053197][ T5939] usb 7-1: Manufacturer: syz [ 308.073297][ T8183] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 308.093719][ T5939] usb 7-1: SerialNumber: syz [ 308.130665][ T5939] usb 7-1: config 0 descriptor?? [ 308.192082][ T8164] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 308.223642][ T8186] overlayfs: missing 'lowerdir' [ 308.413004][ T5939] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.430022][ T5939] usb 7-1: MIDIStreaming interface descriptor not found [ 308.475421][ T5990] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 308.646622][ T8202] FAULT_INJECTION: forcing a failure. [ 308.646622][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 308.651370][ T5939] usb 7-1: USB disconnect, device number 2 [ 308.669754][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.9.569 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 308.669784][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.669796][ T8202] Call Trace: [ 308.669804][ T8202] [ 308.669813][ T8202] dump_stack_lvl+0x189/0x250 [ 308.669849][ T8202] ? __pfx____ratelimit+0x10/0x10 [ 308.669872][ T8202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.669896][ T8202] ? __pfx__printk+0x10/0x10 [ 308.669942][ T8202] should_fail_ex+0x414/0x560 [ 308.669970][ T8202] should_failslab+0xa8/0x100 [ 308.670003][ T8202] kmem_cache_alloc_noprof+0x73/0x3c0 [ 308.670031][ T8202] ? skb_clone+0x212/0x3a0 [ 308.670056][ T8202] skb_clone+0x212/0x3a0 [ 308.670080][ T8202] __netlink_deliver_tap+0x404/0x850 [ 308.670123][ T8202] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.670153][ T8202] netlink_deliver_tap+0x19c/0x1b0 [ 308.670183][ T8202] netlink_sendskb+0x68/0x140 [ 308.670212][ T8202] ctrl_getfamily+0x499/0x590 [ 308.670238][ T8202] ? __pfx_ctrl_getfamily+0x10/0x10 [ 308.670261][ T8202] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 308.670293][ T8202] genl_family_rcv_msg_doit+0x215/0x300 [ 308.670325][ T8202] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 308.670382][ T8202] genl_rcv_msg+0x60e/0x790 [ 308.670413][ T8202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.670432][ T8202] ? ref_tracker_free+0x63a/0x7d0 [ 308.670455][ T8202] ? __pfx_ctrl_getfamily+0x10/0x10 [ 308.670477][ T8202] ? __pfx_ref_tracker_free+0x10/0x10 [ 308.670512][ T8202] netlink_rcv_skb+0x205/0x470 [ 308.670541][ T8202] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.670566][ T8202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.670614][ T8202] ? down_read+0x1ad/0x2e0 [ 308.670642][ T8202] genl_rcv+0x28/0x40 [ 308.670662][ T8202] netlink_unicast+0x75c/0x8e0 [ 308.670701][ T8202] netlink_sendmsg+0x805/0xb30 [ 308.670740][ T8202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.670771][ T8202] ? aa_sock_msg_perm+0x94/0x160 [ 308.670795][ T8202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.670816][ T8202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.670846][ T8202] __sock_sendmsg+0x21c/0x270 [ 308.670877][ T8202] __sys_sendto+0x3bd/0x520 [ 308.670909][ T8202] ? __pfx___sys_sendto+0x10/0x10 [ 308.670951][ T8202] ? count_memcg_event_mm+0x21/0x260 [ 308.670992][ T8202] ? exc_page_fault+0x76/0xf0 [ 308.671017][ T8202] ? do_user_addr_fault+0xc8a/0x1390 [ 308.671042][ T8202] __x64_sys_sendto+0xde/0x100 [ 308.671077][ T8202] do_syscall_64+0xfa/0x3b0 [ 308.671098][ T8202] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.671119][ T8202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.671140][ T8202] ? clear_bhb_loop+0x60/0xb0 [ 308.671164][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.671184][ T8202] RIP: 0033:0x7f2b1b79083c [ 308.671203][ T8202] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 308.671221][ T8202] RSP: 002b:00007f2b1c55eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 308.671242][ T8202] RAX: ffffffffffffffda RBX: 00007f2b1c55efc0 RCX: 00007f2b1b79083c [ 308.671257][ T8202] RDX: 0000000000000020 RSI: 00007f2b1c55f010 RDI: 0000000000000004 [ 308.671269][ T8202] RBP: 0000000000000000 R08: 00007f2b1c55ef14 R09: 000000000000000c [ 308.671282][ T8202] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 308.671294][ T8202] R13: 00007f2b1c55ef68 R14: 00007f2b1c55f010 R15: 0000000000000000 [ 308.671327][ T8202] [ 309.009530][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.454860][ T5990] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 309.480767][ T5990] usb 9-1: config 0 has no interface number 0 [ 309.506600][ T5990] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.543139][ T5990] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 309.566072][ T5990] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 309.614258][ T5990] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 309.700557][ T5990] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 309.719614][ T5990] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.743100][ T5990] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 309.753948][ T5990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.784803][ T5990] usb 9-1: config 0 descriptor?? [ 309.815965][ T8190] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 309.839452][ T8190] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 309.874849][ T5990] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 309.878786][ T5939] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 310.086257][ T5939] usb 7-1: Using ep0 maxpacket: 16 [ 310.106167][ T5940] usb 9-1: USB disconnect, device number 7 [ 310.112066][ C1] ldusb 9-1:0.55: usb_submit_urb failed (-19) [ 310.121291][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.152991][ T5939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.171508][ T5940] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 310.186689][ T5939] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 310.225082][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.263370][ T5939] usb 7-1: config 0 descriptor?? [ 310.334120][ T8190] ldusb: No device or device unplugged -19 [ 310.528295][ T5942] vhci_hcd: vhci_device speed not set [ 310.641139][ T8225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.575'. [ 310.651608][ T8225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.575'. [ 310.691191][ T8210] tipc: Started in network mode [ 310.696245][ T8210] tipc: Node identity e23517ac0dd7, cluster identity 4711 [ 310.704716][ T8210] tipc: Enabled bearer , priority 0 [ 310.714033][ T8210] syzkaller0: entered promiscuous mode [ 310.728815][ T8210] syzkaller0: entered allmulticast mode [ 310.767300][ T8210] tipc: Resetting bearer [ 310.885607][ T5939] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 311.052078][ T5939] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 311.255240][ T5990] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 311.279174][ T8209] tipc: Resetting bearer [ 311.352437][ T8209] tipc: Disabling bearer [ 311.418469][ T5990] usb 6-1: config 0 has no interfaces? [ 311.434257][ T6757] usb 7-1: USB disconnect, device number 3 [ 311.449695][ T5990] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 311.459025][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.468626][ T5990] usb 6-1: Product: syz [ 311.487513][ T5990] usb 6-1: Manufacturer: syz [ 311.529571][ T5990] usb 6-1: SerialNumber: syz [ 311.653974][ T5990] usb 6-1: config 0 descriptor?? [ 311.908296][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.7.579'. [ 312.064233][ T8232] dvmrp1: left allmulticast mode [ 313.650739][ T8280] netlink: 'syz.9.590': attribute type 10 has an invalid length. [ 313.737227][ T8282] netlink: 'syz.9.590': attribute type 10 has an invalid length. [ 313.769529][ T8282] netlink: 40 bytes leftover after parsing attributes in process `syz.9.590'. [ 313.807343][ T8280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.826143][ T8280] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 313.893229][ T8282] batadv0: entered promiscuous mode [ 313.935303][ T8282] batadv0: entered allmulticast mode [ 313.998478][ T8282] bond0: (slave batadv0): Releasing backup interface [ 314.005457][ T5942] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 314.067537][ T6757] usb 6-1: USB disconnect, device number 2 [ 314.070717][ T8282] bridge0: port 3(batadv0) entered blocking state [ 314.088811][ T8282] bridge0: port 3(batadv0) entered disabled state [ 314.165219][ T5942] usb 9-1: Using ep0 maxpacket: 8 [ 314.198037][ T5942] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 314.215968][ T5942] usb 9-1: config 0 interface 0 has no altsetting 0 [ 314.233814][ T5942] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 314.262455][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.274689][ T5942] usb 9-1: Product: syz [ 314.284188][ T5942] usb 9-1: Manufacturer: syz [ 314.289505][ T3521] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 314.298936][ T3521] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 314.326589][ T5942] usb 9-1: SerialNumber: syz [ 314.347107][ T5942] usb 9-1: config 0 descriptor?? [ 314.378949][ T5942] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found [ 314.513300][ T8297] trusted_key: syz.6.595 sent an empty control message without MSG_MORE. [ 314.586300][ T5942] snd_usb_toneport 9-1:0.0: cannot get proper max packet size [ 314.604441][ T5942] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected [ 314.642959][ T5942] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 314.761346][ T8305] netlink: 24 bytes leftover after parsing attributes in process `syz.6.596'. [ 314.771044][ T5939] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 314.989340][ T5939] usb 10-1: Using ep0 maxpacket: 16 [ 315.026067][ T5939] usb 10-1: config 0 has an invalid interface number: 253 but max is 0 [ 315.073013][ T5939] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.101406][ T5939] usb 10-1: config 0 has no interface number 0 [ 315.123724][ T5939] usb 10-1: config 0 interface 253 has no altsetting 0 [ 315.197047][ T5939] usb 10-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 315.215165][ T5939] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.255189][ T5939] usb 10-1: Product: syz [ 315.269988][ T5939] usb 10-1: Manufacturer: syz [ 315.274765][ T5939] usb 10-1: SerialNumber: syz [ 315.301269][ T5939] usb 10-1: config 0 descriptor?? [ 315.666728][ T8328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.707471][ T5939] usbhid 10-1:0.253: couldn't find an input interrupt endpoint [ 315.754961][ T5939] usb 10-1: USB disconnect, device number 3 [ 316.755311][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 316.915327][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 316.932268][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.959199][ T10] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 316.962535][ T8346] tipc: Started in network mode [ 316.983158][ T10] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.000488][ T8346] tipc: Node identity , cluster identity 4711 [ 317.012430][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.025353][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.033786][ T8346] tipc: Failed to obtain node identity [ 317.044180][ T10] usb 6-1: Product: syz [ 317.049138][ T8346] tipc: Enabling of bearer rejected, failed to enable media [ 317.059147][ T10] usb 6-1: Manufacturer: syz [ 317.071061][ T10] usb 6-1: SerialNumber: syz [ 320.607508][ T5990] usb 9-1: USB disconnect, device number 8 [ 322.700553][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.711063][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.085381][ T8392] tipc: Enabled bearer , priority 0 [ 324.230614][ T8392] tipc: Disabling bearer [ 324.536305][ T5941] usb 6-1: USB disconnect, device number 3 [ 324.924600][ T5940] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 325.185616][ T5940] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.300156][ T5940] usb 10-1: config 0 has no interfaces? [ 325.330758][ T5940] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.582013][ T5940] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.717078][ T5940] usb 10-1: config 0 descriptor?? [ 326.255391][ T5938] usb 10-1: USB disconnect, device number 4 [ 326.475026][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.8.625'. [ 326.763994][ T8444] netlink: 36 bytes leftover after parsing attributes in process `syz.6.620'. [ 326.812237][ T8441] usb usb8: usbfs: process 8441 (syz.8.625) did not claim interface 0 before use [ 327.964244][ T8461] netlink: 'syz.5.630': attribute type 1 has an invalid length. [ 328.211913][ T8461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.230853][ T8468] vlan2: entered allmulticast mode [ 328.256841][ T8468] geneve1: entered allmulticast mode [ 328.292805][ T8468] bond1: (slave vlan2): making interface the new active one [ 328.381320][ T8468] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 328.855270][ T5857] Bluetooth: hci1: command 0x0405 tx timeout [ 329.076194][ T8478] team_slave_0: entered promiscuous mode [ 329.081967][ T8478] team_slave_1: entered promiscuous mode [ 329.125593][ T8478] vlan2: entered promiscuous mode [ 329.151569][ T8478] team0: entered promiscuous mode [ 329.393674][ T8490] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 329.588534][ T8495] netlink: 'syz.9.637': attribute type 8 has an invalid length. [ 329.829461][ T8499] netlink: 'syz.9.637': attribute type 8 has an invalid length. [ 329.898190][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 330.243813][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.348411][ T10] usb 9-1: config 0 has no interfaces? [ 330.414743][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.501451][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.587125][ T10] usb 9-1: config 0 descriptor?? [ 330.945419][ T6750] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 331.093246][ T10] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 331.120666][ T5938] usb 9-1: USB disconnect, device number 9 [ 331.312940][ T6750] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.314223][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 331.323469][ T6750] usb 10-1: config 0 has no interfaces? [ 331.405431][ T6750] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.449464][ T6750] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.504522][ T6750] usb 10-1: config 0 descriptor?? [ 331.594535][ T10] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 331.896223][ T10] usb 7-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 332.127295][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 332.256808][ T5941] usb 10-1: USB disconnect, device number 5 [ 332.305136][ T10] usb 7-1: string descriptor 0 read error: -22 [ 332.326321][ T5990] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 332.335915][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.364070][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.470797][ T10] usb 7-1: bad CDC descriptors [ 332.643822][ T5990] usb 6-1: config 0 has no interfaces? [ 332.738009][ T5990] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 332.801884][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.837876][ T5990] usb 6-1: Product: syz [ 332.842093][ T5990] usb 6-1: Manufacturer: syz [ 332.858727][ T5940] usb 7-1: USB disconnect, device number 4 [ 332.896517][ T5990] usb 6-1: SerialNumber: syz [ 332.909409][ T5990] usb 6-1: config 0 descriptor?? [ 333.222230][ T8532] pimreg: entered allmulticast mode [ 333.243592][ T8532] pimreg: left allmulticast mode [ 334.485547][ T5990] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 334.645277][ T5990] usb 9-1: Using ep0 maxpacket: 16 [ 334.708208][ T5990] usb 9-1: config 0 has no interfaces? [ 334.900424][ T5990] usb 9-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 334.944997][ T5990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.116204][ T5990] usb 9-1: config 0 descriptor?? [ 335.399082][ T8562] warning: `syz.8.648' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 335.975422][ T5940] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 336.135390][ T5940] usb 10-1: Using ep0 maxpacket: 8 [ 336.150532][ T5940] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 336.178403][ T5940] usb 10-1: can't read configurations, error -22 [ 336.325395][ T5940] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 336.486801][ T5940] usb 10-1: Using ep0 maxpacket: 8 [ 336.502528][ T5940] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 336.513941][ T5940] usb 10-1: can't read configurations, error -22 [ 336.528214][ T5940] usb usb10-port1: attempt power cycle [ 336.897530][ T5940] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 336.937782][ T5940] usb 10-1: Using ep0 maxpacket: 8 [ 336.946561][ T5940] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 336.954592][ T5940] usb 10-1: can't read configurations, error -22 [ 337.085331][ T5940] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 337.197553][ T5940] usb 10-1: Using ep0 maxpacket: 8 [ 337.204561][ T5940] usb 10-1: config index 0 descriptor too short (expected 9, got 0) [ 337.213144][ T5940] usb 10-1: can't read configurations, error -22 [ 337.222629][ T5940] usb usb10-port1: unable to enumerate USB device [ 337.326811][ T10] usb 6-1: USB disconnect, device number 4 [ 337.699294][ T5925] usb 9-1: USB disconnect, device number 10 [ 337.845236][ T10] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 337.986677][ T8612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.002653][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.659'. [ 338.026748][ T10] usb 6-1: config 0 has an invalid interface number: 63 but max is 0 [ 338.034915][ T10] usb 6-1: config 0 has no interface number 0 [ 338.043539][ T8610] vlan2: entered promiscuous mode [ 338.056400][ T8610] team0: entered promiscuous mode [ 338.071194][ T10] usb 6-1: config 0 interface 63 has no altsetting 0 [ 338.091153][ T8610] team_slave_0: entered promiscuous mode [ 338.110560][ T10] usb 6-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=2b.5e [ 338.119105][ T8610] team_slave_1: entered promiscuous mode [ 338.138497][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.163163][ T10] usb 6-1: Product: syz [ 338.163186][ T10] usb 6-1: Manufacturer: syz [ 338.163210][ T10] usb 6-1: SerialNumber: syz [ 338.182447][ T10] usb 6-1: config 0 descriptor?? [ 338.204258][ T10] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 338.231937][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 338.255973][ T10] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 338.256052][ T10] usb 6-1: media controller created [ 338.261502][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.318918][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 338.319313][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 338.319420][ T10] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 338.556034][ T10] rc_core: IR keymap rc-avermedia-m135a not found [ 338.562550][ T10] Registered IR keymap rc-empty [ 338.576441][ T10] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 338.621280][ T10] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input25 [ 338.712640][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 338.765140][ T10] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 338.838839][ T10] usb 6-1: USB disconnect, device number 5 [ 339.003892][ T10] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 339.290192][ T8647] IPv6: Can't replace route, no match found [ 339.373937][ T8637] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 339.394265][ T8637] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 339.402481][ T8637] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 339.436156][ T8637] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 339.474981][ T8637] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 339.492723][ T8637] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 339.521954][ T8637] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 339.548854][ T8637] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 339.573487][ T8637] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 339.591645][ T8637] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 340.035257][ T6750] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 340.197966][ T6750] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 340.197992][ T6750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.200124][ T6750] usb 7-1: config 0 descriptor?? [ 340.210107][ T6750] cp210x 7-1:0.0: cp210x converter detected [ 340.415421][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 340.592104][ T10] usb 6-1: config 0 has no interfaces? [ 340.607649][ T10] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 340.607683][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.607704][ T10] usb 6-1: Product: syz [ 340.607727][ T10] usb 6-1: Manufacturer: syz [ 340.607743][ T10] usb 6-1: SerialNumber: syz [ 340.620987][ T6750] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 340.662198][ T6750] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 340.669587][ T10] usb 6-1: config 0 descriptor?? [ 340.690388][ T6750] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 340.708558][ T6750] usb 7-1: cp210x converter now attached to ttyUSB0 [ 340.745439][ T6750] usb 7-1: USB disconnect, device number 5 [ 340.810122][ T6750] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 340.853992][ T6750] cp210x 7-1:0.0: device disconnected [ 340.948190][ T8673] pimreg: entered allmulticast mode [ 340.957203][ T8673] pimreg: left allmulticast mode [ 342.762098][ T8708] Invalid logical block size (-4097) [ 342.865030][ T8710] FAULT_INJECTION: forcing a failure. [ 342.865030][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 342.926091][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.7.683 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 342.926121][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.926134][ T8710] Call Trace: [ 342.926142][ T8710] [ 342.926151][ T8710] dump_stack_lvl+0x189/0x250 [ 342.926180][ T8710] ? __pfx____ratelimit+0x10/0x10 [ 342.926205][ T8710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.926229][ T8710] ? __pfx__printk+0x10/0x10 [ 342.926266][ T8710] should_fail_ex+0x414/0x560 [ 342.926286][ T8710] should_failslab+0xa8/0x100 [ 342.926310][ T8710] kmem_cache_alloc_noprof+0x73/0x3c0 [ 342.926330][ T8710] ? skb_clone+0x212/0x3a0 [ 342.926349][ T8710] skb_clone+0x212/0x3a0 [ 342.926366][ T8710] __netlink_deliver_tap+0x404/0x850 [ 342.926406][ T8710] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.926448][ T8710] netlink_deliver_tap+0x19c/0x1b0 [ 342.926479][ T8710] netlink_sendskb+0x68/0x140 [ 342.926507][ T8710] netlink_rcv_skb+0x28c/0x470 [ 342.926532][ T8710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.926550][ T8710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.926584][ T8710] ? down_read+0x1ad/0x2e0 [ 342.926604][ T8710] genl_rcv+0x28/0x40 [ 342.926619][ T8710] netlink_unicast+0x75c/0x8e0 [ 342.926646][ T8710] netlink_sendmsg+0x805/0xb30 [ 342.926675][ T8710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.926705][ T8710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.926727][ T8710] __sock_sendmsg+0x21c/0x270 [ 342.926748][ T8710] __sys_sendto+0x3bd/0x520 [ 342.926772][ T8710] ? __pfx___sys_sendto+0x10/0x10 [ 342.926818][ T8710] ? do_user_addr_fault+0xc8a/0x1390 [ 342.926836][ T8710] __x64_sys_sendto+0xde/0x100 [ 342.926860][ T8710] do_syscall_64+0xfa/0x3b0 [ 342.926878][ T8710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.926892][ T8710] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 342.926906][ T8710] ? clear_bhb_loop+0x60/0xb0 [ 342.926924][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.926938][ T8710] RIP: 0033:0x7f0c5e99083c [ 342.926951][ T8710] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 342.926964][ T8710] RSP: 002b:00007f0c5f7afec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 342.926980][ T8710] RAX: ffffffffffffffda RBX: 00007f0c5f7affc0 RCX: 00007f0c5e99083c [ 342.926990][ T8710] RDX: 0000000000000020 RSI: 00007f0c5f7b0010 RDI: 0000000000000004 [ 342.927000][ T8710] RBP: 0000000000000000 R08: 00007f0c5f7aff14 R09: 000000000000000c [ 342.927009][ T8710] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 342.927017][ T8710] R13: 00007f0c5f7aff68 R14: 00007f0c5f7b0010 R15: 0000000000000000 [ 342.927040][ T8710] [ 343.358385][ T8711] team_slave_0: entered promiscuous mode [ 343.364144][ T8711] team_slave_1: entered promiscuous mode [ 343.499390][ T5941] usb 6-1: USB disconnect, device number 6 [ 343.549262][ T8711] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 343.557974][ T8711] team0: Device macvtap1 is already an upper device of the team interface [ 343.601221][ T8711] team_slave_0: left promiscuous mode [ 343.606918][ T8711] team_slave_1: left promiscuous mode [ 343.762208][ T8726] netlink: 124 bytes leftover after parsing attributes in process `syz.8.685'. [ 343.909332][ T8726] netlink: 'syz.8.685': attribute type 1 has an invalid length. [ 343.919567][ T8726] netlink: 'syz.8.685': attribute type 10 has an invalid length. [ 344.049240][ T8731] bridge1: entered allmulticast mode [ 346.659938][ T8753] FAULT_INJECTION: forcing a failure. [ 346.659938][ T8753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.816335][ T8753] CPU: 0 UID: 0 PID: 8753 Comm: syz.6.693 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 346.816365][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.816381][ T8753] Call Trace: [ 346.816399][ T8753] [ 346.816409][ T8753] dump_stack_lvl+0x189/0x250 [ 346.816453][ T8753] ? __pfx____ratelimit+0x10/0x10 [ 346.816488][ T8753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.816525][ T8753] ? __pfx__printk+0x10/0x10 [ 346.816568][ T8753] ? __might_fault+0xb0/0x130 [ 346.816600][ T8753] should_fail_ex+0x414/0x560 [ 346.816622][ T8753] _copy_from_user+0x2d/0xb0 [ 346.816646][ T8753] generic_map_delete_batch+0x2d4/0x660 [ 346.816670][ T8753] ? generic_map_delete_batch+0x32e/0x660 [ 346.816694][ T8753] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 346.816716][ T8753] ? __fget_files+0x2a/0x420 [ 346.816741][ T8753] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 346.816764][ T8753] bpf_map_do_batch+0x415/0x5f0 [ 346.816785][ T8753] __sys_bpf+0x7a1/0x860 [ 346.816812][ T8753] ? __pfx___sys_bpf+0x10/0x10 [ 346.816847][ T8753] ? ksys_write+0x22a/0x250 [ 346.816871][ T8753] ? __pfx_ksys_write+0x10/0x10 [ 346.816897][ T8753] ? rcu_is_watching+0x15/0xb0 [ 346.816922][ T8753] __x64_sys_bpf+0x7c/0x90 [ 346.816947][ T8753] do_syscall_64+0xfa/0x3b0 [ 346.816965][ T8753] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.816990][ T8753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.817006][ T8753] ? clear_bhb_loop+0x60/0xb0 [ 346.817025][ T8753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.817041][ T8753] RIP: 0033:0x7f918fd8e9a9 [ 346.817057][ T8753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.817071][ T8753] RSP: 002b:00007f9190c93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.817088][ T8753] RAX: ffffffffffffffda RBX: 00007f918ffb5fa0 RCX: 00007f918fd8e9a9 [ 346.817100][ T8753] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 346.817117][ T8753] RBP: 00007f9190c93090 R08: 0000000000000000 R09: 0000000000000000 [ 346.817127][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.817137][ T8753] R13: 0000000000000000 R14: 00007f918ffb5fa0 R15: 00007f91900dfa28 [ 346.817162][ T8753] [ 347.977527][ T5925] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 348.152487][ T8771] netlink: 'syz.5.696': attribute type 11 has an invalid length. [ 348.285188][ T5925] usb 7-1: Using ep0 maxpacket: 16 [ 349.748798][ T8789] syzkaller1: entered promiscuous mode [ 349.818392][ T8789] syzkaller1: entered allmulticast mode [ 350.078825][ T8797] veth1_macvtap: left promiscuous mode [ 350.085350][ T8797] macsec0: entered promiscuous mode [ 350.091357][ T8797] macsec0: entered allmulticast mode [ 350.625787][ T8803] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 350.690501][ T8803] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 350.885331][ T5941] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 350.913125][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.7.706'. [ 351.413793][ T5941] usb 10-1: Using ep0 maxpacket: 16 [ 351.464901][ T5941] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.500398][ T5941] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 351.521821][ T5941] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.568265][ T5941] usb 10-1: Product: syz [ 351.573161][ T8813] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003 [ 351.650980][ T5941] usb 10-1: Manufacturer: syz [ 352.271873][ T5941] usb 10-1: SerialNumber: syz [ 352.477416][ T5941] usb 10-1: config 0 descriptor?? [ 352.491385][ T5941] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 352.506879][ T5941] sr9700 10-1:0.0: probe with driver sr9700 failed with error -22 [ 352.687307][ T8804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.776953][ T8804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.203627][ T10] usb 10-1: USB disconnect, device number 10 [ 353.335703][ T5925] usb 7-1: unable to get BOS descriptor or descriptor too short [ 353.380975][ T5925] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 353.417425][ T5925] usb 7-1: can't read configurations, error -71 [ 353.737028][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.712'. [ 353.746812][ T8837] netlink: 60 bytes leftover after parsing attributes in process `syz.5.712'. [ 354.230419][ T8844] Unknown options in mask 5 [ 354.253474][ T8843] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.714'. [ 354.263005][ T8843] netlink: 4280 bytes leftover after parsing attributes in process `syz.6.714'. [ 356.150771][ T8868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.988650][ T5940] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 357.036800][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.728'. [ 357.175302][ T5940] usb 6-1: Using ep0 maxpacket: 16 [ 357.183454][ T5940] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.200030][ T5940] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.325209][ T5940] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.364025][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.412195][ T5940] usb 6-1: Product: syz [ 357.441860][ T5940] usb 6-1: Manufacturer: syz [ 357.501420][ T5940] usb 6-1: SerialNumber: syz [ 357.782578][ T5940] usb 6-1: 0:2 : does not exist [ 357.803257][ T5940] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 357.917072][ T5940] usb 6-1: USB disconnect, device number 7 [ 358.099702][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.745339][ T5990] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 359.053296][ T5990] usb 9-1: Using ep0 maxpacket: 8 [ 359.106488][ T5990] usb 9-1: unable to get BOS descriptor or descriptor too short [ 359.140816][ T5990] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 359.158897][ T5990] usb 9-1: can't read configurations, error -71 [ 359.636472][ T8935] FAULT_INJECTION: forcing a failure. [ 359.636472][ T8935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.709659][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.7.740 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 359.709691][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.709704][ T8935] Call Trace: [ 359.709712][ T8935] [ 359.709721][ T8935] dump_stack_lvl+0x189/0x250 [ 359.709752][ T8935] ? __pfx____ratelimit+0x10/0x10 [ 359.709774][ T8935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.709799][ T8935] ? __pfx__printk+0x10/0x10 [ 359.709826][ T8935] ? __might_fault+0xb0/0x130 [ 359.709873][ T8935] should_fail_ex+0x414/0x560 [ 359.709900][ T8935] _copy_from_user+0x2d/0xb0 [ 359.709931][ T8935] ___sys_recvmsg+0x12e/0x510 [ 359.709957][ T8935] ? __pfx____sys_recvmsg+0x10/0x10 [ 359.710012][ T8935] ? __might_fault+0xb0/0x130 [ 359.710044][ T8935] do_recvmmsg+0x307/0x770 [ 359.710073][ T8935] ? __pfx_do_recvmmsg+0x10/0x10 [ 359.710107][ T8935] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 359.710150][ T8935] __x64_sys_recvmmsg+0x190/0x240 [ 359.710174][ T8935] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 359.710193][ T8935] ? rcu_is_watching+0x15/0xb0 [ 359.710223][ T8935] ? do_syscall_64+0xbe/0x3b0 [ 359.710250][ T8935] do_syscall_64+0xfa/0x3b0 [ 359.710272][ T8935] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.710293][ T8935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.710313][ T8935] ? clear_bhb_loop+0x60/0xb0 [ 359.710339][ T8935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.710358][ T8935] RIP: 0033:0x7f0c5e98e9a9 [ 359.710376][ T8935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.710393][ T8935] RSP: 002b:00007f0c5f7b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 359.710415][ T8935] RAX: ffffffffffffffda RBX: 00007f0c5ebb5fa0 RCX: 00007f0c5e98e9a9 [ 359.710430][ T8935] RDX: 03ffffffffffff2e RSI: 0000200000000c00 RDI: 0000000000000005 [ 359.710444][ T8935] RBP: 00007f0c5f7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 359.710456][ T8935] R10: 00001000400000de R11: 0000000000000246 R12: 0000000000000002 [ 359.710469][ T8935] R13: 0000000000000000 R14: 00007f0c5ebb5fa0 R15: 00007f0c5ecdfa28 [ 359.710500][ T8935] [ 360.181685][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 360.333435][ T8949] IPv6: Can't replace route, no match found [ 360.379062][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 360.391917][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.437771][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.473935][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.504208][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.565221][ T10] usb 6-1: Product: syz [ 360.569468][ T10] usb 6-1: Manufacturer: syz [ 360.624730][ T10] usb 6-1: SerialNumber: syz [ 360.896408][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.945758][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.062437][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.102219][ T8973] netlink: 'syz.9.749': attribute type 1 has an invalid length. [ 361.156443][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.582933][ T10] usb 6-1: skipping empty audio interface (v1) [ 362.764014][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 362.887872][ T10] usb 6-1: USB disconnect, device number 8 [ 363.032233][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.186912][ T6757] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 363.269742][ T9002] netlink: 'syz.6.758': attribute type 13 has an invalid length. [ 363.398937][ T6757] usb 9-1: Using ep0 maxpacket: 32 [ 363.410378][ T6757] usb 9-1: unable to get BOS descriptor or descriptor too short [ 363.539930][ T6757] usb 9-1: config 128 has an invalid interface number: 127 but max is 3 [ 363.589216][ T6757] usb 9-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 363.824492][ T9014] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 363.874377][ T6757] usb 9-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 363.909719][ T6757] usb 9-1: config 128 has no interface number 0 [ 363.927048][ T6757] usb 9-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 364.081694][ T6757] usb 9-1: config 128 interface 127 has no altsetting 0 [ 364.153165][ T6757] usb 9-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 364.162893][ T6757] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.192017][ T6757] usb 9-1: Product: syz [ 364.203747][ T6757] usb 9-1: Manufacturer: syz [ 364.298981][ T6757] usb 9-1: SerialNumber: syz [ 364.341964][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.7.761'. [ 364.353973][ T8993] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 364.488384][ T9020] netlink: 16 bytes leftover after parsing attributes in process `syz.7.761'. [ 364.583371][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.8.756'. [ 364.667029][ T9022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.822743][ T3533] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 364.847050][ T5990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 364.859352][ T9022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.090618][ T6757] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 365.306122][ T5990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.536155][ T6757] usb 9-1: USB disconnect, device number 13 [ 365.776293][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.759'. [ 365.821792][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.759'. [ 365.896070][ T3563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.932833][ T3563] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.103676][ T9036] bridge2: entered allmulticast mode [ 366.135551][ T5990] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.199169][ T8205] udevd[8205]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.538759][ T6757] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 366.755353][ T6757] usb 9-1: device descriptor read/64, error -71 [ 367.075371][ T6757] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 367.382989][ T9057] input: syz0 as /devices/virtual/input/input26 [ 367.445178][ T6757] usb 9-1: device descriptor read/64, error -71 [ 367.555609][ T6757] usb usb9-port1: attempt power cycle [ 367.636623][ T30] audit: type=1800 audit(1753542172.142:103): pid=9064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.771" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 367.945648][ T6757] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 367.967827][ T6757] usb 9-1: device descriptor read/8, error -71 [ 367.986689][ T9075] input: syz1 as /devices/virtual/input/input27 [ 368.135273][ T6750] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 368.233743][ T6757] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 368.299642][ T6757] usb 9-1: device descriptor read/8, error -71 [ 368.316989][ T6750] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 368.401739][ T6750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 368.426978][ T6757] usb usb9-port1: unable to enumerate USB device [ 368.458004][ T6750] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 368.477338][ T6750] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.574391][ T6750] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.605200][ T6750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.637772][ T6750] usb 7-1: config 0 descriptor?? [ 368.685325][ T5990] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 368.845626][ T5990] usb 10-1: Using ep0 maxpacket: 8 [ 368.855511][ T5990] usb 10-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 368.875316][ T5990] usb 10-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 368.911930][ T5990] usb 10-1: config 1 interface 0 has no altsetting 0 [ 368.951597][ T5990] usb 10-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 368.972887][ T5990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.987226][ T6750] usbhid 7-1:0.0: can't add hid device: -71 [ 369.002767][ T5990] usb 10-1: Product: Ｄ攬䵈㤯ɬ聐掚銵ජ佝 [ 369.015400][ T6750] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 369.057810][ T5990] usb 10-1: Manufacturer: ਩퍩仪ᗘ걥쑝䪢⧹肸颧嵍ᦈ㍔᪅龜轉 [ 369.063810][ T6750] usb 7-1: USB disconnect, device number 9 [ 369.085155][ T5990] usb 10-1: SerialNumber: 流䡆鞐ᶖ彋窫䵤逵睔ᷣ蛠ꚷ奄袤斊䟴叕ൽ덱㴪늢毼隉⧢ᴑ黛ֻ䒖벸⌲툗뵙뇎Ⲉ秲흜⫼糲엫騥湓ఙ뷩䉀챝〱ᄘ読壂䀙喱榬醡ᝂษ쐰蘖꞉합ꌇ姮菢绿袗ẙ틕핟孛ૣᗴ깪㻕ﳺᴫ｣鄃驇鰿ኛ澆朆뙀簓➖鱷옘桖 [ 369.443703][ T5990] usbhid 10-1:1.0: can't add hid device: -71 [ 369.460982][ T5990] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 369.488008][ T5990] usb 10-1: USB disconnect, device number 11 [ 369.565416][ T6750] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 369.766703][ T6750] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.785179][ T6750] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 369.829424][ T6750] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.873205][ T6750] usb 7-1: config 0 descriptor?? [ 369.884352][ T5940] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 369.929988][ T6750] pwc: Askey VC010 type 2 USB webcam detected. [ 369.975339][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 370.135503][ T5940] usb 6-1: Using ep0 maxpacket: 8 [ 370.143523][ T5940] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 370.175131][ T5940] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.259829][ T5940] usb 6-1: config 0 has no interface number 0 [ 370.300634][ T5940] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 370.372294][ T6750] pwc: recv_control_msg error -32 req 02 val 2b00 [ 370.395805][ T5940] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 370.431631][ T6750] pwc: recv_control_msg error -32 req 02 val 2700 [ 370.449595][ T5940] usb 6-1: config 0 interface 52 has no altsetting 0 [ 370.461487][ T6750] pwc: recv_control_msg error -32 req 02 val 2c00 [ 370.485751][ T6750] pwc: recv_control_msg error -32 req 04 val 1000 [ 370.533129][ T5940] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 370.543451][ T6750] pwc: recv_control_msg error -32 req 04 val 1300 [ 370.553246][ T5940] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 370.572319][ T6750] pwc: recv_control_msg error -32 req 04 val 1400 [ 370.590014][ T6750] pwc: recv_control_msg error -32 req 02 val 2000 [ 370.627379][ T5940] usb 6-1: Manufacturer: syz [ 370.644842][ T6750] pwc: recv_control_msg error -32 req 02 val 2100 [ 370.654735][ T5940] usb 6-1: config 0 descriptor?? [ 370.675281][ T6750] pwc: recv_control_msg error -32 req 04 val 1500 [ 371.012896][ T5940] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input28 [ 371.197275][ T9103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.230530][ T9103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.313138][ T5990] usb 6-1: USB disconnect, device number 9 [ 371.313220][ C1] synaptics_usb 6-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 372.055259][ T6750] pwc: recv_control_msg error -32 req 02 val 2500 [ 372.139308][ T6750] pwc: recv_control_msg error -32 req 02 val 2400 [ 372.195686][ T6750] pwc: recv_control_msg error -32 req 02 val 2600 [ 372.230337][ T6750] pwc: recv_control_msg error -32 req 02 val 2900 [ 372.265273][ T6750] pwc: recv_control_msg error -32 req 02 val 2800 [ 372.293160][ T6750] pwc: recv_control_msg error -32 req 04 val 1100 [ 372.352994][ T6750] pwc: Registered as video103. [ 372.363579][ T9139] netlink: 'syz.7.788': attribute type 10 has an invalid length. [ 372.377753][ T6765] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 372.389032][ T6750] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input29 [ 372.416351][ T9144] netlink: 'syz.7.788': attribute type 10 has an invalid length. [ 372.462625][ T9139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.490592][ T9144] netlink: 40 bytes leftover after parsing attributes in process `syz.7.788'. [ 372.522377][ T9139] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 372.531768][ T9144] batadv0: entered promiscuous mode [ 372.549814][ T6750] usb 7-1: USB disconnect, device number 10 [ 372.585187][ T6765] usb 6-1: Using ep0 maxpacket: 16 [ 372.599977][ T9144] batadv0: entered allmulticast mode [ 372.631804][ T6765] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.653322][ T6765] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 372.667877][ T9144] bond0: (slave batadv0): Releasing backup interface [ 372.705434][ T6765] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.733225][ T9144] bridge0: port 3(batadv0) entered blocking state [ 372.766413][ T6765] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.780870][ T9144] bridge0: port 3(batadv0) entered disabled state [ 372.825996][ T6765] usb 6-1: config 1 interface 1 has no altsetting 0 [ 372.846977][ T6765] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.865210][ T6765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.877196][ T6765] usb 6-1: Product: syz [ 372.881448][ T6765] usb 6-1: Manufacturer: syz [ 372.894378][ T6765] usb 6-1: SerialNumber: syz [ 372.988642][ T5990] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 373.235271][ T5990] usb 10-1: device descriptor read/64, error -71 [ 373.319017][ T1140] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 373.329456][ T1140] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 373.505462][ T5990] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 373.695227][ T5990] usb 10-1: device descriptor read/64, error -71 [ 373.842121][ T5990] usb usb10-port1: attempt power cycle [ 374.213995][ T6765] usb 6-1: USB disconnect, device number 10 [ 375.335574][ T5942] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 375.535491][ T5942] usb 10-1: Using ep0 maxpacket: 8 [ 375.571133][ T5942] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.669727][ T5942] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.729688][ T5942] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 375.808375][ T5942] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.842752][ T5942] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.853751][ T6765] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 375.914383][ T5942] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.945288][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.805'. [ 376.165169][ T6750] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 376.173007][ T5942] usb 10-1: GET_CAPABILITIES returned 0 [ 376.190262][ T5942] usbtmc 10-1:16.0: can't read capabilities [ 376.217201][ T6765] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.311766][ T6765] usb 6-1: config 0 has no interfaces? [ 376.335258][ T6750] usb 7-1: Using ep0 maxpacket: 16 [ 376.430978][ T6765] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.450986][ T6750] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.695295][ T6765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.712006][ T6750] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 376.734427][ T6765] usb 6-1: config 0 descriptor?? [ 376.755399][ T6750] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 376.792778][ T6750] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.963449][ T6750] usb 7-1: config 1 interface 1 has no altsetting 0 [ 376.967135][ T6750] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 377.062368][ T6750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.062399][ T6750] usb 7-1: Product: syz [ 377.062415][ T6750] usb 7-1: Manufacturer: syz [ 377.062431][ T6750] usb 7-1: SerialNumber: syz [ 377.166660][ T6765] usb 6-1: USB disconnect, device number 11 [ 377.735293][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 378.109894][ T6750] usb 7-1: USB disconnect, device number 11 [ 378.237982][ T5990] usb 10-1: USB disconnect, device number 15 [ 378.356024][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.404085][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.8.809'. [ 378.463516][ T9224] openvswitch: netlink: Flow key attr not present in new flow. [ 378.825624][ T5990] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 379.025324][ T5990] usb 10-1: Using ep0 maxpacket: 16 [ 379.046120][ T5990] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.081352][ T5990] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 379.110678][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 379.113379][ T5990] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 379.166828][ T9236] syz_tun: entered promiscuous mode [ 379.196944][ T5990] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.271082][ T5990] usb 10-1: config 1 interface 1 has no altsetting 0 [ 379.311998][ T5990] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.331599][ T5990] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.340921][ T5990] usb 10-1: Product: syz [ 379.349480][ T5990] usb 10-1: Manufacturer: syz [ 379.354319][ T5990] usb 10-1: SerialNumber: syz [ 379.816865][ T9259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.421700][ T9265] netlink: 52 bytes leftover after parsing attributes in process `syz.7.820'. [ 380.510523][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.820'. [ 380.570077][ T9263] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.619844][ T9263] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.731902][ T9263] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 380.840191][ T9263] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 380.863582][ T9263] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 381.163174][ T9263] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 381.237136][ T5990] usb 10-1: USB disconnect, device number 16 [ 381.350755][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.377632][ T9263] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 381.394199][ T9263] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 381.472484][ T9263] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 381.567031][ T9263] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 381.622423][ T9263] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 381.690264][ T9263] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 381.789418][ T9263] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.819075][ T9263] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 381.865486][ T9263] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 382.242905][ T9292] netlink: 'syz.6.823': attribute type 11 has an invalid length. [ 382.423587][ T9298] IPv6: Can't replace route, no match found [ 382.455427][ T5857] Bluetooth: hci5: command 0x0c1a tx timeout [ 382.625716][ T6750] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 382.855224][ T5857] Bluetooth: hci6: command 0x0c1a tx timeout [ 382.888961][ T6750] usb 9-1: device descriptor read/64, error -71 [ 383.215543][ T6750] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 383.339511][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.829'. [ 383.373399][ T6750] usb 9-1: device descriptor read/64, error -71 [ 383.430130][ T5857] Bluetooth: hci7: command 0x0c1a tx timeout [ 383.433013][ T9311] vlan2: entered promiscuous mode [ 383.545575][ T6750] usb usb9-port1: attempt power cycle [ 383.582003][ T5857] Bluetooth: hci8: command 0x0c1a tx timeout [ 383.815426][ T5857] Bluetooth: hci1: command 0x0405 tx timeout [ 383.949860][ T6750] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 383.991161][ T6750] usb 9-1: device descriptor read/8, error -71 [ 384.045651][ T9328] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղADvc֠6xc: (pid: 9328 comm: syz.5.833) [ 384.090618][ T9326] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.104067][ T30] audit: type=1800 audit(1753542188.662:104): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.833" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B2414476638E93D8D6A0C536D278E3633A dev="mqueue" ino=23274 res=0 errno=0 [ 384.136867][ T9326] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.145897][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.152250][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.155253][ T9326] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.184777][ T9326] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 384.194890][ T9326] geneve2: entered promiscuous mode [ 384.202955][ T9326] geneve2: entered allmulticast mode [ 384.225810][ T9326] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.236889][ T6750] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 384.255372][ T9326] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.280680][ T6750] usb 9-1: device descriptor read/8, error -71 [ 384.293760][ T9326] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.293799][ T9326] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 384.387341][ T6750] usb usb9-port1: unable to enumerate USB device [ 384.505271][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 384.535304][ T5857] Bluetooth: hci5: command 0x0c1a tx timeout [ 384.649782][ T9349] loop2: detected capacity change from 0 to 6 [ 384.661404][ T7923] Dev loop2: unable to read RDB block 6 [ 384.670746][ T7923] loop2: unable to read partition table [ 384.675277][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 384.678626][ T7923] loop2: partition table beyond EOD, truncated [ 384.684337][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.712555][ T9349] Dev loop2: unable to read RDB block 6 [ 384.715869][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 384.725479][ T9349] loop2: unable to read partition table [ 384.741776][ T9] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 384.742110][ T9349] loop2: partition table beyond EOD, truncated [ 384.761989][ T9] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.782855][ T9349] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 384.802132][ T9] usb 10-1: config 1 interface 1 has no altsetting 0 [ 384.823280][ T9] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.840122][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.848542][ T6757] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 384.879856][ T9] usb 10-1: Product: syz [ 384.884204][ T9] usb 10-1: Manufacturer: syz [ 384.890388][ T9] usb 10-1: SerialNumber: syz [ 384.935591][ T5857] Bluetooth: hci6: command 0x0c1a tx timeout [ 385.048303][ T6757] usb 6-1: unable to get BOS descriptor or descriptor too short [ 385.058049][ T6757] usb 6-1: config 1 has an invalid interface number: 43 but max is 1 [ 385.075738][ T6757] usb 6-1: config 1 has no interface number 1 [ 385.085327][ T6757] usb 6-1: config 1 interface 0 altsetting 247 endpoint 0x4 has invalid maxpacket 600, setting to 64 [ 385.107150][ T6757] usb 6-1: config 1 interface 0 has no altsetting 0 [ 385.160890][ T6757] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=f6.75 [ 385.180208][ T6757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.201178][ T6757] usb 6-1: Product: 䀁 [ 385.212598][ T6757] usb 6-1: Manufacturer: 㰊 [ 385.223807][ T6757] usb 6-1: SerialNumber: 삌믣決슠ᝉ⾴駣颢 [ 385.490489][ T6757] gspca_main: spca501-2.14.0 probing 0000:0000 [ 385.497061][ T5857] Bluetooth: hci7: command 0x0c1a tx timeout [ 385.531338][ T6757] gspca_spca501: reg write: error -71 [ 385.537221][ T6757] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 385.544242][ T6757] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 385.626181][ T6757] usb 6-1: USB disconnect, device number 12 [ 385.655224][ T5857] Bluetooth: hci8: command 0x0c1a tx timeout [ 385.793380][ T9] usb 10-1: USB disconnect, device number 17 [ 385.913514][ T5857] Bluetooth: hci1: command 0x0405 tx timeout [ 385.975221][ T5939] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 386.154015][ T5939] usb 7-1: Using ep0 maxpacket: 8 [ 386.164773][ T5939] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 386.182638][ T5939] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.287770][ T5939] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 386.369032][ T5939] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.399516][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.467977][ T5939] usbtmc 7-1:16.0: bulk endpoints not found [ 386.625676][ T5857] Bluetooth: hci5: command 0x0c1a tx timeout [ 387.025414][ T5857] Bluetooth: hci6: command 0x0c1a tx timeout [ 387.575288][ T5857] Bluetooth: hci7: command 0x0c1a tx timeout [ 387.745279][ T5857] Bluetooth: hci8: command 0x0c1a tx timeout [ 387.975394][ T5859] Bluetooth: hci1: command 0x0405 tx timeout [ 388.704398][ T5938] usb 7-1: USB disconnect, device number 12 [ 389.248327][ T9427] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 389.278963][ T9427] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 389.425233][ T5939] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 389.667572][ T5939] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 389.676654][ T5939] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.910246][ T5939] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 389.980584][ T5939] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 389.992840][ T5939] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 390.015203][ T6765] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 390.049980][ T5939] usb 7-1: Manufacturer: syz [ 390.071316][ T5939] usb 7-1: config 0 descriptor?? [ 390.101558][ T5939] igorplugusb 7-1:0.0: incorrect number of endpoints [ 390.217906][ T6765] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 390.235801][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.8.859'. [ 390.255228][ T6765] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.295321][ T6765] usb 10-1: config 0 interface 0 has no altsetting 0 [ 390.325359][ T6765] usb 10-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 390.375637][ T6765] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.483149][ T6765] usb 10-1: config 0 descriptor?? [ 390.585806][ T5939] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 390.745209][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 390.794626][ T5939] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 390.816841][ T5939] usb 6-1: config 127 has no interface number 1 [ 390.854290][ T5939] usb 6-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0 [ 390.902576][ T5939] usb 6-1: config 127 interface 171 has no altsetting 0 [ 390.929318][ T5939] usb 6-1: config 127 interface 0 has no altsetting 0 [ 391.000550][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 391.006862][ T5939] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 391.028490][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.082676][ T5939] usb 6-1: Product: syz [ 391.108519][ T5939] usb 6-1: Manufacturer: syz [ 391.113655][ T5939] usb 6-1: SerialNumber: syz [ 391.165369][ T10] usb 9-1: device descriptor read/64, error -71 [ 391.369600][ T5939] xr_serial 6-1:127.171: xr_serial converter detected [ 391.423981][ T5939] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 391.430678][ T5939] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 391.471440][ T5939] usb 6-1: USB disconnect, device number 13 [ 391.488988][ T5939] xr_serial 6-1:127.171: device disconnected [ 391.605365][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 391.760673][ T10] usb 9-1: device descriptor read/64, error -71 [ 392.017772][ T10] usb usb9-port1: attempt power cycle [ 392.086260][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.7.863'. [ 392.397390][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 392.450976][ T10] usb 9-1: device descriptor read/8, error -71 [ 392.789886][ T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 392.821966][ T10] usb 9-1: device descriptor read/8, error -71 [ 392.936582][ T10] usb usb9-port1: unable to enumerate USB device [ 393.735288][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 394.948541][ T10] usb 7-1: USB disconnect, device number 13 [ 395.381618][ T6765] usbhid 10-1:0.0: can't add hid device: -71 [ 395.381735][ T6765] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 395.415868][ T6765] usb 10-1: USB disconnect, device number 18 [ 396.084155][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.875'. [ 396.926175][ T9539] veth1_macvtap: left promiscuous mode [ 396.931936][ T9539] macsec0: entered promiscuous mode [ 396.937420][ T9539] macsec0: entered allmulticast mode [ 397.386170][ T976] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 397.595040][ T976] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 397.612941][ T976] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.647747][ T976] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.708869][ T976] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 397.727090][ T976] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 397.747096][ T976] usb 9-1: Manufacturer: syz [ 397.784761][ T976] usb 9-1: config 0 descriptor?? [ 397.814381][ T976] igorplugusb 9-1:0.0: incorrect number of endpoints [ 399.476500][ T976] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 399.673155][ T976] usb 6-1: config 0 has no interfaces? [ 399.687898][ T976] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 399.735404][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.743576][ T976] usb 6-1: Product: syz [ 399.871095][ T976] usb 6-1: Manufacturer: syz [ 399.888796][ T976] usb 6-1: SerialNumber: syz [ 399.945425][ T976] usb 6-1: config 0 descriptor?? [ 400.258253][ T9559] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.331373][ T9573] netlink: 56 bytes leftover after parsing attributes in process `syz.9.885'. [ 400.370605][ T9559] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 400.382024][ T6750] usb 6-1: USB disconnect, device number 14 [ 400.681949][ T976] usb 9-1: USB disconnect, device number 26 [ 401.346081][ T9596] netlink: 32 bytes leftover after parsing attributes in process `syz.9.892'. [ 401.576767][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.894'. [ 402.223716][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.902'. [ 402.275180][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.6.902'. [ 402.512528][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.901'. [ 402.862936][ T5859] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 403.825566][ T976] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 404.109709][ T976] usb 6-1: config 0 has no interfaces? [ 404.161491][ T976] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 404.280010][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.390511][ T976] usb 6-1: Product: syz [ 404.394758][ T976] usb 6-1: Manufacturer: syz [ 404.478187][ T976] usb 6-1: SerialNumber: syz [ 404.560138][ T976] usb 6-1: config 0 descriptor?? [ 405.028122][ T9677] pimreg: entered allmulticast mode [ 405.033258][ T9677] pimreg: left allmulticast mode [ 407.135217][ T5925] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 407.517923][ T5925] usb 9-1: Using ep0 maxpacket: 8 [ 407.596322][ T5925] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 407.645151][ T5925] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 407.677404][ T5925] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 407.745304][ T5925] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.825900][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.918711][ T5925] usbtmc 9-1:16.0: bulk endpoints not found [ 408.045198][ T976] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 408.131799][ T6750] usb 6-1: USB disconnect, device number 15 [ 408.265232][ T976] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 408.305382][ T976] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 408.356653][ T976] usb 7-1: Product: syz [ 408.361317][ T976] usb 7-1: SerialNumber: syz [ 408.401026][ T976] usb 7-1: config 0 descriptor?? [ 408.638735][ T976] hso 7-1:0.0: Failed to find BULK IN ep [ 408.841795][ T6765] usb 7-1: USB disconnect, device number 14 [ 409.150168][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.923'. [ 409.296187][ T6765] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 409.457253][ T6765] usb 10-1: Using ep0 maxpacket: 8 [ 409.488653][ T6765] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 409.517300][ T6765] usb 10-1: config 0 has no interface number 0 [ 409.536114][ T6765] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 409.571982][ T6765] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.606021][ T6765] usb 10-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 409.637595][ T6765] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.690301][ T6765] usb 10-1: config 0 descriptor?? [ 409.745037][ T6765] hso 10-1:0.1: Failed to find BULK IN ep [ 409.887261][ T5925] usb 9-1: USB disconnect, device number 27 [ 409.995687][ T9758] netlink: 996 bytes leftover after parsing attributes in process `syz.8.928'. [ 410.094755][ T6765] usb 10-1: USB disconnect, device number 19 [ 410.245945][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.930'. [ 410.563430][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.932'. [ 410.578366][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.8.932'. [ 410.698844][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.932'. [ 410.965158][ T6765] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 411.208599][ T6765] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.219790][ T6765] usb 7-1: config 0 has no interfaces? [ 411.225622][ T6765] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.234880][ T6765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.256852][ T6765] usb 7-1: config 0 descriptor?? [ 411.345574][ T5925] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 411.586660][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 411.612828][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 411.665559][ T5925] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 411.756969][ T6750] usb 7-1: USB disconnect, device number 15 [ 411.807525][ T5925] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.836181][ T5925] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.861344][ T5925] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.897892][ T5925] usb 10-1: config 0 descriptor?? [ 412.025464][ T5990] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 412.166261][ T5990] usb 6-1: device descriptor read/64, error -71 [ 412.344175][ T5925] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 412.415586][ T5990] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 412.555423][ T5990] usb 6-1: device descriptor read/64, error -71 [ 412.667338][ T5990] usb usb6-port1: attempt power cycle [ 412.870025][ T9815] FAULT_INJECTION: forcing a failure. [ 412.870025][ T9815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.883954][ T9815] CPU: 1 UID: 0 PID: 9815 Comm: syz.7.940 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 412.883984][ T9815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.884003][ T9815] Call Trace: [ 412.884012][ T9815] [ 412.884022][ T9815] dump_stack_lvl+0x189/0x250 [ 412.884052][ T9815] ? __pfx____ratelimit+0x10/0x10 [ 412.884077][ T9815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.884102][ T9815] ? __pfx__printk+0x10/0x10 [ 412.884130][ T9815] ? __might_fault+0xb0/0x130 [ 412.884172][ T9815] should_fail_ex+0x414/0x560 [ 412.884200][ T9815] fpu__restore_sig+0x1bb/0x1100 [ 412.884242][ T9815] ? __lock_acquire+0xab9/0xd20 [ 412.884269][ T9815] ? __pfx_fpu__restore_sig+0x10/0x10 [ 412.884332][ T9815] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 412.884361][ T9815] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 412.884392][ T9815] ? _raw_spin_unlock_irq+0x2e/0x50 [ 412.884444][ T9815] ? rcu_is_watching+0x15/0xb0 [ 412.884475][ T9815] ? do_syscall_64+0xbe/0x3b0 [ 412.884504][ T9815] do_syscall_64+0xfa/0x3b0 [ 412.884527][ T9815] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.884549][ T9815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.884570][ T9815] ? clear_bhb_loop+0x60/0xb0 [ 412.884595][ T9815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.884620][ T9815] RIP: 0033:0x7f0c5e98e9a9 [ 412.884639][ T9815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.884657][ T9815] RSP: 002b:00007f0c5f7b1038 EFLAGS: 00000246 [ 412.884676][ T9815] RAX: fffffffffffffff2 RBX: 00007f0c5ebb5fa0 RCX: 00007f0c5e98e9a9 [ 412.884691][ T9815] RDX: 0000200000000380 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 412.884706][ T9815] RBP: 00007f0c5f7b1090 R08: 0000000000000000 R09: 0000000000000000 [ 412.884720][ T9815] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 412.884732][ T9815] R13: 0000000000000000 R14: 00007f0c5ebb5fa0 R15: 00007f0c5ecdfa28 [ 412.884764][ T9815] [ 413.155241][ T5990] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 413.206878][ T5990] usb 6-1: device descriptor read/8, error -71 [ 413.505200][ T5990] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 413.566907][ T5990] usb 6-1: device descriptor read/8, error -71 [ 413.715668][ T5990] usb usb6-port1: unable to enumerate USB device [ 413.735307][ T5938] usb 10-1: reset high-speed USB device number 20 using dummy_hcd [ 413.815295][ T6750] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 413.926768][ T5938] usb 10-1: device descriptor read/64, error -32 [ 413.948124][ T6750] usb 9-1: device descriptor read/64, error -71 [ 414.185624][ T6750] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 414.209506][ T5938] usb 10-1: reset high-speed USB device number 20 using dummy_hcd [ 414.341006][ T6750] usb 9-1: device descriptor read/64, error -71 [ 414.366385][ T5938] usb 10-1: device descriptor read/64, error -32 [ 414.464417][ T6750] usb usb9-port1: attempt power cycle [ 414.635145][ T5938] usb 10-1: reset high-speed USB device number 20 using dummy_hcd [ 414.682379][ T5938] usb 10-1: device descriptor read/8, error -71 [ 414.815280][ T5990] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 414.823165][ T6750] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 414.892300][ T6750] usb 9-1: device descriptor read/8, error -71 [ 414.965596][ T5990] usb 7-1: device descriptor read/64, error -71 [ 415.061247][ T9864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 415.085659][ T9868] binder: BINDER_SET_CONTEXT_MGR already set [ 415.094462][ T9868] binder: 9866:9868 ioctl 4018620d 2000000000c0 returned -16 [ 415.145425][ T6750] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 415.186034][ T6750] usb 9-1: device descriptor read/8, error -71 [ 415.246298][ T5990] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 415.305900][ T6750] usb usb9-port1: unable to enumerate USB device [ 415.395217][ T5990] usb 7-1: device descriptor read/64, error -71 [ 415.529638][ T5990] usb usb7-port1: attempt power cycle [ 415.672267][ T5925] usb 10-1: USB disconnect, device number 20 [ 415.935467][ T5990] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 415.997136][ T5990] usb 7-1: device descriptor read/8, error -71 [ 416.245415][ T5990] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 416.277399][ T5990] usb 7-1: device descriptor read/8, error -71 [ 416.388134][ T5990] usb usb7-port1: unable to enumerate USB device [ 416.987819][ T9889] PKCS7: Unknown OID: [5] (bad) [ 417.003349][ T9889] PKCS7: Only support pkcs7_signedData type [ 417.030109][ T5990] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 417.435572][ T5990] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.494705][ T5990] usb 10-1: config 0 has no interfaces? [ 417.508818][ T5990] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 417.598399][ T5990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.662314][ T5990] usb 10-1: config 0 descriptor?? [ 418.211254][ T6750] usb 10-1: USB disconnect, device number 21 [ 418.475256][ T5854] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 418.635315][ T5854] usb 7-1: Using ep0 maxpacket: 8 [ 418.646291][ T5854] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 418.695935][ T5854] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 418.716907][ T5854] usb 7-1: config 1 interface 0 has no altsetting 0 [ 418.733459][ T5854] usb 7-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 418.773660][ T5854] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.809857][ T5854] usb 7-1: Product: Ｄ攬䵈㤯ɬ聐掚銵ජ佝 [ 418.841791][ T5854] usb 7-1: Manufacturer: ਩퍩仪ᗘ걥쑝䪢⧹肸颧嵍ᦈ㍔᪅龜轉 [ 418.883475][ T5854] usb 7-1: SerialNumber: 流䡆鞐ᶖ彋窫䵤逵睔ᷣ蛠ꚷ奄袤斊䟴叕ൽ덱㴪늢毼隉⧢ᴑ黛ֻ䒖벸⌲툗뵙뇎Ⲉ秲흜⫼糲엫騥湓ఙ뷩䉀챝〱ᄘ読壂䀙喱榬醡ᝂษ쐰蘖꞉합ꌇ姮菢绿袗ẙ틕핟孛ૣᗴ깪㻕ﳺᴫ｣鄃驇鰿ኛ澆朆뙀簓➖鱷옘桖 [ 418.912452][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.955190][ T9902] binder: BINDER_SET_CONTEXT_MGR already set [ 418.961575][ T9902] binder: 9901:9902 ioctl 4018620d 2000000002c0 returned -16 [ 419.315220][ T5854] usbhid 7-1:1.0: can't add hid device: -71 [ 419.321274][ T5854] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 419.407933][ T5854] usb 7-1: USB disconnect, device number 20 [ 420.198570][ T9912] loop8: detected capacity change from 0 to 16384 [ 420.245910][ T30] audit: type=1326 audit(1753542224.792:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 420.504658][ T30] audit: type=1326 audit(1753542224.792:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 420.662135][ T30] audit: type=1326 audit(1753542224.792:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 420.818797][ T30] audit: type=1326 audit(1753542224.792:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 420.930487][ T9920] IPv6: Can't replace route, no match found [ 420.995275][ T30] audit: type=1326 audit(1753542224.792:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 421.073351][ T9924] bridge2: entered allmulticast mode [ 421.182774][ T30] audit: type=1326 audit(1753542224.792:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 421.346420][ T30] audit: type=1326 audit(1753542224.792:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 421.391876][ T9932] netlink: 116 bytes leftover after parsing attributes in process `syz.9.969'. [ 421.468602][ T30] audit: type=1326 audit(1753542224.792:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 421.587141][ T30] audit: type=1326 audit(1753542224.792:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 421.705372][ T30] audit: type=1326 audit(1753542224.792:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9910 comm="syz.8.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b18d8e9a9 code=0x7ffc0000 [ 421.922078][ T9940] netlink: 'syz.9.974': attribute type 1 has an invalid length. [ 422.131847][ T5990] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 422.144812][ T9940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.225310][ T9944] vlan2: entered allmulticast mode [ 422.249784][ T9944] geneve1: entered allmulticast mode [ 422.276904][ T9944] bond2: (slave vlan2): making interface the new active one [ 422.285331][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 422.296233][ T9944] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 422.296232][ T5990] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 422.296265][ T5990] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 422.340365][ T5990] usb 7-1: config 1 interface 0 has no altsetting 0 [ 422.358513][ T5990] usb 7-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 422.425130][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.443450][ T5990] usb 7-1: Product: Ｄ攬䵈㤯ɬ聐掚銵ජ佝 [ 422.451531][ T5990] usb 7-1: Manufacturer: ਩퍩仪ᗘ걥쑝䪢⧹肸颧嵍ᦈ㍔᪅龜轉 [ 422.517494][ T5990] usb 7-1: SerialNumber: 流䡆鞐ᶖ彋窫䵤逵睔ᷣ蛠ꚷ奄袤斊䟴叕ൽ덱㴪늢毼隉⧢ᴑ黛ֻ䒖벸⌲툗뵙뇎Ⲉ秲흜⫼糲엫騥湓ఙ뷩䉀챝〱ᄘ読壂䀙喱榬醡ᝂษ쐰蘖꞉합ꌇ姮菢绿袗ẙ틕핟孛ૣᗴ깪㻕ﳺᴫ｣鄃驇鰿ኛ澆朆뙀簓➖鱷옘桖 [ 422.900456][ T5990] usbhid 7-1:1.0: can't add hid device: -71 [ 422.942024][ T5990] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 422.975181][ T5854] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 423.004393][ T5990] usb 7-1: USB disconnect, device number 21 [ 423.137296][ T5854] usb 10-1: device descriptor read/64, error -71 [ 423.416533][ T5854] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 423.641911][ T5854] usb 10-1: device descriptor read/64, error -71 [ 423.764198][ T5854] usb usb10-port1: attempt power cycle [ 424.156236][ T5854] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 424.232100][ T5854] usb 10-1: device descriptor read/8, error -71 [ 424.537435][ T5854] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 424.571179][ T5854] usb 10-1: device descriptor read/8, error -71 [ 424.685679][ T5854] usb usb10-port1: unable to enumerate USB device [ 424.690491][ T9991] loop3: detected capacity change from 0 to 1 [ 424.705779][ T8636] Dev loop3: unable to read RDB block 1 [ 424.711491][ T8636] loop3: unable to read partition table [ 424.736156][ T8636] loop3: partition table beyond EOD, truncated [ 424.785628][ T9991] Dev loop3: unable to read RDB block 1 [ 424.809584][ T9991] loop3: unable to read partition table [ 424.852985][ T9991] loop3: partition table beyond EOD, truncated [ 424.875172][ T9991] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 425.849455][T10002] blktrace: Concurrent blktraces are not allowed on loop3 [ 426.385224][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 427.046999][T10021] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 427.055542][T10021] syzkaller1: persist disabled [ 427.170885][T10021] bridge_slave_0: left allmulticast mode [ 427.225174][T10021] bridge_slave_0: left promiscuous mode [ 427.255755][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.270512][T10021] bridge_slave_1: left allmulticast mode [ 427.276786][T10021] bridge_slave_1: left promiscuous mode [ 427.282785][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.306731][T10021] bond0: (slave bond_slave_0): Releasing backup interface [ 427.332623][T10021] bond0: (slave bond_slave_1): Releasing backup interface [ 427.346965][T10021] team_slave_0: left promiscuous mode [ 427.374114][T10021] team0: Port device team_slave_0 removed [ 427.381622][T10021] team_slave_1: left promiscuous mode [ 427.404643][T10021] team0: Port device team_slave_1 removed [ 427.428021][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.519312][T10021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.643258][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.668198][T10021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.338581][ T5990] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 428.576185][ T5990] usb 9-1: Using ep0 maxpacket: 8 [ 428.623234][ T5990] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 428.861914][ T5990] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 428.965415][ T976] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 429.118254][ T5990] usb 9-1: config 1 interface 0 has no altsetting 0 [ 429.193701][ T5990] usb 9-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 429.209254][ T976] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.209998][ T5990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.265252][ T5990] usb 9-1: Product: Ｄ攬䵈㤯ɬ聐掚銵ජ佝 [ 429.265308][ T5990] usb 9-1: Manufacturer: ਩퍩仪ᗘ걥쑝䪢⧹肸颧嵍ᦈ㍔᪅龜轉 [ 429.265357][ T5990] usb 9-1: SerialNumber: 流䡆鞐ᶖ彋窫䵤逵睔ᷣ蛠ꚷ奄袤斊䟴叕ൽ덱㴪늢毼隉⧢ᴑ黛ֻ䒖벸⌲툗뵙뇎Ⲉ秲흜⫼糲엫騥湓ఙ뷩䉀챝〱ᄘ読壂䀙喱榬醡ᝂษ쐰蘖꞉합ꌇ姮菢绿袗ẙ틕핟孛ૣᗴ깪㻕ﳺᴫ｣鄃驇鰿ኛ澆朆뙀簓➖鱷옘桖 [ 429.268757][ T976] usb 6-1: config 0 has no interfaces? [ 429.268800][ T976] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 429.268825][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.285969][ T976] usb 6-1: config 0 descriptor?? [ 429.530119][ T5990] usbhid 9-1:1.0: can't add hid device: -71 [ 429.530237][ T5990] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 429.623447][ T5990] usb 9-1: USB disconnect, device number 32 [ 429.701660][ T5925] usb 6-1: USB disconnect, device number 20 [ 430.031698][T10054] netlink: 996 bytes leftover after parsing attributes in process `syz.7.1000'. [ 430.558170][T10067] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 430.605581][ T5939] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 430.658965][T10070] netlink: zone id is out of range [ 430.679071][T10070] netlink: zone id is out of range [ 430.689827][T10070] netlink: zone id is out of range [ 430.695294][T10070] netlink: zone id is out of range [ 430.704453][T10070] netlink: zone id is out of range [ 430.710139][T10070] netlink: zone id is out of range [ 430.716201][T10070] netlink: zone id is out of range [ 430.723361][T10070] netlink: zone id is out of range [ 430.729617][T10070] netlink: zone id is out of range [ 430.981272][ T5939] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.992267][ T5939] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.031841][ T5939] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 431.053692][ T5939] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 431.103861][ T5939] usb 9-1: SerialNumber: syz [ 432.740576][T10083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.741270][T10083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.840799][T10080] veth1_macvtap: left promiscuous mode [ 432.840827][T10080] macsec0: entered promiscuous mode [ 432.840844][T10080] macsec0: entered allmulticast mode [ 432.965195][ T976] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 433.496101][ T5939] usb 9-1: 0:2 : does not exist [ 433.548308][ T5939] usb 9-1: unit 10 not found! [ 433.697156][ T5939] usb 9-1: USB disconnect, device number 33 [ 433.987578][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.025364][ T5990] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 434.265445][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 434.288623][ T5990] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 434.299413][ T5939] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 434.399976][T10112] input: syz0 as /devices/virtual/input/input33 [ 434.412117][ T5990] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 434.495540][ T5939] usb 9-1: Using ep0 maxpacket: 16 [ 434.587158][T10115] FAULT_INJECTION: forcing a failure. [ 434.587158][T10115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.602107][T10115] CPU: 0 UID: 0 PID: 10115 Comm: syz.9.1015 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 434.602154][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 434.602167][T10115] Call Trace: [ 434.602175][T10115] [ 434.602185][T10115] dump_stack_lvl+0x189/0x250 [ 434.602215][T10115] ? __pfx____ratelimit+0x10/0x10 [ 434.602240][T10115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.602266][T10115] ? __pfx__printk+0x10/0x10 [ 434.602307][T10115] should_fail_ex+0x414/0x560 [ 434.602336][T10115] _copy_to_user+0x31/0xb0 [ 434.602369][T10115] simple_read_from_buffer+0xe1/0x170 [ 434.602406][T10115] proc_fail_nth_read+0x1df/0x250 [ 434.602431][T10115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.602456][T10115] ? rw_verify_area+0x258/0x650 [ 434.602482][T10115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.602505][T10115] vfs_read+0x1fd/0x980 [ 434.602538][T10115] ? __pfx___mutex_lock+0x10/0x10 [ 434.602565][T10115] ? __pfx_vfs_read+0x10/0x10 [ 434.602594][T10115] ? __fget_files+0x2a/0x420 [ 434.602618][T10115] ? __fget_files+0x3a0/0x420 [ 434.602636][T10115] ? __fget_files+0x2a/0x420 [ 434.602665][T10115] ksys_read+0x145/0x250 [ 434.602695][T10115] ? __pfx_ksys_read+0x10/0x10 [ 434.602729][T10115] ? do_syscall_64+0xbe/0x3b0 [ 434.602758][T10115] do_syscall_64+0xfa/0x3b0 [ 434.602781][T10115] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.602803][T10115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.602824][T10115] ? clear_bhb_loop+0x60/0xb0 [ 434.602849][T10115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.602870][T10115] RIP: 0033:0x7f2b1b78d3bc [ 434.602898][T10115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 434.602916][T10115] RSP: 002b:00007f2b1c560030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.602938][T10115] RAX: ffffffffffffffda RBX: 00007f2b1b9b5fa0 RCX: 00007f2b1b78d3bc [ 434.602953][T10115] RDX: 000000000000000f RSI: 00007f2b1c5600a0 RDI: 0000000000000004 [ 434.602966][T10115] RBP: 00007f2b1c560090 R08: 0000000000000000 R09: 0000000000000000 [ 434.602979][T10115] R10: 0000000000000019 R11: 0000000000000246 R12: 0000000000000001 [ 434.602991][T10115] R13: 0000000000000000 R14: 00007f2b1b9b5fa0 R15: 00007f2b1badfa28 [ 434.603024][T10115] [ 434.836497][ T5990] usb 7-1: config 1 interface 0 has no altsetting 0 [ 434.968142][ T5990] usb 7-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 434.980199][ T5990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.988338][ T5990] usb 7-1: Product: Ｄ攬䵈㤯ɬ聐掚銵ජ佝 [ 434.994821][ T5990] usb 7-1: Manufacturer: ਩퍩仪ᗘ걥쑝䪢⧹肸颧嵍ᦈ㍔᪅龜轉 [ 435.003982][ T5990] usb 7-1: SerialNumber: 流䡆鞐ᶖ彋窫䵤逵睔ᷣ蛠ꚷ奄袤斊䟴叕ൽ덱㴪늢毼隉⧢ᴑ黛ֻ䒖벸⌲툗뵙뇎Ⲉ秲흜⫼糲엫騥湓ఙ뷩䉀챝〱ᄘ読壂䀙喱榬醡ᝂษ쐰蘖꞉합ꌇ姮菢绿袗ẙ틕핟孛ૣᗴ깪㻕ﳺᴫ｣鄃驇鰿ኛ澆朆뙀簓➖鱷옘桖 [ 435.605191][ T976] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 435.767773][ T976] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.778687][ T976] usb 10-1: config 0 has no interfaces? [ 435.798785][ T976] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.879246][ T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.551223][ T976] usb 10-1: config 0 descriptor?? [ 436.742653][ T5990] usbhid 7-1:1.0: can't add hid device: -71 [ 436.773107][ T5990] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 436.953725][ T5990] usb 7-1: USB disconnect, device number 22 [ 437.043091][ T9] usb 10-1: USB disconnect, device number 27 [ 437.646579][T10143] net_ratelimit: 40 callbacks suppressed [ 437.646616][T10143] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 437.871765][ T5939] usb 9-1: unable to get BOS descriptor or descriptor too short [ 437.896137][ T5939] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 437.922534][ T5939] usb 9-1: can't read configurations, error -71 [ 438.386909][T10156] tipc: Started in network mode [ 438.392522][T10156] tipc: Node identity 4a3b3bfad4b5, cluster identity 4711 [ 438.405361][T10156] tipc: Enabled bearer , priority 0 [ 438.434995][T10156] syzkaller0: entered promiscuous mode [ 438.475234][T10156] syzkaller0: entered allmulticast mode [ 438.558578][T10156] tipc: Resetting bearer [ 438.629893][T10153] tipc: Resetting bearer [ 438.830650][T10153] tipc: Disabling bearer [ 439.243885][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 439.485160][ T5990] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 439.498506][ T6750] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 439.555876][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 439.572412][ T9] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 439.677624][ T5990] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.693916][ T9] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 439.768516][ T5990] usb 10-1: config 0 has no interfaces? [ 439.787045][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 439.823971][ T5990] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 439.846917][ T9] usb 7-1: New USB device found, idVendor=18d1, idProduct=503d, bcdDevice= 0.40 [ 439.859505][ T5990] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 439.875340][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.925618][ T5990] usb 10-1: Product: syz [ 439.931792][ T6750] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.935146][ T5990] usb 10-1: Manufacturer: syz [ 439.963921][ T9] usb 7-1: Product: Ｄ攬䵈㤯ɬ聐掚銵ජ佝 [ 439.976550][ T6750] usb 6-1: config 0 has no interfaces? [ 440.017094][ T6750] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 440.038917][ T6750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.101019][ T6750] usb 6-1: config 0 descriptor?? [ 440.138558][ T9] usb 7-1: Manufacturer: ਩퍩仪ᗘ걥쑝䪢⧹肸颧嵍ᦈ㍔᪅龜轉 [ 440.224917][ T5990] usb 10-1: config 0 descriptor?? [ 440.251276][ T9] usb 7-1: SerialNumber: 流䡆鞐ᶖ彋窫䵤逵睔ᷣ蛠ꚷ奄袤斊䟴叕ൽ덱㴪늢毼隉⧢ᴑ黛ֻ䒖벸⌲툗뵙뇎Ⲉ秲흜⫼糲엫騥湓ఙ뷩䉀챝〱ᄘ読壂䀙喱榬醡ᝂษ쐰蘖꞉합ꌇ姮菢绿袗ẙ틕핟孛ૣᗴ깪㻕ﳺᴫ｣鄃驇鰿ኛ澆朆뙀簓➖鱷옘桖 [ 440.335426][ T5939] usb 6-1: USB disconnect, device number 21 [ 440.799131][T10175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.815953][T10175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.528508][ T5990] usb 10-1: USB disconnect, device number 28 [ 441.909735][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 441.942858][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 442.016966][ T9] usb 7-1: USB disconnect, device number 23 [ 442.063260][T10207] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1036'. [ 442.094058][T10207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.101496][T10207] IPv6: NLM_F_CREATE should be set when creating new route [ 443.995225][ T6750] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 444.009166][T10243] FAULT_INJECTION: forcing a failure. [ 444.009166][T10243] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 444.055488][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.5.1045 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 444.055520][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.055533][T10243] Call Trace: [ 444.055540][T10243] [ 444.055550][T10243] dump_stack_lvl+0x189/0x250 [ 444.055580][T10243] ? __pfx____ratelimit+0x10/0x10 [ 444.055604][T10243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.055628][T10243] ? __pfx__printk+0x10/0x10 [ 444.055658][T10243] ? fs_reclaim_acquire+0x7d/0x100 [ 444.055689][T10243] should_fail_ex+0x414/0x560 [ 444.055717][T10243] prepare_alloc_pages+0x213/0x610 [ 444.055747][T10243] __alloc_frozen_pages_noprof+0x123/0x370 [ 444.055774][T10243] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.055807][T10243] ? policy_nodemask+0x27c/0x720 [ 444.055836][T10243] ? look_up_lock_class+0x74/0x170 [ 444.055863][T10243] alloc_pages_mpol+0x232/0x4a0 [ 444.055899][T10243] vma_alloc_folio_noprof+0xe4/0x200 [ 444.055941][T10243] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 444.055985][T10243] folio_prealloc+0x30/0x180 [ 444.056017][T10243] do_wp_page+0x1231/0x5800 [ 444.056067][T10243] ? __pfx_do_wp_page+0x10/0x10 [ 444.056089][T10243] ? do_raw_spin_lock+0x121/0x290 [ 444.056122][T10243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 444.056162][T10243] __handle_mm_fault+0x1144/0x5620 [ 444.056188][T10243] ? __lock_acquire+0xab9/0xd20 [ 444.056229][T10243] ? __pfx___handle_mm_fault+0x10/0x10 [ 444.056257][T10243] ? lock_vma_under_rcu+0xf8/0x710 [ 444.056298][T10243] ? lock_vma_under_rcu+0xf8/0x710 [ 444.056329][T10243] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 444.056367][T10243] handle_mm_fault+0x40a/0x8e0 [ 444.056407][T10243] do_user_addr_fault+0xa81/0x1390 [ 444.056435][T10243] ? rcu_is_watching+0x15/0xb0 [ 444.056460][T10243] ? trace_page_fault_user+0x84/0x1e0 [ 444.056483][T10243] exc_page_fault+0x76/0xf0 [ 444.056508][T10243] asm_exc_page_fault+0x26/0x30 [ 444.056527][T10243] RIP: 0033:0x7fb572b484e5 [ 444.056546][T10243] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 444.056563][T10243] RSP: 002b:00007fb5709f4de0 EFLAGS: 00010293 [ 444.056583][T10243] RAX: 0000000000000008 RBX: 00007fb5738e7d60 RCX: 0000000000000000 [ 444.056596][T10243] RDX: 0000000000000000 RSI: 00007fb572c4e83e RDI: 00007fb5738e7d60 [ 444.056610][T10243] RBP: 00007fb5709f4f00 R08: 0000000000000000 R09: 0000000000000005 [ 444.056623][T10243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb572c4e3e0 [ 444.056636][T10243] R13: 0000000000000016 R14: 00007fb572d86440 R15: 0000000000000000 [ 444.056668][T10243] [ 444.056910][T10243] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 444.365247][ T6750] usb 7-1: Using ep0 maxpacket: 32 [ 444.393353][ T6750] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.442631][ T6750] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 444.489224][ T6750] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.515789][ T6750] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.528279][ T6750] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.536895][ T6750] usb 7-1: Product: syz [ 444.541143][ T6750] usb 7-1: Manufacturer: syz [ 444.548766][ T6750] usb 7-1: SerialNumber: syz [ 444.833974][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1047'. [ 444.991316][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1044'. [ 445.081969][ T6750] usb 7-1: USB disconnect, device number 24 [ 445.339437][ T7923] udevd[7923]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.375644][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1044'. [ 445.585408][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.591864][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.123761][T10292] netlink: 'syz.5.1051': attribute type 1 has an invalid length. [ 446.387566][T10292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.855460][ T6765] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 447.048381][ T6765] usb 9-1: Using ep0 maxpacket: 32 [ 447.072694][ T6765] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 447.101515][ T6765] usb 9-1: config 0 has no interface number 0 [ 447.123953][ T6765] usb 9-1: config 0 interface 89 has no altsetting 0 [ 447.163447][ T6765] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 447.236944][ T6765] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.246472][ T6765] usb 9-1: Product: syz [ 447.250710][ T6765] usb 9-1: Manufacturer: syz [ 447.259226][ T6765] usb 9-1: SerialNumber: syz [ 447.301075][ T6765] usb 9-1: config 0 descriptor?? [ 447.315639][ T6765] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 447.328239][ T6765] em28xx 9-1:0.89: Video interface 89 found: bulk [ 447.683510][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1059'. [ 447.843173][ T6765] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 447.979054][ T6765] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 448.161942][ T6765] em28xx 9-1:0.89: board has no eeprom [ 448.195721][T10337] program syz.9.1062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.242427][ T6765] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 448.250231][ T5990] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 448.262726][ T6765] em28xx 9-1:0.89: analog set to bulk mode. [ 448.290204][ T976] em28xx 9-1:0.89: Registering V4L2 extension [ 448.309886][ T6765] usb 9-1: USB disconnect, device number 36 [ 448.351062][ T6765] em28xx 9-1:0.89: Disconnecting em28xx [ 448.470962][ T5990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.695343][ T5990] usb 7-1: config 0 has no interfaces? [ 448.701042][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050379800: rx timeout, send abort [ 448.715821][ T5990] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 448.763863][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.819311][ T976] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 448.851461][ T976] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 448.862409][ T976] em28xx 9-1:0.89: No AC97 audio processor [ 448.879860][ T5990] usb 7-1: config 0 descriptor?? [ 448.909789][ T976] usb 9-1: Decoder not found [ 448.930083][ T976] em28xx 9-1:0.89: failed to create media graph [ 448.941548][ T976] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 449.057716][ T976] em28xx 9-1:0.89: Registering snapshot button... [ 449.104331][ T976] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input34 [ 449.149430][ T976] em28xx 9-1:0.89: Remote control support is not available for this card. [ 449.173573][ T6765] em28xx 9-1:0.89: Closing input extension [ 449.182811][ T6765] em28xx 9-1:0.89: Deregistering snapshot button [ 449.201125][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050379400: rx timeout, send abort [ 449.209994][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050379800: abort rx timeout. Force session deactivation [ 449.247091][ T6765] em28xx 9-1:0.89: Freeing device [ 449.420632][ T976] usb 7-1: USB disconnect, device number 25 [ 449.709641][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050379400: abort rx timeout. Force session deactivation [ 449.905680][ T6765] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 450.090716][ T6765] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 450.109714][ T6765] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x37, changing to 0x7 [ 450.153559][ T6765] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 26681, setting to 1024 [ 450.177441][ T6765] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 450.211370][ T6765] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 450.261802][ T6765] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 450.354089][ T6765] usb 9-1: Manufacturer: syz [ 450.419815][ T6765] usb 9-1: config 0 descriptor?? [ 450.566415][T10351] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 450.589679][ T6765] igorplugusb 9-1:0.0: endpoint incorrect [ 451.224860][T10373] input: syz0 as /devices/virtual/input/input35 [ 451.825227][ T5925] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 451.954295][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1073'. [ 452.005110][ T5925] usb 6-1: Using ep0 maxpacket: 16 [ 452.044926][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.099546][ T5925] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 452.212659][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.259282][ T5925] usb 6-1: config 0 descriptor?? [ 452.670881][T10378] netlink: 182584 bytes leftover after parsing attributes in process `syz.5.1071'. [ 452.703684][ T5925] aquacomputer_d5next 0003:0C70:F00E.000B: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.5-1/input0 [ 452.948886][ T5925] usb 6-1: USB disconnect, device number 22 [ 453.105431][ T6757] usb 9-1: USB disconnect, device number 37 [ 453.232425][T10398] fido_id[10398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 453.452213][ T5990] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 453.536639][T10418] ptrace attach of "./syz-executor exec"[7785] was attempted by "./syz-executor exec"[10418] [ 453.666331][ T5990] usb 7-1: Using ep0 maxpacket: 32 [ 453.680862][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1079'. [ 453.727270][ T5990] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 453.801674][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.863474][T10440] random: crng reseeded on system resumption [ 453.981046][ T5990] usb 7-1: config 0 descriptor?? [ 454.103313][ T5990] gspca_main: sq930x-2.14.0 probing 041e:403c [ 454.187249][T10449] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 455.302885][ T5990] gspca_sq930x: ucbus_write failed -71 [ 455.343453][ T5990] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 455.437879][ T5990] usb 7-1: USB disconnect, device number 26 [ 496.778236][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 509.334898][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.356931][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.083993][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.110434][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.915263][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 685.352577][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 693.613143][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.879633][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.901494][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 729.474943][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 729.481970][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10481/1:b..l [ 729.490511][ C1] rcu: (detected by 1, t=10503 jiffies, g=52641, q=1355432 ncpus=2) [ 729.498630][ C1] task:dhcpcd-run-hook state:R running task stack:24104 pid:10481 tgid:10481 ppid:5514 task_flags:0x400000 flags:0x00004002 [ 729.513515][ C1] Call Trace: [ 729.516845][ C1] [ 729.519819][ C1] __schedule+0x16fd/0x4cf0 [ 729.524386][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 729.529727][ C1] ? __pfx___schedule+0x10/0x10 [ 729.534629][ C1] ? __switch_to+0xd74/0x1600 [ 729.539361][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 729.544695][ C1] preempt_schedule_irq+0xb5/0x150 [ 729.549852][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 729.555629][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 729.561476][ C1] irqentry_exit+0x6f/0x90 [ 729.565926][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.571946][ C1] RIP: 0010:lock_acquire+0xcd/0x360 [ 729.577193][ C1] Code: 0f 85 eb 00 00 00 65 48 8b 04 25 08 d0 9f 92 83 b8 ec 0a 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 <4c> 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 e5 a2 9a 8d e8 [ 729.596852][ C1] RSP: 0018:ffffc900034e6ef8 EFLAGS: 00000246 [ 729.602962][ C1] RAX: ffff8880315f3c00 RBX: 0000000000000000 RCX: dcf8a1258d076600 [ 729.610996][ C1] RDX: 0000000000000000 RSI: ffffffff8172ab02 RDI: 1ffffffff1c27e1c [ 729.619035][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: 0000000000000000 [ 729.627059][ C1] R10: ffffc900034e70b8 R11: ffffffff81acfe50 R12: 0000000000000002 [ 729.635082][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000 [ 729.643114][ C1] ? unwind_next_frame+0xa5/0x2390 [ 729.648281][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.654493][ C1] ? unwind_next_frame+0xc2/0x2390 [ 729.659669][ C1] ? unwind_next_frame+0xa5/0x2390 [ 729.664829][ C1] ? path_openat+0x2ee5/0x3830 [ 729.669644][ C1] ? unwind_next_frame+0xa5/0x2390 [ 729.674798][ C1] unwind_next_frame+0xc2/0x2390 [ 729.679778][ C1] ? unwind_next_frame+0xa5/0x2390 [ 729.684956][ C1] ? unwind_next_frame+0xa5/0x2390 [ 729.690121][ C1] ? vfs_open+0x3b/0x340 [ 729.694407][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 729.700614][ C1] arch_stack_walk+0x11c/0x150 [ 729.705518][ C1] ? path_openat+0x2ee5/0x3830 [ 729.710333][ C1] stack_trace_save+0x9c/0xe0 [ 729.715055][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 729.720488][ C1] save_stack+0xf5/0x1f0 [ 729.724798][ C1] ? __pfx_save_stack+0x10/0x10 [ 729.729693][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 729.735028][ C1] ? __put_partials+0x161/0x1c0 [ 729.739913][ C1] ? put_cpu_partial+0x17c/0x250 [ 729.744887][ C1] ? __slab_free+0x2f7/0x400 [ 729.749515][ C1] ? qlist_free_all+0x97/0x140 [ 729.754326][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 729.760005][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 729.765094][ C1] ? __kmalloc_noprof+0x224/0x4f0 [ 729.770162][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 729.775922][ C1] ? tomoyo_check_open_permission+0x1c1/0x3b0 [ 729.782025][ C1] ? security_file_open+0xb1/0x270 [ 729.787170][ C1] ? do_dentry_open+0x35e/0x1970 [ 729.792138][ C1] ? vfs_open+0x3b/0x340 [ 729.796412][ C1] ? path_openat+0x2ee5/0x3830 [ 729.801234][ C1] ? page_ext_put+0x97/0xc0 [ 729.805791][ C1] __reset_page_owner+0x71/0x1f0 [ 729.810791][ C1] __free_frozen_pages+0xc71/0xe70 [ 729.815962][ C1] __put_partials+0x161/0x1c0 [ 729.820692][ C1] put_cpu_partial+0x17c/0x250 [ 729.825495][ C1] ? put_cpu_partial+0x6d/0x250 [ 729.830391][ C1] __slab_free+0x2f7/0x400 [ 729.834853][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 729.840813][ C1] ? __phys_addr+0xd3/0x180 [ 729.845401][ C1] qlist_free_all+0x97/0x140 [ 729.850055][ C1] kasan_quarantine_reduce+0x148/0x160 [ 729.855556][ C1] __kasan_slab_alloc+0x22/0x80 [ 729.860451][ C1] __kmalloc_noprof+0x224/0x4f0 [ 729.865347][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 729.871150][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 729.876756][ C1] tomoyo_check_open_permission+0x1c1/0x3b0 [ 729.882691][ C1] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 729.888798][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 729.895295][ C1] ? tomoyo_file_open+0x165/0x220 [ 729.900371][ C1] security_file_open+0xb1/0x270 [ 729.905352][ C1] do_dentry_open+0x35e/0x1970 [ 729.910180][ C1] vfs_open+0x3b/0x340 [ 729.914285][ C1] ? path_openat+0x2ecd/0x3830 [ 729.919092][ C1] path_openat+0x2ee5/0x3830 [ 729.923727][ C1] ? arch_stack_walk+0xfc/0x150 [ 729.928655][ C1] ? __pfx_path_openat+0x10/0x10 [ 729.933628][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.939752][ C1] do_filp_open+0x1fa/0x410 [ 729.944301][ C1] ? __lock_acquire+0xab9/0xd20 [ 729.949197][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 729.954288][ C1] ? _raw_spin_unlock+0x28/0x50 [ 729.959177][ C1] ? alloc_fd+0x64c/0x6c0 [ 729.963565][ C1] do_sys_openat2+0x121/0x1c0 [ 729.968282][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 729.973535][ C1] ? rcu_is_watching+0x15/0xb0 [ 729.978347][ C1] __x64_sys_openat+0x138/0x170 [ 729.983247][ C1] do_syscall_64+0xfa/0x3b0 [ 729.987791][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.993887][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.000077][ C1] ? clear_bhb_loop+0x60/0xb0 [ 730.004797][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.010725][ C1] RIP: 0033:0x7fca26f6d407 [ 730.015191][ C1] RSP: 002b:00007ffebe4dbb70 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 730.023649][ C1] RAX: ffffffffffffffda RBX: 00007fca26e1dc80 RCX: 00007fca26f6d407 [ 730.031663][ C1] RDX: 0000000000080000 RSI: 000055d898c75fc8 RDI: ffffffffffffff9c [ 730.039674][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 730.047689][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d898c75fc8 [ 730.055699][ C1] R13: 000055d898c6d910 R14: 0000000000000000 R15: 0000000000000000 [ 730.063729][ C1] [ 730.066782][ C1] rcu: rcu_preempt kthread starved for 1270 jiffies! g52641 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 730.077924][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 730.087932][ C1] rcu: RCU grace-period kthread stack dump: [ 730.093849][ C1] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 730.107408][ C1] Call Trace: [ 730.110726][ C1] [ 730.113690][ C1] __schedule+0x16fd/0x4cf0 [ 730.118252][ C1] ? schedule+0x165/0x360 [ 730.122634][ C1] ? __pfx___schedule+0x10/0x10 [ 730.127550][ C1] ? schedule+0x91/0x360 [ 730.131832][ C1] schedule+0x165/0x360 [ 730.136032][ C1] schedule_timeout+0x12b/0x270 [ 730.140932][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 730.146350][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 730.152291][ C1] ? __pfx_process_timeout+0x10/0x10 [ 730.157626][ C1] ? prepare_to_swait_event+0x341/0x380 [ 730.163230][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 730.168130][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 730.174321][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 730.179686][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 730.184932][ C1] rcu_gp_kthread+0x99/0x390 [ 730.189569][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 730.194807][ C1] ? __kthread_parkme+0x7b/0x200 [ 730.199785][ C1] ? __kthread_parkme+0x1a1/0x200 [ 730.204857][ C1] kthread+0x711/0x8a0 [ 730.208978][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 730.214212][ C1] ? __pfx_kthread+0x10/0x10 [ 730.218851][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.224087][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.229322][ C1] ? __pfx_kthread+0x10/0x10 [ 730.233971][ C1] ret_from_fork+0x3fc/0x770 [ 730.238623][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 730.243781][ C1] ? __switch_to_asm+0x39/0x70 [ 730.248587][ C1] ? __switch_to_asm+0x33/0x70 [ 730.253419][ C1] ? __pfx_kthread+0x10/0x10 [ 730.258057][ C1] ret_from_fork_asm+0x1a/0x30 [ 730.262885][ C1] [ 730.265991][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 730.272342][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 730.284012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.294104][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 730.299431][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b 94 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 730.319083][ C1] RSP: 0018:ffffc90000a07ea0 EFLAGS: 00000206 [ 730.325198][ C1] RAX: 4c054482781f8800 RBX: 0000000000000000 RCX: 4c054482781f8800 [ 730.333207][ C1] RDX: 0000000000000000 RSI: ffffffff8db845d7 RDI: ffffffff8be28dc0 [ 730.341218][ C1] RBP: ffffffff89ded67d R08: 0000000000000000 R09: ffffffff89ded67d [ 730.349231][ C1] R10: dffffc0000000000 R11: ffffed100655c4c1 R12: 0000000000000002 [ 730.357246][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 730.365255][ C1] FS: 0000000000000000(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000 [ 730.374220][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 730.380834][ C1] CR2: 0000200000349000 CR3: 0000000079484000 CR4: 00000000003526f0 [ 730.388842][ C1] Call Trace: [ 730.392148][ C1] [ 730.395033][ C1] nf_hook+0xbe/0x380 [ 730.399045][ C1] ? nf_hook+0x9d/0x380 [ 730.403258][ C1] ? nf_hook+0x9d/0x380 [ 730.407445][ C1] ? __pfx_nf_hook+0x10/0x10 [ 730.412083][ C1] ? ip_fast_csum+0x1ee/0x2b0 [ 730.416806][ C1] __ip_local_out+0x4db/0x600 [ 730.421517][ C1] ? __pfx_dst_output+0x10/0x10 [ 730.426414][ C1] ip_local_out+0x26/0x70 [ 730.430792][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 730.436666][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 730.443040][ C1] ? nft_tproxy_eval+0x19e8/0x1c00 [ 730.448287][ C1] ? synproxy_pernet+0x45/0x270 [ 730.453232][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 730.458490][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 730.464255][ C1] ? nf_ip_checksum+0x13c/0x510 [ 730.469156][ C1] nft_synproxy_do_eval+0x345/0x570 [ 730.474405][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 730.480166][ C1] ? queue_work_on+0x115/0x270 [ 730.484974][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.490213][ C1] ? queue_work_on+0x1ed/0x270 [ 730.495029][ C1] nft_do_chain+0x409/0x1920 [ 730.499691][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.504931][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 730.510343][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 730.516197][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 730.521298][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 730.526545][ C1] nft_do_chain_inet+0x25d/0x340 [ 730.531520][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 730.537019][ C1] ? ipt_do_table+0x2a3/0x1640 [ 730.541838][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 730.547269][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 730.552777][ C1] nf_hook_slow+0xc5/0x220 [ 730.557248][ C1] NF_HOOK+0x206/0x3a0 [ 730.561384][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 730.567408][ C1] ? NF_HOOK+0x9a/0x3a0 [ 730.571607][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 730.576236][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 730.581571][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 730.587597][ C1] ? skb_dst+0x4f/0xd0 [ 730.591711][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 730.596781][ C1] NF_HOOK+0x30c/0x3a0 [ 730.600894][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 730.606051][ C1] ? NF_HOOK+0x9a/0x3a0 [ 730.610251][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 730.614893][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 730.619522][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 730.624687][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 730.629231][ C1] __netif_receive_skb+0x143/0x380 [ 730.634397][ C1] ? process_backlog+0x2d5/0x14f0 [ 730.639565][ C1] process_backlog+0x60e/0x14f0 [ 730.644473][ C1] ? __lock_acquire+0xab9/0xd20 [ 730.649390][ C1] ? __pfx_process_backlog+0x10/0x10 [ 730.654727][ C1] ? rcu_is_watching+0x15/0xb0 [ 730.659552][ C1] __napi_poll+0xc4/0x480 [ 730.663930][ C1] ? net_rx_action+0x46d/0xe30 [ 730.668747][ C1] net_rx_action+0x707/0xe30 [ 730.673388][ C1] ? __lock_acquire+0xab9/0xd20 [ 730.678306][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 730.683471][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 730.688719][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 730.694067][ C1] handle_softirqs+0x286/0x870 [ 730.698876][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 730.703688][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 730.709019][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 730.714276][ C1] __irq_exit_rcu+0xca/0x1f0 [ 730.718906][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 730.724157][ C1] irq_exit_rcu+0x9/0x30 [ 730.728441][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 730.734114][ C1] [ 730.737075][ C1] [ 730.740038][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.746062][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 730.751818][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 8d 1a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 730.771472][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 730.777593][ C1] RAX: 4c054482781f8800 RBX: ffffffff81976a28 RCX: 4c054482781f8800 [ 730.785637][ C1] RDX: 0000000000000001 RSI: ffffffff8d99696d RDI: ffffffff8be28dc0 [ 730.793648][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 730.801663][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa1ddf0 [ 730.809683][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad5b40 [ 730.817709][ C1] ? do_idle+0x1e8/0x510 [ 730.822005][ C1] default_idle+0x13/0x20 [ 730.826380][ C1] default_idle_call+0x74/0xb0 [ 730.831193][ C1] do_idle+0x1e8/0x510 [ 730.835319][ C1] ? __pfx_do_idle+0x10/0x10 [ 730.839945][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.845199][ C1] cpu_startup_entry+0x44/0x60 [ 730.850003][ C1] start_secondary+0x101/0x110 [ 730.854803][ C1] common_startup_64+0x13e/0x147 [ 730.859805][ C1]