last executing test programs: 2m41.860762817s ago: executing program 3 (id=1859): r0 = socket$netlink(0x10, 0x3, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000002180)={0x2020}, 0x2020) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) (async) r4 = syz_open_pts(r3, 0x80) r5 = dup3(r4, r3, 0x80000) read(r5, &(0x7f0000000200)=""/227, 0xe3) (async) read$watch_queue(r5, &(0x7f0000002d40)=""/4095, 0xfff) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r7, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000002000000140001800600410002eeffff07000300ac1414aa"], 0x28}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.637683538s ago: executing program 3 (id=1860): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 2m41.598205696s ago: executing program 3 (id=1861): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r4, 0x0) r5 = dup(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x20000000000001bf, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200), 0x4}, 0x50) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000040)) write$6lowpan_enable(r5, &(0x7f0000000000)='1', 0xffb0) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000006103, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x40, 0x101, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) r8 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) sendfile(r7, r8, 0x0, 0x201f00) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES8=r3, @ANYBLOB="1e009400004010290300000000000070001900140000000f000a00000048000005003400a9000000080026006c090000"], 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x4010) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r9, 0x800, 0x70bd2c, 0x40000000, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x404c0c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m40.054817119s ago: executing program 3 (id=1869): socket$kcm(0x11, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000000) read(r3, &(0x7f00000001c0)=""/253, 0xfd) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x17, &(0x7f00000001c0), 0x4) setsockopt$inet_int(r6, 0x0, 0x8, &(0x7f0000000940)=0xe, 0x4) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x100) r8 = open$dir(&(0x7f00000008c0)='./file0\x00', 0x622000, 0x162) openat(r8, &(0x7f0000000900)='./file0\x00', 0x1, 0x1d0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(r7, 0x8044610a, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) 2m37.848636588s ago: executing program 3 (id=1885): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xffffff80, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 2m37.696698656s ago: executing program 3 (id=1886): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) io_uring_enter(r0, 0x2cbe, 0x7f66, 0x13, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(r2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) fanotify_mark(0xffffffffffffffff, 0x80, 0x8000002, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') socket$packet(0x11, 0x3, 0x300) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000200)=""/34, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 2m22.199437858s ago: executing program 32 (id=1886): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0x14000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x73e6, 0x1c402, 0x2, 0x1e1}) io_uring_enter(r0, 0x2cbe, 0x7f66, 0x13, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(r2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) fanotify_mark(0xffffffffffffffff, 0x80, 0x8000002, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') socket$packet(0x11, 0x3, 0x300) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000200)=""/34, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 47.793221162s ago: executing program 0 (id=2362): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = memfd_secret(0x80000) readahead(r2, 0x7, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0x8000000000000b45, 0x100000000009, 0xa, 0xff, 0xff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x614}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) 46.529810465s ago: executing program 0 (id=2367): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'veth1_to_hsr\x00', @random="0163014030d9"}) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRES8=r1, @ANYRES32, @ANYRES64=0x0, @ANYRES8=r0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRESHEX=r1], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) close(r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000400)) r5 = getpid() getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0x101, 0x4, 0x6, 0x0, 0xfffffffffffffffd, 0x80000000, 0x8000000, 0x7fffffdfffffffff}, {0x0, 0x0, 0x3ff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x350a, 0x4, 0x0, 0x0, 0x0, 0x80, 0x200000}}, 0xe4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000040)={r7, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 44.15312458s ago: executing program 0 (id=2371): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file2\x00', 0x120000, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@default_permissions}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, 't!\x06{}.Q^+/'}}, {@appraise}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '(].#][{-.!\\:!\\'}}, {@measure}]}}, 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x2}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x75, 0x3, {{'deflate\x00'}, 0x168, "fcff9127746ebf5469e31928713c06f6e2e4d06fe71fce7aef9d6148096c19a80700"/45}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 42.938070848s ago: executing program 0 (id=2376): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fcntl$setlease(r1, 0x400, 0x2) r3 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='auxv\x00') preadv(r2, 0x0, 0x0, 0xfae, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x4}]}]}, 0x30}}, 0x0) unshare(0x24020400) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000680)={r9, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)=r12) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() socket(0x10, 0x800, 0x6) 39.973529285s ago: executing program 33 (id=2382): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='auxv\x00') preadv(r2, 0x0, 0x0, 0xfae, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xa73, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x111, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x0, &(0x7f0000006680)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x30, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5}]}, {0x4}]}]}, 0x30}}, 0x0) unshare(0x24020400) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000680)={r9, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r6, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r6, 0xc00464af, &(0x7f0000000480)=r12) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) sync() socket(0x10, 0x800, 0x6) 11.918367016s ago: executing program 2 (id=2467): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file2\x00', 0x120000, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@default_permissions}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, 't!\x06{}.Q^+/'}}, {@appraise}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '(].#][{-.!\\:!\\'}}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000a40)="3253ce9ad9be6143981b2bf01aa7934ac8e84342cc0ab33756350d8e3fd69ec45a9c0eac34dba528e6efacd9d7059ab299df05c9dfe0f8deac4fec4af2ace6b1c8933e815963ed7d8b511d8fc5f2a14053a32cf030ba327a95153d6950ee50b5ed4096b5ab905c") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x2}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x75, 0x3, {{'deflate\x00'}, 0x168, "fcff9127746ebf5469e31928713c06f6e2e4d06fe71fce7aef9d6148096c19a80700"/45}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 10.981358751s ago: executing program 1 (id=2469): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f00000005c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000002040)=""/4097, 0x1001}, {0x0}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f00000004c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}], 0xbc}, 0x160) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x400000000010, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x41}, 0x94) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 10.818410299s ago: executing program 2 (id=2471): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x1000, 0x4d03c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}, 0x1, 0x0, 0x5f00}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000016c0)='H', 0x1}], 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'nr0\x00', 0x4}, 0x18) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "41ac0beaa2bdb95e", "e6da124a9978f59822df2675241c26af", "a056e13d", "6a515981fa6136ef"}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 9.033008964s ago: executing program 6 (id=2474): r0 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x4}, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffc, 0x3, 0xfffffffffffffffd, 0x3fffffffffe}, 0x0, 0x1, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x4d4, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffe}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x4, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x29}, {0xfffffefffffffffd, 0xeca, 0x80002d, 0x0, 0x4000000, 0x0, 0x8000000000778a, 0xffff}, {0x3, 0x0, 0x9}, 0x0, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}}, 0xe4) 8.912421156s ago: executing program 6 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0x7, 0xffffffffffffffff, 0x6, 0x4}, 0x26}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x404889d}, 0xc0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xfff, 0x400, 0x1, 0x40018, 0xffffffffffffffff, 0x4, '\x00', r5, r6, 0x2, 0x2, 0x3, 0xe}, 0x50) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601010000000000000000000003000500010007000000"], 0x1c}}, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x80, 0x7, 0x8, 0x7, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@end, @end, @timestamp_prespec={0x44, 0x4, 0xd7, 0x3, 0x3}, @lsrr={0x83, 0x3, 0x6b}, @rr={0x7, 0x3, 0xc5}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x57, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x0, 0x5, "c57c34"}, {0x6, 0x2}, {0x5, 0xd, "847e15926fe8fca0085a1d"}, {0x5, 0x2}, {0x7, 0xe, "6aa0a400db75c9498c86b37e"}]}]}}}}}) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000540)=0x4) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000000000)=0x4000) 8.756700777s ago: executing program 5 (id=2476): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff81050003000000fdef000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) 8.225576233s ago: executing program 5 (id=2477): socket(0x11, 0x2, 0x4) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0xbc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x8, 0x7, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x4, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xc8f, 0x7}, {0x1, 0xeb, 0x401, 0xd}]}}]}}]}, 0xbc}}, 0x24040084) r4 = openat$proc_mixer(0xffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x801, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=[{'DIGITAL2', @val={' \'', 'Master Playback Switch'}}, {'IGAIN', @void}, {'PHONEOUT', @val={' \'', 'Master Playback Volume'}}, {'RADIO', @void}], 0x7a) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x0}) 7.571660498s ago: executing program 6 (id=2479): r0 = gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) kcmp(r0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 7.399414089s ago: executing program 2 (id=2480): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd87}, 0x190dc9658574c45c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86e7d62fdce0b68c2a7502b5b00c9f", "fad16f5a00"}, 0xe, 0x5}) r3 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x4f6d, 0x4a080) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4}) r4 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5}) socket$unix(0x1, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000b1e5586a0000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000480)={0x4, 0x1, 0x100003, 0xffffffffffffffff, 0x980912, &(0x7f00000004c0)={0x980913, 0x80000000, '\x00', @ptr=0x8200}}) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000300)=@multiplanar_overlay={0x3, 0x1, 0x4, 0x4000, 0x7, {0x0, 0x2710}, {0x1, 0xc, 0x4, 0x2, 0x26, 0x8f, "726eebb4"}, 0x6, 0x3, {0x0}, 0x7879, 0x0, r8}) r9 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(r9, &(0x7f0000005340)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r2, @ANYRES8=0x0], 0xc}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) 7.128628053s ago: executing program 6 (id=2481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x795b40, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0xdb, 0x1140) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='-0'], 0x6) io_setup(0x239f, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r4, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/80, 0x50}], 0x1, 0x0, 0x0, 0x3) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x77}], 0x1, 0x17, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x80083, 0xffffffffefffff16, 0x3, 0x400000004, 0x1, 0x4]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001000000", @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x7, 0x0, [{0x606, 0x0, 0x5}, {0x2af, 0x0, 0xf}, {0xc00112f3, 0x0, 0x7}, {0x39b, 0x0, 0x3}, {0x242, 0x0, 0x4}, {0x82f, 0x0, 0x1}, {0x991, 0x0, 0xd}]}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 6.782994725s ago: executing program 4 (id=2482): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_secret(0x80000) readahead(r2, 0x7, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0x8000000000000b45, 0x100000000009, 0xa, 0xff, 0xff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='hpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x614}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, 0x0) 6.641795176s ago: executing program 1 (id=2483): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x54}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x17, 0xa000000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r3, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x1000, 0x8}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000300)=@other={'lock', ' ', 'none'}, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r8, &(0x7f00000010c0)=[{&(0x7f0000001600)=""/4095, 0xfff}], 0x1, 0x7, 0x401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r9, &(0x7f0000000080)=""/186, 0xba) socket$nl_generic(0x10, 0x3, 0x10) 6.357492745s ago: executing program 6 (id=2484): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x200380) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x15, 0x1114c1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000000280)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x2, r3, 0x0, 0x0, 0x5, 0x0, 0x2}]) unshare(0x20000400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(r4, 0xffffffffffffffff, r5, 0x0, 0x100000001, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x22, 0x0, {}, {}, {}, {0x3}, 0x0, 0x40, 0xf5, 0x0, 0x0, 0x4, 0x80000000, 0x6, 0x2, 0x5, 0x0, 0x100008, 0x4, 0x0, 0x0, 0xa}) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 5.821126919s ago: executing program 6 (id=2485): r0 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x48bfd2c3db996c38) r1 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = getpgid(0x0) statx(r1, &(0x7f0000002a80)='./file0\x00', 0x4000, 0x40, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000330c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000002bc0)={'\x00', 0x0, 0x4, 0x401, 0x1000000000000000, 0x8, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002c00)=0x0) sendmmsg$unix(r3, &(0x7f0000002e40)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000000380)="d5a9c5cf7efab5bd33c1a6b78e1cf4390fb40555c18eea07bb8c29beab98ea2dbfb80c1382a28bb409f776b17e90b5b2651fe96400fe431ad35ca291f88a3e92d49cc7f1c28cb0f5a282acfcab2ec74f6102fc6b0feecb961b6da7107c729eaa01f7d984d655763437e56adc2c3bea37bb00bfe061eb03097ac4798a18073faece1edd8a144faf0923de138b0e5e5bba5502", 0x92}, {&(0x7f0000000540)="973768c0c53f774ef89927b7f57bfcb2f5bee468eea4f5881f65c3fa603c2b65372c0ab0919d4c3a9b253a6e8613b3efe7f2a60689ae159d982b278daec5e985daa4f2b87546b59505ab9aaf8d81a0312be9675597a9751c8e591b48980e7efda19795bdcbb262acee9a165541e3f740989eba2c275158f012", 0x79}, {&(0x7f00000005c0)="afe5fb0ca7afc05e3f71eae28b89fcc8e1ee0585c9d157be5f8ac179129a31a33667554ea28d135eebfd1a26d3840595a33a9e775a7b", 0x36}, {&(0x7f0000000600)="f5c9d411f38ccc695843f14a7db97485ab5f169cfcf6d5414e", 0x19}, {&(0x7f0000000640)="59234dbf3d99e52b3d70333305af825ff643640748154d43e028563531da0a8ad6478a204ffb392dbe73d1c41c3560d5fdfe9db409c304fb29edb4e6340ffb4809714b4d0a4d1eefe77f4f402b1cb2d227fa6181642f8cb92908c364f4f7ad838b6dcb62ae81a47c4e6475716a84c2c80b416f74bb761a27ad11a3f9ef0399f93039730c922f5268dd106e96b35c1dc9b18927cc12004499f1c94575ca754fbabd60781bbfb409c39d00d57a7ead724a261a282d0d67124cdb4213a4cc5c334b55a816a277", 0xc5}, {&(0x7f0000000740)="c5208595815cf7bec0a134ce23cea0e7a3d4e581b8aabfc510de9487135febdac331183a26347e7f61e414c24e083ca0a3c8369139d73da607b17b1b3c397c0ad60cabdb96104f2acc15b0", 0x4b}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="95850783c4387ae3e7dfb7743fd82c14f6f68d1c07c0dfbbef42e593e42116469688a7795baf8aa88f101902aafc5449d80e32c75150dc8354c6d72983e6e76aa7c897d58ec91cf0d2ecb014d75122a5fbfd7cc90bb2681997886344892a0f61d2ee5ec4cce4b507dbf0959a2a27f6819165648fa011ce012770a91e2e2a86e259bd71bfef4202856136120b5e40df1a7f8231efd100b5a9f142504a9ff0b9dc24af29d4a28721ac0c39a82eaee207e2285c5dfb4241d136cab5fc63d431fda0ada41928bff09b2a8e227a", 0xcb}, {&(0x7f0000002980)="e826ea9f64f74e2e939868729fbfb77d8ab4222e46b1d3eb6628373ce12101b1d29d04208df153ae917250ee4c6c1371617f609dbf61c58cee", 0x39}, {&(0x7f00000029c0)="18a02c25d2dea4d062986028048a3a81f3bd7793a24787e1739d7d38cb6838def12d8b5ca93382314982b1a5721c1a2be8433fd2ca375b6f45cfb79dbdc2749540661aec11fc8876b0b9abfc6e8318e42faeb3599819d098990d06361e2f5382f84d54f280d5362febf55468e705065a1f78cfbee373bc1afdb2c2150d578381bb1091d0e6a1477325883e1b012c1497", 0x90}], 0xa, &(0x7f0000003f80)=ANY=[@ANYBLOB="10000000010000ff040000002ab079eccb92f99132e41acf713ae38c450ea7a1eee5278835a0b51f313c7c19758a97300aa3bb811e5340c0b21de45742b23f3b03e3710ed9234e", @ANYRES32=r2, @ANYRESDEC=r3, @ANYRES32=r4, @ANYRES32=r8, @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES64=r5, @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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", @ANYBLOB="140000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="100000000100000001000000", @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=0x0], 0x94, 0x40}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x2c, 0x8001, 0x0, 0x409, 0x100, 0xffff, 0x3, 0x7}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f0000000180)={0x0, 0xdb8, 0x10, 0x0, 0x0, 0x0, r1}) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x26000000}, 0x2400c850) fcntl$notify(r9, 0x402, 0x8000003d) openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) 5.708247651s ago: executing program 1 (id=2486): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1f8, 0x19, 0x1, 0xff80, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x3, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x144, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2, 0x0, 0x5}, {{@in6=@remote, 0x4d6, 0x3c}, 0xa, @in=@loopback, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800, 0xfffffffc}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3, 0x2, 0x0, 0x0, 0x200}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x0, 0xabb, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x3c}, 0x6343dda1f6384070, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x400}]}]}, 0x1f8}}, 0x4000) 5.633502325s ago: executing program 5 (id=2487): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) r1 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x4}) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd0, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x4, 0x2, 0x4, 0x1], 0x5}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0xff000000, 'pimreg1\x00', 'vcan0\x00', {0xff}, {}, 0x16, 0x3, 0x49}, 0x0, 0x94, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0x7ff, 0x5, 0x2, 'pptp\x00', 'syz1\x00', {0x7f}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2bc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000440)={0xdf, 0x0, 0x4000}) (async) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xfff3}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x10200, 0x3, 0x6, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r11, 0x3c}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="d4", 0x1}], 0x1}, 0x4011) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414"], 0x2c}}, 0x0) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 4.82199528s ago: executing program 1 (id=2488): unshare(0x2c020400) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000400)={0x8, @pix_mp={0x7fff, 0x7ff, 0x32314d54, 0x9, 0x1, [{0x6, 0x2}, {0x8, 0xa1}, {0x800, 0x8}, {0x4, 0xfffff801}, {0x3, 0x9}, {0x5, 0x5}, {0x7, 0x2}, {0xef2, 0x6}], 0x1, 0xc0, 0x2, 0x2}}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000240), 0x20000000000001de, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8002}, 0x4040) 4.820330998s ago: executing program 2 (id=2489): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000200)=0xb1e0, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b3c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8048}}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000007d40)="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", 0xff9}, {&(0x7f0000008d40)="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", 0x19b}], 0x2, 0x0, 0x0, 0x44000}}], 0x2, 0x400c081) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140008001000010000000000000000000000000a28000000000a01010000000000000000010000020900010073797a3100000000080002400000000248000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000030900010073797a3100000000080007006e617400140000001100010000000000000000000500000a"], 0x98}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r1, r4) close_range(r5, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x80) 4.81156567s ago: executing program 5 (id=2490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000001100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfe3d, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000001140)=0x40) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000002580)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d736b2"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0xc, 0x0, &(0x7f0000000440)=[@dead_binder_done], 0x0, 0x0, 0x0}) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) listen(r2, 0x3) listen(r1, 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x40) 4.479922484s ago: executing program 5 (id=2491): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, 0x0}) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x3, 0x5) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x1000, 0x4d03c0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}, 0x1, 0x0, 0x5f00}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000016c0)='H', 0x1}], 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'nr0\x00', 0x4}, 0x18) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "41ac0beaa2bdb95e", "e6da124a9978f59822df2675241c26af", "a056e13d", "6a515981fa6136ef"}, 0x28) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 4.454993309s ago: executing program 4 (id=2492): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a00180003030303030300001c005a8018"], 0x44}}, 0x0) (fail_nth: 6) 4.369820254s ago: executing program 2 (id=2493): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0xf8, 0x202000) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4082, 0x0) sendfile(r3, r3, 0x0, 0x200000) 4.369322105s ago: executing program 1 (id=2494): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file2\x00', 0x120000, &(0x7f00000008c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x1}}, {@allow_other}, {@default_permissions}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsroot={'smackfsroot', 0x3d, 't!\x06{}.Q^+/'}}, {@appraise}, {@fowner_lt={'fowner<', r3}}, {@fsname={'fsname', 0x3d, '(].#][{-.!\\:!\\'}}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000a40)="3253ce9ad9be6143981b2bf01aa7934ac8e84342cc0ab33756350d8e3fd69ec45a9c0eac34dba528e6efacd9d7059ab299df05c9dfe0f8deac4fec4af2ace6b1c8933e815963ed7d8b511d8fc5f2a14053a32cf030ba327a95153d6950ee50b5ed4096b5ab905c3fa4ca1356b80970f5bdbb33d8c59a886bdc41232323d705b6a305ffd5f509600230714876c7f54021c8d77e7f94ce5c65b32c") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x2}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x75, 0x3, {{'deflate\x00'}, 0x168, "fcff9127746ebf5469e31928713c06f6e2e4d06fe71fce7aef9d6148096c19a80700"/45}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.490434096s ago: executing program 4 (id=2495): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00', @remote, @local, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x82830142, r1}) 3.022967423s ago: executing program 4 (id=2496): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, &(0x7f0000000180)={0x40, [[0x5, 0xfffffff7, 0x2, 0x14, 0x9, 0x3, 0x6e21, 0x80], [0xdda1, 0xd9f8, 0x41, 0x0, 0x1, 0xffff, 0x6, 0x40], [0xc609, 0x4557, 0x1, 0x134, 0x3, 0x0, 0x3, 0xfff]], '\x00', [{0x1, 0x10000, 0x1}, {0x2, 0x4, 0x1, 0x1}, {0x9e, 0x9e, 0x0, 0x1, 0x0, 0x1}, {0xbba, 0x0, 0x1, 0x1, 0x1}, {0x516, 0x10, 0x1, 0x1, 0x0, 0x1}, {0x1ff, 0x10, 0x1, 0x1, 0x1}, {0x2, 0x100, 0x1, 0x0, 0x1}, {0x36c, 0xffffffff, 0x0, 0x1}, {0x8, 0xf, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x1ff}, {0x5, 0x9, 0x1, 0x0, 0x1}, {0xe49, 0x1, 0x1}], '\x00', 0x6}) 2.661291961s ago: executing program 4 (id=2497): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x54}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x17, 0xa000000}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r3, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4, 0x1000, 0x8}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000300)=@other={'lock', ' ', 'none'}, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r8, &(0x7f00000010c0)=[{&(0x7f0000001600)=""/4095, 0xfff}], 0x1, 0x7, 0x401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r9, &(0x7f0000000080)=""/186, 0xba) socket$nl_generic(0x10, 0x3, 0x10) 1.509658967s ago: executing program 2 (id=2498): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_clone(0x23a28800, &(0x7f0000000180)="567c9b297bd4b5ef564165483f77d99615ee304ad5ccfccd99d6f38405be591f6346c46d847a989e4c80bf2a1d54a0b67277fcb4f602d9ee5d547004e9bcaf96e6c1c341d6f841ae65", 0x49, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000440)="d7e8dfabecbb01a3f9b7e155a50627394202d20f1d25e9dccb6cd62d34a203c7ce9933b26b307bdb59cea59cc833c6519182499ed29bd70eacfe44d183a3c0a4b27aace6ac7c0bfcbc16861caca7f12952e58503bd29a9fe7e06eded888c49a6195b91435da60bb537076c9d714af8") ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000500), 0x4003) mknod(0x0, 0x400, 0x200) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000004, 0xfa11, 0x7fffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') socket$key(0x2d, 0x3, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x3, 0x40, &(0x7f0000000000)={0x0, 0x14, 0xf801, 0x2d8, 0x1}, 0x8, 0x800, 0x0, 0x0, 0x1, 0xfffffff9, 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004041}, 0x8014) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r8, 0x1, 0x4c, 0x0, &(0x7f0000000000)) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9a07b9cb6f3404ff0c3fb2c832ef6590d9c7b0ea5649bd43c29b10c294d4a3ccef4505fa76d5cb4fae3c3d87da52c497341e0c7596", @ANYRESHEX=r3, @ANYRES8=r8], 0x2c2) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.451288623s ago: executing program 1 (id=2499): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f000085d000/0x1000)=nil, 0x1000, 0x3000006, 0x4010, r3, 0x24281000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x1000000c, 0x8001, 0x800, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) unshare(0xe060400) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/user\x00') r5 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r5, &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x24, 0x3) unshare(0x2c060000) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000000300)={0x3, 0x6, 0x40, 0x9, 0x81, 0x81, 0xf7, 0x83, 0x1, 0x1, 0x1, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f671d8be1f6c41e1"}) r6 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140), &(0x7f0000000040)) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36f3c964c0cdd68849d8e85f0130b1fb723f0eb00fc8a12fd500025269", 0x0, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x0, 0xf, 0x7fff, 0x5, [0x0, 0x9, 0x7, 0x9ae]}) socket(0x10, 0x803, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x8, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0xc9, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) 348.733742ms ago: executing program 4 (id=2500): socket$kcm(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) close_range(r1, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x7, 0x7, 0xfffff8d2, 0x1, 0x3, 0x1, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 0s ago: executing program 5 (id=2501): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) r1 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xfffffffd, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r1, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): ? tomoyo_path_number_perm+0x219/0x630 [ 618.101284][T13562] ? tomoyo_path_number_perm+0x219/0x630 [ 618.101308][T13562] ? do_vfs_ioctl+0x1166/0x1530 [ 618.101328][T13562] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 618.101373][T13562] ? __fget_files+0x2a/0x420 [ 618.101390][T13562] ? __fget_files+0x3a0/0x420 [ 618.101403][T13562] ? __fget_files+0x2a/0x420 [ 618.101419][T13562] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 618.101443][T13562] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 618.101465][T13562] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 618.101487][T13562] ? __fget_files+0x3a0/0x420 [ 618.101505][T13562] ? fput+0xa0/0xd0 [ 618.101528][T13562] ? ksys_write+0x242/0x270 [ 618.101554][T13562] __do_fast_syscall_32+0x20d/0x640 [ 618.101586][T13562] ? do_fast_syscall_32+0x33/0x70 [ 618.101607][T13562] ? asm_int80_emulation+0x1a/0x20 [ 618.101622][T13562] ? do_int80_emulation+0x274/0x4d0 [ 618.101643][T13562] ? trace_irq_disable+0x3b/0x150 [ 618.101660][T13562] do_fast_syscall_32+0x33/0x70 [ 618.101683][T13562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.101702][T13562] RIP: 0023:0xf7f25f6c [ 618.101717][T13562] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 618.101732][T13562] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 618.101749][T13562] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 618.101760][T13562] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.101770][T13562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.101779][T13562] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.101788][T13562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.101811][T13562] [ 618.441092][ T5911] usb 2-1: device descriptor read/64, error -71 [ 618.581920][T13572] ipvlan2: entered promiscuous mode [ 618.684859][ T5911] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 618.701842][T13578] FAULT_INJECTION: forcing a failure. [ 618.701842][T13578] name failslab, interval 1, probability 0, space 0, times 0 [ 618.715217][T13578] CPU: 1 UID: 0 PID: 13578 Comm: syz.0.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.715254][T13578] Tainted: [L]=SOFTLOCKUP [ 618.715263][T13578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 618.715278][T13578] Call Trace: [ 618.715289][T13578] [ 618.715299][T13578] dump_stack_lvl+0xe8/0x150 [ 618.715335][T13578] should_fail_ex+0x412/0x560 [ 618.715375][T13578] should_failslab+0xa8/0x100 [ 618.715404][T13578] ? skb_clone+0x212/0x3a0 [ 618.715433][T13578] kmem_cache_alloc_noprof+0x87/0x650 [ 618.715457][T13578] ? apparmor_capable+0x126/0x170 [ 618.715499][T13578] skb_clone+0x212/0x3a0 [ 618.715527][T13578] ? nfnetlink_rcv+0x4b0/0x27b0 [ 618.715563][T13578] nfnetlink_rcv+0x4e2/0x27b0 [ 618.715594][T13578] ? is_bpf_text_address+0x26/0x2b0 [ 618.715623][T13578] ? is_bpf_text_address+0x292/0x2b0 [ 618.715647][T13578] ? is_bpf_text_address+0x26/0x2b0 [ 618.715677][T13578] ? __kernel_text_address+0xd/0x30 [ 618.715701][T13578] ? unwind_get_return_address+0x4d/0x90 [ 618.715733][T13578] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.715758][T13578] ? arch_stack_walk+0xfb/0x150 [ 618.715799][T13578] ? __lock_acquire+0x6b5/0x2cf0 [ 618.715826][T13578] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 618.715870][T13578] ? __lock_acquire+0x6b5/0x2cf0 [ 618.715906][T13578] ? __lock_acquire+0x6b5/0x2cf0 [ 618.715940][T13578] ? __netlink_lookup+0xc6/0x8b0 [ 618.715970][T13578] ? __netlink_lookup+0x7e4/0x8b0 [ 618.716002][T13578] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.716042][T13578] netlink_unicast+0x80f/0x9b0 [ 618.716085][T13578] ? __pfx_netlink_unicast+0x10/0x10 [ 618.716120][T13578] ? netlink_sendmsg+0x650/0xb40 [ 618.716141][T13578] ? skb_put+0x11b/0x210 [ 618.716171][T13578] netlink_sendmsg+0x813/0xb40 [ 618.716204][T13578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.716232][T13578] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.716267][T13578] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.716297][T13578] ____sys_sendmsg+0x972/0x9f0 [ 618.716332][T13578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.716364][T13578] ? kstrtoull+0x12f/0x1d0 [ 618.716402][T13578] ___sys_sendmsg+0x2a5/0x360 [ 618.716436][T13578] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.716482][T13578] ? get_pid_task+0x20/0x1f0 [ 618.716504][T13578] ? get_pid_task+0x20/0x1f0 [ 618.716523][T13578] ? get_pid_task+0x20/0x1f0 [ 618.716570][T13578] ? __fget_files+0x2a/0x420 [ 618.716591][T13578] ? __fget_files+0x3a0/0x420 [ 618.716622][T13578] __sys_sendmsg+0x183/0x260 [ 618.716653][T13578] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.716704][T13578] __do_fast_syscall_32+0x20d/0x640 [ 618.716739][T13578] ? do_fast_syscall_32+0x33/0x70 [ 618.716769][T13578] ? asm_int80_emulation+0x1a/0x20 [ 618.716790][T13578] ? do_int80_emulation+0x274/0x4d0 [ 618.716820][T13578] ? trace_irq_disable+0x3b/0x150 [ 618.716844][T13578] do_fast_syscall_32+0x33/0x70 [ 618.716876][T13578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 618.716904][T13578] RIP: 0023:0xf70bef6c [ 618.716923][T13578] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 618.716942][T13578] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 618.716965][T13578] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 618.716980][T13578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 618.716993][T13578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 618.717006][T13578] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 618.717019][T13578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 618.717049][T13578] [ 619.090029][T13579] netlink: 'syz.4.2178': attribute type 4 has an invalid length. [ 619.098039][T13579] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2178'. [ 619.185564][ T5911] usb 2-1: device descriptor read/64, error -71 [ 619.447984][ T5904] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 619.465424][ T5911] usb usb2-port1: attempt power cycle [ 619.610781][T13584] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 3, id = 0 [ 619.675831][ T5904] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 619.696682][ T5904] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 619.719284][ T5904] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 619.738444][ T5904] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 619.773849][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.814837][ T5911] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 619.827272][ T5904] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 619.837882][ T5911] usb 2-1: device descriptor read/8, error -71 [ 619.915285][ T5904] usb 5-1: invalid MIDI out EP 0 [ 620.084584][ T5911] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 620.145518][ T29] audit: type=1326 audit(1776045508.000:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 620.174740][ T29] audit: type=1326 audit(1776045508.010:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 620.246688][ T5911] usb 2-1: device descriptor read/8, error -71 [ 620.307454][ T29] audit: type=1326 audit(1776045508.030:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 620.340211][ T29] audit: type=1326 audit(1776045508.030:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 620.376614][ T5911] usb usb2-port1: unable to enumerate USB device [ 620.399843][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2182'. [ 620.412052][ T5904] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 620.655049][ T29] audit: type=1326 audit(1776045508.030:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 620.817096][T13596] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2182'. [ 620.826310][ T29] audit: type=1326 audit(1776045508.030:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 621.041940][ T29] audit: type=1326 audit(1776045508.030:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 621.173730][ T29] audit: type=1326 audit(1776045508.070:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 621.420762][ T29] audit: type=1326 audit(1776045508.100:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 621.514669][ T29] audit: type=1326 audit(1776045508.100:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.0.2182" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 622.262418][T13619] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 622.279451][ T7720] usb 5-1: USB disconnect, device number 78 [ 622.316497][T13576] delete_channel: no stack [ 622.711079][T13624] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 622.754984][ T7720] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 622.915274][ T7720] usb 5-1: Using ep0 maxpacket: 32 [ 622.926163][ T7720] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 622.934654][ T7720] usb 5-1: config 0 has no interface number 0 [ 622.940904][ T7720] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.969561][ T7720] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 622.998484][ T7720] usb 5-1: config 0 interface 85 has no altsetting 0 [ 623.017312][ T7720] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 623.029519][ T7720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.044956][ T7720] usb 5-1: Product: syz [ 623.057539][ T7720] usb 5-1: Manufacturer: syz [ 623.072262][ T7720] usb 5-1: SerialNumber: syz [ 623.096736][ T7720] usb 5-1: config 0 descriptor?? [ 623.127561][T13629] FAULT_INJECTION: forcing a failure. [ 623.127561][T13629] name failslab, interval 1, probability 0, space 0, times 0 [ 623.163918][T13629] CPU: 0 UID: 0 PID: 13629 Comm: syz.5.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 623.163945][T13629] Tainted: [L]=SOFTLOCKUP [ 623.163952][T13629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 623.163962][T13629] Call Trace: [ 623.163973][T13629] [ 623.163981][T13629] dump_stack_lvl+0xe8/0x150 [ 623.164007][T13629] should_fail_ex+0x412/0x560 [ 623.164036][T13629] should_failslab+0xa8/0x100 [ 623.164065][T13629] __kmalloc_noprof+0xe8/0x760 [ 623.164085][T13629] ? security_sk_alloc+0x52/0x360 [ 623.164108][T13629] security_sk_alloc+0x52/0x360 [ 623.164129][T13629] sk_prot_alloc+0x101/0x210 [ 623.164152][T13629] sk_alloc+0x3a/0x390 [ 623.164174][T13629] inet_create+0x7a0/0x1000 [ 623.164197][T13629] ? inet_create+0x9c/0x1000 [ 623.164222][T13629] __sock_create+0x4b2/0x9d0 [ 623.164245][T13629] mptcp_subflow_create_socket+0xfb/0x800 [ 623.164272][T13629] ? get_pid_task+0x20/0x1f0 [ 623.164288][T13629] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 623.164317][T13629] ? do_raw_spin_lock+0x12b/0x2f0 [ 623.164336][T13629] __mptcp_nmpc_sk+0x155/0x790 [ 623.164353][T13629] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 623.164366][T13629] ? mptcp_setsockopt+0x10f4/0x36a0 [ 623.164384][T13629] ? __local_bh_enable_ip+0xd0/0x130 [ 623.164408][T13629] mptcp_setsockopt+0x10fc/0x36a0 [ 623.164429][T13629] ? aa_sk_perm+0x6d5/0x900 [ 623.164451][T13629] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 623.164490][T13629] ? __pfx_aa_sk_perm+0x10/0x10 [ 623.164522][T13629] ? aa_sock_opt_perm+0xff/0x1a0 [ 623.164542][T13629] ? sock_common_setsockopt+0x36/0xc0 [ 623.164568][T13629] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 623.164585][T13629] do_sock_setsockopt+0x17c/0x1b0 [ 623.164609][T13629] __ia32_sys_setsockopt+0x13d/0x1b0 [ 623.164633][T13629] __do_fast_syscall_32+0x20d/0x640 [ 623.164657][T13629] ? do_fast_syscall_32+0x33/0x70 [ 623.164678][T13629] ? asm_int80_emulation+0x1a/0x20 [ 623.164693][T13629] ? do_int80_emulation+0x274/0x4d0 [ 623.164715][T13629] ? trace_irq_disable+0x3b/0x150 [ 623.164731][T13629] do_fast_syscall_32+0x33/0x70 [ 623.164753][T13629] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 623.164772][T13629] RIP: 0023:0xf7f97f6c [ 623.164787][T13629] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 623.164800][T13629] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 623.164816][T13629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 623.164826][T13629] RDX: 0000000000000017 RSI: 00000000800001c0 RDI: 0000000000000004 [ 623.164836][T13629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 623.164845][T13629] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 623.164854][T13629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 623.164876][T13629] [ 623.890283][ T7720] appletouch 5-1:0.85: Failed to request geyser raw mode [ 623.934975][ T7720] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 624.004237][ T7720] usb 5-1: USB disconnect, device number 79 [ 624.214648][ T5904] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 624.378789][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.385536][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 624.390847][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.403656][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.435708][ T5904] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 624.487862][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.527929][ T5904] usb 2-1: config 0 descriptor?? [ 624.807800][T13641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2198'. [ 624.862942][T13641] macvtap2: entered promiscuous mode [ 624.879288][T13641] macvtap2: entered allmulticast mode [ 624.894986][ T5911] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 624.904807][T13641] veth1_vlan: entered allmulticast mode [ 625.012384][ T5904] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 625.062736][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 625.076004][ T5911] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 625.095684][ T5911] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.152531][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 625.172405][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.277257][ T5911] usb 3-1: Product: syz [ 625.290689][ T5911] usb 3-1: Manufacturer: syz [ 625.308532][ T5911] usb 3-1: SerialNumber: syz [ 625.351476][ T5911] hub 3-1:1.0: bad descriptor, ignoring hub [ 625.359538][ T5911] hub 3-1:1.0: probe with driver hub failed with error -5 [ 625.559137][ T5911] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 625.698111][ T5911] usb 2-1: USB disconnect, device number 67 [ 626.003114][T13639] tipc: Enabling of bearer rejected, failed to enable media [ 626.285017][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.308189][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2201'. [ 626.317390][T13655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2201'. [ 626.348825][T13655] dummy0: entered promiscuous mode [ 626.365557][T13655] team0: entered promiscuous mode [ 626.383347][T13655] team_slave_0: entered promiscuous mode [ 626.397738][T13655] team_slave_1: entered promiscuous mode [ 626.425455][T13655] team0: left promiscuous mode [ 626.436716][ T24] usb 3-1: reset high-speed USB device number 72 using dummy_hcd [ 626.453582][T13655] team_slave_0: left promiscuous mode [ 626.474831][T13655] team_slave_1: left promiscuous mode [ 626.490149][T13655] dummy0: left promiscuous mode [ 626.606491][ T24] usb 3-1: device descriptor read/64, error -71 [ 626.854700][ T24] usb 3-1: reset high-speed USB device number 72 using dummy_hcd [ 627.027975][ T24] usb 3-1: device descriptor read/64, error -71 [ 627.231878][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 627.231900][ T29] audit: type=1326 audit(1776045515.090:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.282011][T13668] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2207'. [ 627.300146][ T29] audit: type=1326 audit(1776045515.130:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.325376][ T24] usb 3-1: reset high-speed USB device number 72 using dummy_hcd [ 627.344072][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2205'. [ 627.354859][T13666] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2205'. [ 627.386961][ T29] audit: type=1326 audit(1776045515.150:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.410352][ T24] usb 3-1: device descriptor read/8, error -71 [ 627.444039][ T29] audit: type=1326 audit(1776045515.150:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.477659][T13671] fuse: Unknown parameter '0x0000000000000006' [ 627.540534][ T29] audit: type=1326 audit(1776045515.150:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.592813][ T29] audit: type=1326 audit(1776045515.150:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.665435][ T29] audit: type=1326 audit(1776045515.150:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.702687][ T24] usb 3-1: reset high-speed USB device number 72 using dummy_hcd [ 627.776492][ T24] usb 3-1: device descriptor read/8, error -71 [ 627.787126][ T29] audit: type=1326 audit(1776045515.150:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.823703][ T29] audit: type=1326 audit(1776045515.150:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 627.898307][ T24] usb 3-1: USB disconnect, device number 72 [ 627.924139][ T24] usblp0: removed [ 628.077359][ T29] audit: type=1326 audit(1776045515.150:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13661 comm="syz.0.2205" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 628.295493][ T7720] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 628.484893][ T7720] usb 5-1: Using ep0 maxpacket: 32 [ 628.495379][ T7720] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 628.515354][ T7720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.544336][ T7720] usb 5-1: Product: syz [ 628.554620][ T7720] usb 5-1: Manufacturer: syz [ 628.560951][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2214'. [ 628.577372][ T7720] usb 5-1: SerialNumber: syz [ 628.603123][ T7720] usb 5-1: config 0 descriptor?? [ 629.023001][ T7720] airspy 5-1:0.0: Board ID: 00 [ 629.028933][ T7720] airspy 5-1:0.0: Firmware version: ,4ƒ€V [ 631.734804][T13742] dump_stack_lvl+0xe8/0x150 [ 631.734841][T13742] should_fail_ex+0x412/0x560 [ 631.734879][T13742] _copy_from_iter+0x1d3/0x1670 [ 631.734914][T13742] ? rcu_is_watching+0x15/0xb0 [ 631.734951][T13742] ? __pfx__copy_from_iter+0x10/0x10 [ 631.734972][T13742] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 631.735009][T13742] ? netlink_sendmsg+0x650/0xb40 [ 631.735032][T13742] ? skb_put+0x11b/0x210 [ 631.735061][T13742] netlink_sendmsg+0x6c0/0xb40 [ 631.735099][T13742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.735127][T13742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.735163][T13742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.735192][T13742] ____sys_sendmsg+0x972/0x9f0 [ 631.735230][T13742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.735284][T13742] ___sys_sendmsg+0x2a5/0x360 [ 631.735319][T13742] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.735352][T13742] ? kstrtoull+0x12f/0x1d0 [ 631.735411][T13742] ? __fget_files+0x2a/0x420 [ 631.735431][T13742] ? __fget_files+0x3a0/0x420 [ 631.735462][T13742] __sys_sendmmsg+0x2e7/0x4e0 [ 631.735497][T13742] ? __pfx___sys_sendmmsg+0x10/0x10 [ 631.735552][T13742] ? fput+0xa0/0xd0 [ 631.735584][T13742] ? ksys_write+0x242/0x270 [ 631.735616][T13742] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 631.735647][T13742] __do_fast_syscall_32+0x20d/0x640 [ 631.735681][T13742] ? do_fast_syscall_32+0x33/0x70 [ 631.735711][T13742] ? asm_int80_emulation+0x1a/0x20 [ 631.735731][T13742] ? do_int80_emulation+0x274/0x4d0 [ 631.735760][T13742] ? trace_irq_disable+0x3b/0x150 [ 631.735784][T13742] do_fast_syscall_32+0x33/0x70 [ 631.735816][T13742] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 631.735842][T13742] RIP: 0023:0xf705ef6c [ 631.735862][T13742] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 631.735882][T13742] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 631.735905][T13742] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 631.735920][T13742] RDX: 00000000000001f2 RSI: 00000000000000fc RDI: 0000000000000000 [ 631.735933][T13742] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 631.735946][T13742] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 631.735958][T13742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 631.735988][T13742] [ 632.315099][T13758] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2233'. [ 632.342870][T13758] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2233'. [ 632.365097][T13758] netlink: 'syz.2.2233': attribute type 3 has an invalid length. [ 632.395057][T13758] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2233'. [ 633.934716][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 633.934738][ T29] audit: type=1326 audit(1776045521.790:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.009752][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 634.021213][T13781] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2240'. [ 634.047600][ T29] audit: type=1326 audit(1776045521.830:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.170196][ T29] audit: type=1326 audit(1776045521.860:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.219239][ T29] audit: type=1326 audit(1776045521.860:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.276100][ T29] audit: type=1326 audit(1776045521.860:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.323634][ T29] audit: type=1326 audit(1776045521.860:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.374411][ T29] audit: type=1326 audit(1776045521.860:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.433302][ T29] audit: type=1326 audit(1776045521.860:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.589513][ T29] audit: type=1326 audit(1776045521.860:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.635582][ T29] audit: type=1326 audit(1776045521.860:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13776 comm="syz.2.2240" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 634.708950][T13788] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 1, id = 0 [ 634.876242][T13795] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2244'. [ 635.168735][ T5904] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 635.269667][T13807] xt_nat: multiple ranges no longer supported [ 635.376222][ T5904] usb 3-1: config 0 has no interfaces? [ 635.381796][ T5904] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 635.551259][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.577256][ T5904] usb 3-1: config 0 descriptor?? [ 635.584774][T13808] FAULT_INJECTION: forcing a failure. [ 635.584774][T13808] name failslab, interval 1, probability 0, space 0, times 0 [ 635.624914][T13808] CPU: 0 UID: 0 PID: 13808 Comm: syz.1.2247 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.624940][T13808] Tainted: [L]=SOFTLOCKUP [ 635.624946][T13808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 635.624956][T13808] Call Trace: [ 635.624962][T13808] [ 635.624969][T13808] dump_stack_lvl+0xe8/0x150 [ 635.625002][T13808] should_fail_ex+0x412/0x560 [ 635.625030][T13808] should_failslab+0xa8/0x100 [ 635.625051][T13808] ? io_submit_one+0x130/0x14c0 [ 635.625070][T13808] kmem_cache_alloc_noprof+0x87/0x650 [ 635.625093][T13808] io_submit_one+0x130/0x14c0 [ 635.625115][T13808] ? irqentry_exit+0x59e/0x620 [ 635.625139][T13808] ? trace_irq_disable+0x3b/0x150 [ 635.625157][T13808] ? __pfx_io_submit_one+0x10/0x10 [ 635.625186][T13808] ? __might_fault+0xaf/0x130 [ 635.625204][T13808] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 635.625224][T13808] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 635.625252][T13808] __do_fast_syscall_32+0x20d/0x640 [ 635.625276][T13808] ? do_fast_syscall_32+0x33/0x70 [ 635.625297][T13808] ? asm_int80_emulation+0x1a/0x20 [ 635.625312][T13808] ? do_int80_emulation+0x274/0x4d0 [ 635.625355][T13808] ? trace_irq_disable+0x3b/0x150 [ 635.625378][T13808] do_fast_syscall_32+0x33/0x70 [ 635.625410][T13808] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.625438][T13808] RIP: 0023:0xf7fd5f6c [ 635.625459][T13808] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 635.625477][T13808] RSP: 002b:00000000f547550c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 635.625504][T13808] RAX: ffffffffffffffda RBX: 00000000f544c000 RCX: 0000000000000003 [ 635.625514][T13808] RDX: 0000000080000980 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.625524][T13808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.625532][T13808] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 635.625541][T13808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.625562][T13808] [ 636.062694][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.093980][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.104858][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.106887][ T5911] usb 3-1: USB disconnect, device number 73 [ 636.293170][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.971953][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 636.983036][T13825] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2253'. [ 638.114820][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 638.417527][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 638.465758][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 638.473950][ T24] usb 6-1: config 0 has no interface number 0 [ 638.491897][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 638.532283][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.554613][ T24] usb 6-1: Product: syz [ 638.559597][ T24] usb 6-1: Manufacturer: syz [ 638.669685][ T24] usb 6-1: SerialNumber: syz [ 638.701309][ T24] usb 6-1: config 0 descriptor?? [ 638.975873][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 638.995554][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 639.026743][ T24] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 639.198510][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 639.208278][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 45 [ 639.419171][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 639.427857][ T24] usb 6-1: USB disconnect, device number 3 [ 639.437028][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 639.477898][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 639.534987][ T24] quatech2 6-1:0.51: device disconnected [ 639.595458][ T5884] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 639.727863][ T5884] usb 2-1: device descriptor read/64, error -71 [ 639.744981][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 639.984823][ T5884] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 640.127090][ T5884] usb 2-1: device descriptor read/64, error -71 [ 640.255339][ T5884] usb usb2-port1: attempt power cycle [ 640.625992][ T5884] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 640.685533][ T5884] usb 2-1: device descriptor read/8, error -71 [ 640.739283][T13868] syzkaller0: entered promiscuous mode [ 640.757873][T13868] syzkaller0: entered allmulticast mode [ 640.815838][T13868] tipc: Started in network mode [ 640.833178][T13868] tipc: Node identity 6a6ab029d3c4, cluster identity 4711 [ 640.842249][T13868] tipc: Enabled bearer , priority 0 [ 640.866963][T13867] tipc: Resetting bearer [ 640.909579][T13867] tipc: Disabling bearer [ 640.955770][ T5884] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 641.007251][ T5884] usb 2-1: device descriptor read/8, error -71 [ 641.066989][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 641.125062][ T5884] usb usb2-port1: unable to enumerate USB device [ 641.236718][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.254846][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.268975][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 641.279499][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.291077][ T24] usb 3-1: config 0 descriptor?? [ 641.837154][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 641.860310][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.005292][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.019375][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.026900][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.033842][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.041342][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.067784][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.114639][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.132290][ T24] sony 0003:054C:024B.0014: unknown main item tag 0x0 [ 642.180542][ T24] sony 0003:054C:024B.0014: unexpected long global item [ 642.207242][ T24] sony 0003:054C:024B.0014: parse failed [ 642.220911][ T24] sony 0003:054C:024B.0014: probe with driver sony failed with error -22 [ 642.449085][T13891] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 643.663423][T13870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.672466][T13870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.748453][ T5884] usb 3-1: USB disconnect, device number 74 [ 644.834882][ T5828] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 644.994839][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 645.026058][ T5828] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 645.044572][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.044913][ T24] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 645.077137][ T5828] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 645.108491][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.144607][ T5828] usb 2-1: Product: syz [ 645.162782][ T5828] usb 2-1: Manufacturer: syz [ 645.198734][ T5828] usb 2-1: SerialNumber: syz [ 645.206249][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 645.255331][ T5828] usb 2-1: config 0 descriptor?? [ 645.262566][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 645.285040][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.293213][ T24] usb 3-1: Product: syz [ 645.325176][ T24] usb 3-1: Manufacturer: syz [ 645.346950][ T24] usb 3-1: SerialNumber: syz [ 645.359145][ T5828] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 645.506223][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 645.536080][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 647.028825][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 647.108166][ T5828] gspca_sunplus: reg_w_1 err -71 [ 647.113572][ T5828] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 647.195123][ T5828] usb 2-1: USB disconnect, device number 72 [ 647.308102][T13949] xt_nat: multiple ranges no longer supported [ 647.405324][ T5911] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 647.636469][ T24] usb 3-1: USB disconnect, device number 75 [ 648.184961][ T5928] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 648.354582][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 648.375841][ T5928] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 648.392317][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 648.404573][ T5928] usb 3-1: Product: syz [ 648.410990][ T5928] usb 3-1: Manufacturer: syz [ 648.421169][ T5928] usb 3-1: SerialNumber: syz [ 649.032659][ T5928] usb 3-1: config 0 descriptor?? [ 649.081936][ T5928] gspca_main: sq905-2.14.0 probing 2770:9120 [ 649.719971][ T5928] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 649.738780][ T5928] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 649.812141][ T5928] usb 3-1: USB disconnect, device number 76 [ 650.195243][ T5828] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 650.496618][ T5828] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 650.505263][ T5828] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 650.536731][ T5828] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 650.597057][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 650.637550][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 650.675439][ T5828] usb 2-1: language id specifier not provided by device, defaulting to English [ 650.765439][ T5828] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 650.813564][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.843362][ T5828] usb 2-1: Manufacturer: 륆 [ 650.902150][ T5828] usb 2-1: config 0 descriptor?? [ 650.922913][ T5828] hub 2-1:0.0: bad descriptor, ignoring hub [ 650.955857][ T5828] hub 2-1:0.0: probe with driver hub failed with error -5 [ 651.033640][ T5828] input: 륆 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input47 [ 651.052702][T13984] netlink: 'syz.5.2303': attribute type 10 has an invalid length. [ 651.095819][T13984] batman_adv: batadv0: Adding interface: netdevsim0 [ 651.128133][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.137705][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.226765][T13977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.259534][T13984] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.300343][T13977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.564545][T13984] batman_adv: batadv0: Interface activated: netdevsim0 [ 651.615052][ T5828] usb 2-1: USB disconnect, device number 73 [ 652.549735][T14010] FAULT_INJECTION: forcing a failure. [ 652.549735][T14010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.563177][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.2.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.563211][T14010] Tainted: [L]=SOFTLOCKUP [ 652.563220][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 652.563232][T14010] Call Trace: [ 652.563241][T14010] [ 652.563249][T14010] dump_stack_lvl+0xe8/0x150 [ 652.563285][T14010] should_fail_ex+0x412/0x560 [ 652.563332][T14010] _copy_from_user+0x2d/0xb0 [ 652.563361][T14010] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 652.563411][T14010] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 652.563449][T14010] ? rcu_is_watching+0x15/0xb0 [ 652.563480][T14010] ? trace_kmalloc+0x2a/0x110 [ 652.563508][T14010] ip_generic_getfrag+0x149/0x2d0 [ 652.563538][T14010] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 652.563567][T14010] ? __alloc_skb+0x4e5/0x7d0 [ 652.563589][T14010] ? skb_put+0x11b/0x210 [ 652.563616][T14010] __ip_append_data+0x3995/0x3f30 [ 652.563662][T14010] ? __pfx_raw_getfrag+0x10/0x10 [ 652.563707][T14010] ? __pfx___ip_append_data+0x10/0x10 [ 652.563735][T14010] ? do_raw_spin_lock+0x12b/0x2f0 [ 652.563759][T14010] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 652.563783][T14010] ip_append_data+0x10d/0x190 [ 652.563812][T14010] ? __pfx_raw_getfrag+0x10/0x10 [ 652.563841][T14010] raw_sendmsg+0x14be/0x1a50 [ 652.563885][T14010] ? __pfx_raw_sendmsg+0x10/0x10 [ 652.563926][T14010] ? aa_sk_perm+0x6d5/0x900 [ 652.563966][T14010] ? __pfx_aa_sk_perm+0x10/0x10 [ 652.563994][T14010] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 652.564019][T14010] ? sock_rps_record_flow+0x19/0x400 [ 652.564045][T14010] ? __pfx_inet_sendmsg+0x10/0x10 [ 652.564075][T14010] ? inet_sendmsg+0x2f4/0x370 [ 652.564103][T14010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 652.564129][T14010] ? __pfx_inet_sendmsg+0x10/0x10 [ 652.564159][T14010] __sys_sendto+0x5de/0x710 [ 652.564188][T14010] ? __pfx___sys_sendto+0x10/0x10 [ 652.564240][T14010] ? fput+0xa0/0xd0 [ 652.564272][T14010] ? ksys_write+0x242/0x270 [ 652.564315][T14010] __ia32_sys_sendto+0xdd/0x100 [ 652.564345][T14010] __do_fast_syscall_32+0x20d/0x640 [ 652.564380][T14010] ? do_fast_syscall_32+0x33/0x70 [ 652.564409][T14010] ? asm_int80_emulation+0x1a/0x20 [ 652.564430][T14010] ? do_int80_emulation+0x274/0x4d0 [ 652.564462][T14010] ? trace_irq_disable+0x3b/0x150 [ 652.564486][T14010] do_fast_syscall_32+0x33/0x70 [ 652.564516][T14010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.564542][T14010] RIP: 0023:0xf7f25f6c [ 652.564561][T14010] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 652.564579][T14010] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 652.564601][T14010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800023c0 [ 652.564616][T14010] RDX: 000000000000ffeb RSI: 0000000000000000 RDI: 0000000080002400 [ 652.564629][T14010] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 652.564641][T14010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 652.564654][T14010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.564684][T14010] [ 653.206909][ T5828] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 653.452282][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2314'. [ 653.496620][T14017] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2314'. [ 653.502124][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 653.502191][ T29] audit: type=1326 audit(1776045541.360:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 653.536532][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.552135][ T5828] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 653.844724][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.875564][ T29] audit: type=1326 audit(1776045541.360:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 653.898661][ T5828] usb 5-1: Product: syz [ 653.898688][ T5828] usb 5-1: Manufacturer: syz [ 653.914635][ T5828] usb 5-1: SerialNumber: syz [ 653.941085][ T5828] usb 5-1: config 0 descriptor?? [ 653.949066][ T5828] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 654.041807][ T29] audit: type=1326 audit(1776045541.360:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 654.164575][ T29] audit: type=1326 audit(1776045541.360:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 654.234698][ T29] audit: type=1326 audit(1776045541.360:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 654.327034][T14030] syzkaller1: entered promiscuous mode [ 654.332770][T14030] syzkaller1: entered allmulticast mode [ 654.340967][T14030] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 654.405714][ T29] audit: type=1326 audit(1776045541.410:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 654.481848][ T29] audit: type=1326 audit(1776045541.410:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.0.2314" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 654.645961][T14040] netlink: 'syz.2.2319': attribute type 21 has an invalid length. [ 654.656948][T14040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2319'. [ 654.692787][ T29] audit: type=1326 audit(1776045542.020:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.4.2309" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x0 [ 655.064573][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 655.244681][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 655.273963][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 655.284582][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.292640][ T24] usb 6-1: Product: syz [ 655.304624][ T24] usb 6-1: Manufacturer: syz [ 655.523497][ T24] usb 6-1: SerialNumber: syz [ 655.583800][ T24] usb 6-1: config 0 descriptor?? [ 655.606185][ T24] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 655.648918][ T5928] usb 5-1: USB disconnect, device number 82 [ 655.833373][T14044] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.2322'. [ 655.877714][T14044] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 655.940846][ T24] pwc: Failed to set LED on/off time (-71) [ 655.947445][ T24] pwc: send_video_command error -71 [ 656.024630][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 656.047343][ T24] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 656.079415][ T24] usb 6-1: USB disconnect, device number 4 [ 656.891248][ T24] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 657.155152][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 657.161999][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.291462][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 657.336096][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.364563][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 657.384823][ T24] usb 3-1: SerialNumber: syz [ 657.407756][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 657.416507][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 657.444851][ T24] cdc_acm 3-1:1.0: skipping garbage [ 657.454430][ T24] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 657.469494][ T29] audit: type=1326 audit(1776045545.330:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14059 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 657.497304][ T24] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 657.514316][ T24] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 657.549919][ T29] audit: type=1326 audit(1776045545.390:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14059 comm="syz.0.2327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 657.736713][T14054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.758675][T14054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.839143][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 657.919026][T14060] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2327'. [ 657.935112][ T7720] usb 3-1: USB disconnect, device number 77 [ 658.281370][T14070] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.2326'. [ 658.291241][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 658.665100][ T7720] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 658.816233][T14090] FAULT_INJECTION: forcing a failure. [ 658.816233][T14090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.969123][T14090] CPU: 1 UID: 0 PID: 14090 Comm: syz.4.2334 Tainted: G L syzkaller #0 PREEMPT(full) [ 658.969158][T14090] Tainted: [L]=SOFTLOCKUP [ 658.969167][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 658.969181][T14090] Call Trace: [ 658.969192][T14090] [ 658.969203][T14090] dump_stack_lvl+0xe8/0x150 [ 658.969238][T14090] should_fail_ex+0x412/0x560 [ 658.969276][T14090] _copy_from_user+0x2d/0xb0 [ 658.969304][T14090] ethtool_get_stats+0x190/0x3b0 [ 658.969339][T14090] ? __pfx_ethtool_get_stats+0x10/0x10 [ 658.969370][T14090] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.969399][T14090] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.969431][T14090] dev_ethtool+0xb92/0x1ae0 [ 658.969471][T14090] ? __pfx_dev_ethtool+0x10/0x10 [ 658.969516][T14090] ? dev_load+0x21/0x1f0 [ 658.969541][T14090] dev_ioctl+0x392/0x1150 [ 658.969569][T14090] compat_sock_ioctl+0xc4d/0xcb0 [ 658.969608][T14090] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 658.969642][T14090] ? __fget_files+0x3a0/0x420 [ 658.969661][T14090] ? __fget_files+0x2a/0x420 [ 658.969692][T14090] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 658.969724][T14090] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 658.969756][T14090] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 658.969786][T14090] ? __fget_files+0x3a0/0x420 [ 658.969813][T14090] ? fput+0xa0/0xd0 [ 658.969843][T14090] ? ksys_write+0x242/0x270 [ 658.969880][T14090] __do_fast_syscall_32+0x20d/0x640 [ 658.969914][T14090] ? do_fast_syscall_32+0x33/0x70 [ 658.969942][T14090] ? asm_int80_emulation+0x1a/0x20 [ 658.969963][T14090] ? do_int80_emulation+0x274/0x4d0 [ 658.969992][T14090] ? trace_irq_disable+0x3b/0x150 [ 658.970016][T14090] do_fast_syscall_32+0x33/0x70 [ 658.970046][T14090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 658.970073][T14090] RIP: 0023:0xf705ef6c [ 658.970092][T14090] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 658.970111][T14090] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 658.970134][T14090] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 658.970148][T14090] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 658.970162][T14090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 658.970174][T14090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 658.970187][T14090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 658.970218][T14090] [ 659.225718][ T7720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.634925][ T7720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 659.651169][ T7720] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 659.661201][ T7720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 659.669448][ T7720] usb 2-1: SerialNumber: syz [ 660.278559][ T7720] usb 2-1: 0:2 : does not exist [ 660.747685][ T7720] usb 2-1: USB disconnect, device number 74 [ 660.906304][T13331] udevd[13331]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.006119][T14102] netlink: 'syz.5.2337': attribute type 2 has an invalid length. [ 661.021393][T14102] netlink: 'syz.5.2337': attribute type 11 has an invalid length. [ 661.030387][T14102] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2337'. [ 661.584855][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 661.728854][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 661.728881][ T29] audit: type=1326 audit(1776045549.590:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 661.741139][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'. [ 661.766322][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 661.792533][T14117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2341'. [ 661.804176][T14117] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2341'. [ 661.816602][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 245, changing to 7 [ 661.833610][ T29] audit: type=1326 audit(1776045549.590:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 661.876047][ T24] usb 6-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 661.886771][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.900241][ T29] audit: type=1326 audit(1776045549.620:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 661.927770][ T24] usb 6-1: Product: syz [ 661.931993][ T24] usb 6-1: Manufacturer: syz [ 661.944839][ T24] usb 6-1: SerialNumber: syz [ 661.964613][ T29] audit: type=1326 audit(1776045549.620:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 662.022665][ T29] audit: type=1326 audit(1776045549.620:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 662.073681][ T29] audit: type=1326 audit(1776045549.640:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 662.135353][ T29] audit: type=1326 audit(1776045549.640:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 662.179892][T14103] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2337'. [ 662.226794][ T29] audit: type=1326 audit(1776045549.640:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 662.307423][ T29] audit: type=1326 audit(1776045549.640:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 662.360068][ T29] audit: type=1326 audit(1776045549.640:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14112 comm="syz.1.2341" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 663.251959][T14134] FAULT_INJECTION: forcing a failure. [ 663.251959][T14134] name failslab, interval 1, probability 0, space 0, times 0 [ 663.271621][T14134] CPU: 1 UID: 0 PID: 14134 Comm: syz.1.2346 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.271661][T14134] Tainted: [L]=SOFTLOCKUP [ 663.271670][T14134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 663.271684][T14134] Call Trace: [ 663.271693][T14134] [ 663.271704][T14134] dump_stack_lvl+0xe8/0x150 [ 663.271739][T14134] should_fail_ex+0x412/0x560 [ 663.271776][T14134] should_failslab+0xa8/0x100 [ 663.271806][T14134] __kmalloc_noprof+0xe8/0x760 [ 663.271833][T14134] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 663.271869][T14134] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 663.271908][T14134] genl_family_rcv_msg_doit+0xd9/0x330 [ 663.271944][T14134] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 663.271982][T14134] ? apparmor_capable+0x126/0x170 [ 663.272012][T14134] ? bpf_lsm_capable+0x9/0x20 [ 663.272041][T14134] ? security_capable+0x7e/0x2c0 [ 663.272080][T14134] genl_rcv_msg+0x61c/0x7a0 [ 663.272115][T14134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.272143][T14134] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 663.272173][T14134] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 663.272195][T14134] ? __pfx_nl80211_post_doit+0x10/0x10 [ 663.272225][T14134] ? __lock_acquire+0x6b5/0x2cf0 [ 663.272266][T14134] netlink_rcv_skb+0x232/0x4b0 [ 663.272290][T14134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.272321][T14134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.272363][T14134] ? down_read+0x272/0x2e0 [ 663.272392][T14134] ? genl_rcv+0xd/0x40 [ 663.272422][T14134] genl_rcv+0x28/0x40 [ 663.272448][T14134] netlink_unicast+0x80f/0x9b0 [ 663.272489][T14134] ? __pfx_netlink_unicast+0x10/0x10 [ 663.272523][T14134] ? netlink_sendmsg+0x650/0xb40 [ 663.272546][T14134] ? skb_put+0x11b/0x210 [ 663.272583][T14134] netlink_sendmsg+0x813/0xb40 [ 663.272617][T14134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.272644][T14134] ? aa_sock_msg_perm+0xf1/0x1b0 [ 663.272679][T14134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.272708][T14134] ____sys_sendmsg+0x972/0x9f0 [ 663.272746][T14134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.272780][T14134] ? kstrtoull+0x12f/0x1d0 [ 663.272820][T14134] ___sys_sendmsg+0x2a5/0x360 [ 663.272855][T14134] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.272885][T14134] ? get_pid_task+0x20/0x1f0 [ 663.272906][T14134] ? get_pid_task+0x20/0x1f0 [ 663.272924][T14134] ? get_pid_task+0x20/0x1f0 [ 663.272973][T14134] ? __fget_files+0x2a/0x420 [ 663.272992][T14134] ? __fget_files+0x3a0/0x420 [ 663.273023][T14134] __sys_sendmsg+0x183/0x260 [ 663.273054][T14134] ? __pfx___sys_sendmsg+0x10/0x10 [ 663.273105][T14134] __do_fast_syscall_32+0x20d/0x640 [ 663.273138][T14134] ? do_fast_syscall_32+0x33/0x70 [ 663.273167][T14134] ? asm_int80_emulation+0x1a/0x20 [ 663.273188][T14134] ? do_int80_emulation+0x274/0x4d0 [ 663.273217][T14134] ? trace_irq_disable+0x3b/0x150 [ 663.273241][T14134] do_fast_syscall_32+0x33/0x70 [ 663.273272][T14134] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.273299][T14134] RIP: 0023:0xf7fd5f6c [ 663.273318][T14134] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 663.273337][T14134] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 663.273360][T14134] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000780 [ 663.273375][T14134] RDX: 000000000400404c RSI: 0000000000000000 RDI: 0000000000000000 [ 663.273387][T14134] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.273399][T14134] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 663.273411][T14134] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.273442][T14134] [ 663.275139][ T7720] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 664.222895][ T24] usb 6-1: USB disconnect, device number 5 [ 664.244628][ T7720] usb 3-1: device descriptor read/64, error -71 [ 664.272593][T14138] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 664.336901][T13292] udevd[13292]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 664.484692][ T7720] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 664.981534][ T7720] usb 3-1: device descriptor read/64, error -71 [ 665.231893][ T7720] usb usb3-port1: attempt power cycle [ 665.764716][ T7720] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 666.595188][ T7720] usb 3-1: device descriptor read/8, error -71 [ 667.292200][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 667.292225][ T29] audit: type=1326 audit(1776045555.150:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 667.406197][T14168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'. [ 667.420370][T14168] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2355'. [ 667.444611][ T29] audit: type=1326 audit(1776045555.150:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 667.532379][ T29] audit: type=1326 audit(1776045555.150:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 667.673921][ T29] audit: type=1326 audit(1776045555.150:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 667.773547][ T29] audit: type=1326 audit(1776045555.150:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 667.826681][ T29] audit: type=1326 audit(1776045555.150:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 667.888859][ T29] audit: type=1326 audit(1776045555.150:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 667.982121][ T29] audit: type=1326 audit(1776045555.200:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 668.104167][ T29] audit: type=1326 audit(1776045555.200:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 668.250233][ T29] audit: type=1326 audit(1776045555.260:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14166 comm="syz.2.2355" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 668.361754][T14191] binder: 14189:14191 ioctl c018620c 80000780 returned -1 [ 669.014583][ T5928] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 669.191246][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 669.202217][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.357448][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.50 [ 669.383189][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 669.424211][ T5928] usb 3-1: Product: syz [ 669.446961][ T5928] usb 3-1: config 0 descriptor?? [ 669.502964][ T5928] hub 3-1:0.0: bad descriptor, ignoring hub [ 669.523425][ T5928] hub 3-1:0.0: probe with driver hub failed with error -5 [ 669.550792][ T5884] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 669.697550][ T5884] usb 5-1: device descriptor read/64, error -71 [ 670.034539][ T5884] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 670.269505][ T5884] usb 5-1: device descriptor read/64, error -71 [ 670.385518][ T5884] usb usb5-port1: attempt power cycle [ 670.626545][T14223] FAULT_INJECTION: forcing a failure. [ 670.626545][T14223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.645599][T14223] CPU: 1 UID: 0 PID: 14223 Comm: syz.1.2368 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.645634][T14223] Tainted: [L]=SOFTLOCKUP [ 670.645643][T14223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 670.645656][T14223] Call Trace: [ 670.645664][T14223] [ 670.645674][T14223] dump_stack_lvl+0xe8/0x150 [ 670.645710][T14223] should_fail_ex+0x412/0x560 [ 670.645749][T14223] _copy_from_user+0x2d/0xb0 [ 670.645777][T14223] __sys_bpf+0x229/0x950 [ 670.645800][T14223] ? __pfx___sys_bpf+0x10/0x10 [ 670.645836][T14223] ? fput+0xa0/0xd0 [ 670.645868][T14223] ? ksys_write+0x242/0x270 [ 670.645901][T14223] __ia32_sys_bpf+0x7c/0x90 [ 670.645933][T14223] __do_fast_syscall_32+0x20d/0x640 [ 670.645965][T14223] ? do_fast_syscall_32+0x33/0x70 [ 670.645995][T14223] ? asm_int80_emulation+0x1a/0x20 [ 670.646015][T14223] ? do_int80_emulation+0x274/0x4d0 [ 670.646049][T14223] do_fast_syscall_32+0x33/0x70 [ 670.646079][T14223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 670.646105][T14223] RIP: 0023:0xf7fd5f6c [ 670.646125][T14223] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 670.646143][T14223] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 670.646165][T14223] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000000000 [ 670.646180][T14223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 670.646192][T14223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 670.646204][T14223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 670.646216][T14223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 670.646246][T14223] [ 671.060547][ T5884] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 671.117209][ T5884] usb 5-1: device descriptor read/8, error -71 [ 671.494589][ T5884] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 671.516015][ T5884] usb 5-1: device descriptor read/8, error -71 [ 671.625488][ T5884] usb usb5-port1: unable to enumerate USB device [ 671.654737][ T5918] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 671.824769][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 671.839703][ T5918] usb 6-1: config 0 has no interfaces? [ 671.872439][ T5918] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.911455][ T5918] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.953964][ T5918] usb 6-1: Manufacturer: syz [ 672.189128][ T5918] usb 6-1: config 0 descriptor?? [ 672.265485][ T5884] usb 3-1: USB disconnect, device number 82 [ 672.313937][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 672.313957][ T29] audit: type=1326 audit(1776045560.170:3797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.349239][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2371'. [ 672.406152][T14236] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2371'. [ 672.455879][ T29] audit: type=1326 audit(1776045560.200:3798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.505076][ T29] audit: type=1326 audit(1776045560.200:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf71f5cab code=0x7ffc0000 [ 672.527323][ T29] audit: type=1326 audit(1776045560.200:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.599921][T14228] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2369'. [ 672.633312][ T29] audit: type=1326 audit(1776045560.200:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.673757][ T29] audit: type=1326 audit(1776045560.210:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.674892][ T5911] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 672.721974][ T29] audit: type=1326 audit(1776045560.210:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.801964][ T29] audit: type=1326 audit(1776045560.210:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.851946][ T29] audit: type=1326 audit(1776045560.210:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.920926][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.932490][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.932486][ T29] audit: type=1326 audit(1776045560.210:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14234 comm="syz.0.2371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 672.999814][T14246] FAULT_INJECTION: forcing a failure. [ 672.999814][T14246] name failslab, interval 1, probability 0, space 0, times 0 [ 673.015596][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.040059][T14246] CPU: 1 UID: 0 PID: 14246 Comm: syz.1.2375 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.040085][T14246] Tainted: [L]=SOFTLOCKUP [ 673.040091][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 673.040101][T14246] Call Trace: [ 673.040107][T14246] [ 673.040115][T14246] dump_stack_lvl+0xe8/0x150 [ 673.040142][T14246] should_fail_ex+0x412/0x560 [ 673.040171][T14246] should_failslab+0xa8/0x100 [ 673.040192][T14246] ? security_inode_alloc+0x39/0x310 [ 673.040209][T14246] kmem_cache_alloc_noprof+0x87/0x650 [ 673.040232][T14246] security_inode_alloc+0x39/0x310 [ 673.040250][T14246] inode_init_always_gfp+0x9ed/0xdc0 [ 673.040277][T14246] ? __pfx_proc_alloc_inode+0x10/0x10 [ 673.040317][T14246] alloc_inode+0x82/0x1b0 [ 673.040344][T14246] new_inode+0x22/0x170 [ 673.040376][T14246] proc_sys_make_inode+0x4c/0x500 [ 673.040394][T14246] ? __init_waitqueue_head+0xa9/0x150 [ 673.040415][T14246] proc_sys_fill_cache+0x231/0x4a0 [ 673.040434][T14246] ? __pfx_proc_sys_fill_cache+0x10/0x10 [ 673.040463][T14246] ? do_raw_spin_unlock+0xf5/0x210 [ 673.040484][T14246] proc_sys_readdir+0x592/0xc90 [ 673.040508][T14246] iterate_dir+0x399/0x570 [ 673.040531][T14246] __ia32_compat_sys_getdents+0x140/0x2b0 [ 673.040561][T14246] ? __pfx___ia32_compat_sys_getdents+0x10/0x10 [ 673.040582][T14246] ? __pfx_compat_filldir+0x10/0x10 [ 673.040613][T14246] __do_fast_syscall_32+0x20d/0x640 [ 673.040638][T14246] ? do_fast_syscall_32+0x33/0x70 [ 673.040659][T14246] ? asm_int80_emulation+0x1a/0x20 [ 673.040674][T14246] ? do_int80_emulation+0x274/0x4d0 [ 673.040695][T14246] ? trace_irq_disable+0x3b/0x150 [ 673.040712][T14246] do_fast_syscall_32+0x33/0x70 [ 673.040734][T14246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.040758][T14246] RIP: 0023:0xf7fd5f6c [ 673.040773][T14246] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 673.040785][T14246] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 000000000000008d [ 673.040802][T14246] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800005c0 [ 673.040813][T14246] RDX: 000000000000009c RSI: 0000000000000000 RDI: 0000000000000000 [ 673.040823][T14246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.040832][T14246] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 673.040840][T14246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.040862][T14246] [ 673.291163][ T5911] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.301399][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.314266][ T5911] usb 3-1: config 0 descriptor?? [ 673.766251][ T5911] hid_parser_main: 1147 callbacks suppressed [ 673.766272][ T5911] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x4 [ 673.799377][ T5911] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 674.356595][ T5884] usb 6-1: USB disconnect, device number 6 [ 674.834699][ T5884] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 675.016429][ T5884] usb 6-1: config 0 has an invalid interface number: 106 but max is 0 [ 675.047760][ T5884] usb 6-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config [ 675.080253][ T5884] usb 6-1: config 0 has no interface number 0 [ 675.098497][ T5884] usb 6-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 675.136628][ T5884] usb 6-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 675.180015][ T5884] usb 6-1: config 0 interface 106 has no altsetting 0 [ 675.194600][ T5884] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 675.234524][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.257585][ T5884] usb 6-1: config 0 descriptor?? [ 675.432089][ T24] usb 3-1: reset high-speed USB device number 83 using dummy_hcd [ 675.754922][T14268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2380'. [ 675.813313][T14270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.870343][T14270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.885596][T14268] ipvlan2: entered allmulticast mode [ 675.996272][T14268] batadv0: entered allmulticast mode [ 676.017809][T14268] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 676.566466][ T5911] usb 3-1: USB disconnect, device number 83 [ 676.586970][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 676.600856][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 676.610453][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 676.620283][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 676.636812][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 676.942611][T14269] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.2378'. [ 677.842572][ T5884] usb 6-1: string descriptor 0 read error: -71 [ 677.856269][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 677.856288][ T29] audit: type=1326 audit(1776045565.680:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 677.924552][ T29] audit: type=1326 audit(1776045565.680:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 677.948495][ T5884] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 677.956375][ T12] usb 6-1: Failed to submit usb control message: -71 [ 677.965723][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 677.972908][ T12] usb 6-1: unable to get target info from device [ 677.983011][ T12] usb 6-1: could not get target info (-71) [ 677.993163][ T12] usb 6-1: could not probe fw (-71) [ 678.024903][ T5884] usb 6-1: USB disconnect, device number 7 [ 678.094601][ T29] audit: type=1326 audit(1776045565.680:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 678.126434][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 678.190463][T14289] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2386'. [ 678.199610][ T29] audit: type=1326 audit(1776045565.680:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 678.263938][ T29] audit: type=1326 audit(1776045565.680:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 678.343291][ T29] audit: type=1326 audit(1776045565.680:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 678.430949][ T29] audit: type=1326 audit(1776045565.680:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 678.794246][ T5839] Bluetooth: hci0: command tx timeout [ 678.918868][ T29] audit: type=1326 audit(1776045565.690:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 679.047914][ T29] audit: type=1326 audit(1776045565.700:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 679.139196][ T29] audit: type=1326 audit(1776045565.700:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14281 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 679.184393][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.220700][ T134] bond_slave_0: left allmulticast mode [ 679.236133][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.265864][ T134] bond_slave_1: left allmulticast mode [ 679.271740][ T134] bond0 (unregistering): Released all slaves [ 679.289308][ T134] bond1 (unregistering): Released all slaves [ 679.325764][ T134] bond2 (unregistering): (slave veth1_to_team): Releasing backup interface [ 679.338927][ T134] bond2 (unregistering): Released all slaves [ 679.353196][ T134] bond3 (unregistering): Released all slaves [ 679.372578][ T134] bond4 (unregistering): Released all slaves [ 679.485125][ T5911] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 679.646699][ T5911] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.658426][ T5911] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.690835][ T5911] usb 5-1: config 1 interface 1 has no altsetting 1 [ 679.729373][ T5911] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.740790][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.759268][ T5911] usb 5-1: Product: syz [ 679.768116][ T5911] usb 5-1: Manufacturer: syz [ 679.772804][ T5911] usb 5-1: SerialNumber: syz [ 679.780996][ T134] tipc: Disabling bearer [ 679.793520][ T134] tipc: Left network mode [ 679.798475][ T5911] usb 5-1: selecting invalid altsetting 1 [ 680.011514][ T5911] cdc_ncm 5-1:1.0: bind() failure [ 680.041544][ T5911] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 680.053196][ T5911] cdc_ncm 5-1:1.1: bind() failure [ 680.072820][ T5911] usb 5-1: USB disconnect, device number 87 [ 680.100462][T14276] chnl_net:caif_netlink_parms(): no params data found [ 680.124990][T13331] udevd[13331]: setting mode of /dev/bus/usb/005/087 to 020664 failed: No such file or directory [ 680.154217][T13331] udevd[13331]: setting owner of /dev/bus/usb/005/087 to uid=0, gid=0 failed: No such file or directory [ 680.850610][ T5839] Bluetooth: hci0: command tx timeout [ 681.196573][T14341] overlayfs: missing 'lowerdir' [ 681.421369][T14276] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.512118][T14276] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.551900][T14276] bridge_slave_0: entered allmulticast mode [ 681.585272][T14276] bridge_slave_0: entered promiscuous mode [ 681.628080][T14276] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.719219][T14276] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.746179][T14276] bridge_slave_1: entered allmulticast mode [ 681.767881][T14276] bridge_slave_1: entered promiscuous mode [ 682.146285][ T134] hsr_slave_0: left promiscuous mode [ 682.172148][ T134] hsr_slave_1: left promiscuous mode [ 682.181056][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.246771][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.566700][T14355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.614000][T14355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.797320][T14359] PKCS7: Unknown OID: [4] 5.25.1823.112.81.102.117.87.150326315.2007.15776. [ 682.806130][ T5884] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 682.813890][T14359] PKCS7: Only support pkcs7_signedData type [ 682.964678][ T5839] Bluetooth: hci0: command tx timeout [ 683.263695][ T134] team0 (unregistering): Port device team_slave_1 removed [ 683.565998][ T5884] usb 2-1: device descriptor read/64, error -71 [ 683.670946][ T134] team0 (unregistering): Port device team_slave_0 removed [ 683.814560][ T5884] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 683.887126][T14365] FAULT_INJECTION: forcing a failure. [ 683.887126][T14365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.904645][T14365] CPU: 1 UID: 0 PID: 14365 Comm: syz.2.2403 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.904670][T14365] Tainted: [L]=SOFTLOCKUP [ 683.904676][T14365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 683.904686][T14365] Call Trace: [ 683.904692][T14365] [ 683.904699][T14365] dump_stack_lvl+0xe8/0x150 [ 683.904725][T14365] should_fail_ex+0x412/0x560 [ 683.904754][T14365] _copy_from_user+0x2d/0xb0 [ 683.904774][T14365] kstrtouint_from_user+0xd6/0x180 [ 683.904791][T14365] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 683.904819][T14365] proc_fail_nth_write+0x8e/0x210 [ 683.904842][T14365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 683.904869][T14365] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 683.904893][T14365] vfs_write+0x29a/0xb90 [ 683.904917][T14365] ? __pfx_vfs_write+0x10/0x10 [ 683.904936][T14365] ? __fget_files+0x2a/0x420 [ 683.904953][T14365] ? __fget_files+0x3a0/0x420 [ 683.904967][T14365] ? __fget_files+0x2a/0x420 [ 683.904987][T14365] ksys_write+0x150/0x270 [ 683.905006][T14365] ? __pfx_ksys_write+0x10/0x10 [ 683.905026][T14365] ? asm_int80_emulation+0x1a/0x20 [ 683.905046][T14365] do_int80_emulation+0x173/0x4d0 [ 683.905068][T14365] ? trace_irq_disable+0x3b/0x150 [ 683.905082][T14365] ? asm_int80_emulation+0x1a/0x20 [ 683.905096][T14365] ? clear_bhb_loop+0x40/0x90 [ 683.905112][T14365] ? clear_bhb_loop+0x40/0x90 [ 683.905130][T14365] asm_int80_emulation+0x1a/0x20 [ 683.905145][T14365] RIP: 0023:0xf7125cab [ 683.905160][T14365] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 683.905173][T14365] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 683.905189][T14365] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 683.905200][T14365] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.905209][T14365] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.905218][T14365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 683.905227][T14365] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.905248][T14365] [ 683.913674][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 683.913696][ T29] audit: type=1326 audit(1776045571.720:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.169273][ T29] audit: type=1326 audit(1776045571.720:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.194598][ T29] audit: type=1326 audit(1776045571.720:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.221685][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 684.234518][ T5884] usb 2-1: device descriptor read/64, error -71 [ 684.250644][T14367] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2402'. [ 684.289728][ T29] audit: type=1326 audit(1776045571.720:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.351415][ T5884] usb usb2-port1: attempt power cycle [ 684.401529][ T29] audit: type=1326 audit(1776045571.720:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.452463][ T29] audit: type=1326 audit(1776045571.720:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.536662][ T29] audit: type=1326 audit(1776045571.720:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.562775][ T29] audit: type=1326 audit(1776045571.720:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.591226][ T29] audit: type=1326 audit(1776045571.720:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.643730][T14276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.653154][ T29] audit: type=1326 audit(1776045571.720:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.4.2402" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 684.678340][T14276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.744546][ T5884] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 684.757757][T14276] team0: Port device team_slave_0 added [ 684.768815][ T5884] usb 2-1: device descriptor read/8, error -71 [ 684.780592][T14276] team0: Port device team_slave_1 added [ 684.887895][T14276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.930454][T14276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.983028][T14276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.997626][T14276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.014687][ T5839] Bluetooth: hci0: command tx timeout [ 685.054551][ T5884] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 685.106831][ T5884] usb 2-1: device descriptor read/8, error -71 [ 685.204966][T14377] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 685.213949][T14377] PKCS7: Only support pkcs7_signedData type [ 685.272460][ T5884] usb usb2-port1: unable to enumerate USB device [ 685.346794][T14276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.443557][T14383] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2406'. [ 685.487517][T14276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.893851][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.900448][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.103427][T14387] program syz.4.2407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.173604][T14276] hsr_slave_0: entered promiscuous mode [ 686.243879][T14276] hsr_slave_1: entered promiscuous mode [ 686.949139][ T5884] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 687.224543][ T5884] usb 2-1: Using ep0 maxpacket: 32 [ 687.247003][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 687.258344][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.315113][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.410915][ T5884] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 687.439475][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.614572][ T5884] usb 2-1: Product: syz [ 687.618809][ T5884] usb 2-1: Manufacturer: syz [ 687.689101][ T5884] usb 2-1: SerialNumber: syz [ 687.940056][T14276] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 688.109116][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 688.116803][T14276] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 688.127922][T14434] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2416'. [ 688.195728][T14276] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 688.260657][ T5884] usb 2-1: USB disconnect, device number 79 [ 688.277723][T14276] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 688.305888][T14440] Option ' ' to dns_resolver key: bad/missing value [ 688.333712][T14440] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2418'. [ 688.438504][T14440] tipc: New replicast peer: 255.255.255.255 [ 688.459052][T14440] tipc: Enabled bearer , priority 10 [ 689.064939][ T5884] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 689.167100][T14459] ======================================================= [ 689.167100][T14459] WARNING: The mand mount option has been deprecated and [ 689.167100][T14459] and is ignored by this kernel. Remove the mand [ 689.167100][T14459] option from the mount to silence this warning. [ 689.167100][T14459] ======================================================= [ 689.253052][ T5884] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 689.282711][T14464] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 689.292115][T14464] PKCS7: Only support pkcs7_signedData type [ 689.309957][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.352651][ T5884] usb 2-1: Product: syz [ 689.405440][ T5884] usb 2-1: Manufacturer: syz [ 689.410110][ T5884] usb 2-1: SerialNumber: syz [ 689.419330][T14276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.455563][ T5884] usb 2-1: config 0 descriptor?? [ 689.497998][ T5884] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 080 [ 689.622790][ T5928] tipc: Node number set to 3115233321 [ 689.641355][T14276] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.663141][T14448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2419'. [ 689.885541][ T5884] (null): failure reading functionality [ 689.886341][T14448] tipc: Trying to set illegal importance in message [ 689.979584][ T5884] i2c i2c-2: failure reading functionality [ 690.183211][ T5884] i2c i2c-2: connected i2c-tiny-usb device [ 690.209771][ T5884] usb 2-1: USB disconnect, device number 80 [ 690.925445][ T67] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 691.013436][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.020711][ T6768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.220834][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.228011][ T6768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.470889][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 691.470910][ T29] audit: type=1326 audit(1776045579.330:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 691.561692][ T29] audit: type=1326 audit(1776045579.330:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 691.642097][T14490] overlayfs: missing 'lowerdir' [ 691.781579][ T29] audit: type=1326 audit(1776045579.360:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 691.807702][T14276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.924337][ T29] audit: type=1326 audit(1776045579.360:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 692.234699][ T29] audit: type=1326 audit(1776045579.360:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 692.267983][T14276] veth0_vlan: entered promiscuous mode [ 692.302466][T14276] veth1_vlan: entered promiscuous mode [ 692.329960][ T29] audit: type=1326 audit(1776045579.360:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 692.392431][T14276] veth0_macvtap: entered promiscuous mode [ 692.425344][ T29] audit: type=1326 audit(1776045579.360:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 692.649308][ T29] audit: type=1326 audit(1776045579.360:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 692.687633][T14276] veth1_macvtap: entered promiscuous mode [ 692.745318][ T29] audit: type=1326 audit(1776045579.370:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=145 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 692.786342][T14276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.833944][ T29] audit: type=1326 audit(1776045579.370:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14485 comm="syz.4.2427" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 692.880222][T14276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.946000][ T134] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.999655][ T134] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.054048][ T134] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.129862][ T134] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.450112][ T6768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.494615][ T6768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.637062][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.665884][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.120730][T14505] tipc: Enabling of bearer rejected, failed to enable media [ 694.168621][T14535] netlink: 'syz.6.2383': attribute type 4 has an invalid length. [ 694.187344][T14536] netlink: 'syz.6.2383': attribute type 4 has an invalid length. [ 694.206490][T14537] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 694.215371][T14537] PKCS7: Only support pkcs7_signedData type [ 694.856675][T14546] FAULT_INJECTION: forcing a failure. [ 694.856675][T14546] name failslab, interval 1, probability 0, space 0, times 0 [ 695.161869][T14546] CPU: 0 UID: 0 PID: 14546 Comm: syz.1.2442 Tainted: G L syzkaller #0 PREEMPT(full) [ 695.161896][T14546] Tainted: [L]=SOFTLOCKUP [ 695.161902][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 695.161911][T14546] Call Trace: [ 695.161918][T14546] [ 695.161926][T14546] dump_stack_lvl+0xe8/0x150 [ 695.161952][T14546] should_fail_ex+0x412/0x560 [ 695.161981][T14546] should_failslab+0xa8/0x100 [ 695.162003][T14546] __kmalloc_cache_noprof+0x88/0x660 [ 695.162021][T14546] ? __pfx_stack_trace_save+0x10/0x10 [ 695.162038][T14546] ? rtnl_newlink+0x136/0x1bb0 [ 695.162059][T14546] rtnl_newlink+0x136/0x1bb0 [ 695.162077][T14546] ? kasan_save_track+0x3e/0x80 [ 695.162093][T14546] ? kasan_save_free_info+0x46/0x50 [ 695.162115][T14546] ? __kasan_slab_free+0x5c/0x80 [ 695.162132][T14546] ? dev_hard_start_xmit+0x2d8/0x870 [ 695.162153][T14546] ? __dev_queue_xmit+0x16d1/0x3890 [ 695.162172][T14546] ? __netlink_deliver_tap+0x5ad/0x850 [ 695.162188][T14546] ? netlink_deliver_tap+0x19c/0x1b0 [ 695.162203][T14546] ? netlink_unicast+0x7e3/0x9b0 [ 695.162225][T14546] ? netlink_sendmsg+0x813/0xb40 [ 695.162242][T14546] ? __pfx_rtnl_newlink+0x10/0x10 [ 695.162258][T14546] ? do_fast_syscall_32+0x33/0x70 [ 695.162279][T14546] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 695.162323][T14546] ? kasan_quarantine_put+0xbb/0x1f0 [ 695.162339][T14546] ? lockdep_hardirqs_on+0x7a/0x110 [ 695.162363][T14546] ? kmem_cache_free+0x187/0x630 [ 695.162380][T14546] ? nlmon_xmit+0xb0/0x100 [ 695.162407][T14546] ? __lock_acquire+0x6b5/0x2cf0 [ 695.162432][T14546] ? __local_bh_enable_ip+0xd0/0x130 [ 695.162452][T14546] ? lockdep_hardirqs_on+0x7a/0x110 [ 695.162471][T14546] ? __dev_queue_xmit+0x277/0x3890 [ 695.162499][T14546] ? __local_bh_enable_ip+0xd0/0x130 [ 695.162518][T14546] ? __dev_queue_xmit+0x277/0x3890 [ 695.162556][T14546] ? __pfx_rtnl_newlink+0x10/0x10 [ 695.162577][T14546] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 695.162597][T14546] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 695.162613][T14546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 695.162629][T14546] ? ref_tracker_free+0x693/0x840 [ 695.162644][T14546] ? __copy_skb_header+0xa3/0x4a0 [ 695.162666][T14546] ? __pfx_ref_tracker_free+0x10/0x10 [ 695.162689][T14546] netlink_rcv_skb+0x232/0x4b0 [ 695.162707][T14546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 695.162725][T14546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.162749][T14546] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.162771][T14546] netlink_unicast+0x80f/0x9b0 [ 695.162801][T14546] ? __pfx_netlink_unicast+0x10/0x10 [ 695.162826][T14546] ? netlink_sendmsg+0x650/0xb40 [ 695.162841][T14546] ? skb_put+0x11b/0x210 [ 695.162862][T14546] netlink_sendmsg+0x813/0xb40 [ 695.162885][T14546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.162904][T14546] ? aa_sock_msg_perm+0xf1/0x1b0 [ 695.162929][T14546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.162950][T14546] ____sys_sendmsg+0x972/0x9f0 [ 695.162977][T14546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.163000][T14546] ? kstrtoull+0x12f/0x1d0 [ 695.163029][T14546] ___sys_sendmsg+0x2a5/0x360 [ 695.163053][T14546] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.163074][T14546] ? get_pid_task+0x20/0x1f0 [ 695.163089][T14546] ? get_pid_task+0x20/0x1f0 [ 695.163102][T14546] ? get_pid_task+0x20/0x1f0 [ 695.163140][T14546] ? __fget_files+0x2a/0x420 [ 695.163155][T14546] ? __fget_files+0x3a0/0x420 [ 695.163176][T14546] __sys_sendmsg+0x183/0x260 [ 695.163198][T14546] ? __pfx___sys_sendmsg+0x10/0x10 [ 695.163234][T14546] __do_fast_syscall_32+0x20d/0x640 [ 695.163257][T14546] ? do_fast_syscall_32+0x33/0x70 [ 695.163278][T14546] ? asm_int80_emulation+0x1a/0x20 [ 695.163293][T14546] ? do_int80_emulation+0x274/0x4d0 [ 695.163314][T14546] ? trace_irq_disable+0x3b/0x150 [ 695.163330][T14546] do_fast_syscall_32+0x33/0x70 [ 695.163352][T14546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 695.163370][T14546] RIP: 0023:0xf7fd5f6c [ 695.163384][T14546] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 695.163397][T14546] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 695.163414][T14546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 695.163424][T14546] RDX: 0000000000004054 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.163433][T14546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 695.163442][T14546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 695.163451][T14546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 695.163472][T14546] [ 695.846649][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2443'. [ 695.946182][T14554] hsr0: entered promiscuous mode [ 695.951381][T14554] macvlan2: entered allmulticast mode [ 695.956909][T14554] hsr0: entered allmulticast mode [ 695.962066][T14554] hsr_slave_0: entered allmulticast mode [ 695.968279][T14554] hsr_slave_1: entered allmulticast mode [ 696.152628][T14562] overlayfs: missing 'lowerdir' [ 696.232810][ T5911] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 696.415527][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 696.515281][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 696.539817][ T5911] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 696.551567][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.587610][ T5911] usb 2-1: Product: syz [ 696.607003][ T5911] usb 2-1: Manufacturer: syz [ 696.800077][ T5911] usb 2-1: SerialNumber: syz [ 697.416762][T14566] ALSA: mixer_oss: invalid OSS volume '' [ 697.897114][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'. [ 697.962341][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2449'. [ 698.702516][T14552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 698.710323][T14552] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 698.734039][T14552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 698.740836][T14552] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 698.787752][T14552] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 698.813710][T14552] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 699.194298][T14552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 699.214655][T14552] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 699.267174][T14552] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 699.273207][T14552] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 699.357197][T14606] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 699.445958][T14606] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 699.734034][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 699.734064][ T29] audit: type=1326 audit(1776045587.560:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 699.830202][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2456'. [ 699.843858][T14618] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2456'. [ 699.865656][ T29] audit: type=1326 audit(1776045587.560:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 699.945065][ T29] audit: type=1326 audit(1776045587.560:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 699.974871][ T29] audit: type=1326 audit(1776045587.560:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 700.017770][T14552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 700.046024][T14552] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 700.056429][ T29] audit: type=1326 audit(1776045587.560:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 700.305547][ T29] audit: type=1326 audit(1776045587.560:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 700.475220][ T29] audit: type=1326 audit(1776045587.560:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 700.574646][ T29] audit: type=1326 audit(1776045587.560:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 700.615793][ T29] audit: type=1326 audit(1776045587.570:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 700.642398][ T5911] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 700.674603][ T5911] usb 2-1: MIDIStreaming interface descriptor not found [ 700.715522][ T29] audit: type=1326 audit(1776045587.570:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.5.2456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f97f6c code=0x7ffc0000 [ 700.867607][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2460'. [ 700.882588][ T5911] usb 2-1: USB disconnect, device number 81 [ 700.962777][T13334] udevd[13334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 701.131658][T14636] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 701.140634][T14636] PKCS7: Only support pkcs7_signedData type [ 701.850450][T14643] netlink: 'syz.2.2462': attribute type 62 has an invalid length. [ 701.934640][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'. [ 702.454306][ T5911] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 702.613929][T14653] kthread_run failed with err -4 [ 702.865590][ T5911] usb 3-1: config 0 has no interfaces? [ 702.944900][ T5911] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 702.954033][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.984496][ T5911] usb 3-1: Product: syz [ 702.988868][ T5911] usb 3-1: Manufacturer: syz [ 702.993509][ T5911] usb 3-1: SerialNumber: syz [ 703.005935][ T5911] usb 3-1: config 0 descriptor?? [ 703.272455][ T5911] usb 3-1: USB disconnect, device number 84 [ 703.455940][T14664] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 704.026043][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2466'. [ 704.041340][T14672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.798749][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 704.798770][ T29] audit: type=1326 audit(1776045592.660:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 704.829557][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2467'. [ 704.897038][T14689] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2467'. [ 704.991229][ T29] audit: type=1326 audit(1776045592.660:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.083063][ T29] audit: type=1326 audit(1776045592.690:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.185859][ T29] audit: type=1326 audit(1776045592.690:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.254591][ T29] audit: type=1326 audit(1776045592.690:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.414747][ T29] audit: type=1326 audit(1776045592.690:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.724164][ T29] audit: type=1326 audit(1776045592.690:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.768713][ T29] audit: type=1326 audit(1776045592.690:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.860378][ T29] audit: type=1326 audit(1776045592.690:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.902770][ T29] audit: type=1326 audit(1776045592.760:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14680 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f25f6c code=0x7ffc0000 [ 705.932583][T14700] netlink: 'syz.1.2469': attribute type 13 has an invalid length. [ 706.836173][T14726] TCP: tcp_parse_options: Illegal window scaling value 47 > 14 received [ 707.664963][T14738] libceph: resolve '0..' (ret=-3): failed [ 707.993760][ T7720] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 708.174739][ T7720] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 708.955389][ T7720] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 709.117549][ T7720] usb 6-1: Using ep0 maxpacket: 8 [ 709.129190][ T7720] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 709.157963][ T7720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.201313][T14759] cgroup: fork rejected by pids controller in /syz6 [ 709.226021][ T7720] pvrusb2: Hardware description: Terratec Grabster AV400 [ 709.259633][ T7720] pvrusb2: ********** [ 709.273370][ T7720] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 709.504608][ T7720] pvrusb2: Important functionality might not be entirely working. [ 709.512582][ T7720] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 709.554509][ T7720] pvrusb2: ********** [ 709.587797][ T2346] pvrusb2: Invalid write control endpoint [ 709.695838][T14851] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 709.769387][ T5911] usb 6-1: USB disconnect, device number 8 [ 709.918017][ T2346] pvrusb2: Invalid write control endpoint [ 709.943296][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 709.993355][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 710.027974][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 710.056462][ T2346] pvrusb2: Device being rendered inoperable [ 710.135763][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 710.165583][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 710.219351][ T2346] pvrusb2: Attached sub-driver cx25840 [ 710.261367][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 710.387255][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 710.578407][ T134] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.915547][ T134] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.166605][ T134] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.414275][T14895] netlink: 'syz.1.2488': attribute type 2 has an invalid length. [ 711.729428][ T134] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.832245][T14906] FAULT_INJECTION: forcing a failure. [ 711.832245][T14906] name failslab, interval 1, probability 0, space 0, times 0 [ 711.884145][T14906] CPU: 0 UID: 0 PID: 14906 Comm: syz.4.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.884177][T14906] Tainted: [L]=SOFTLOCKUP [ 711.884185][T14906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 711.884196][T14906] Call Trace: [ 711.884204][T14906] [ 711.884212][T14906] dump_stack_lvl+0xe8/0x150 [ 711.884242][T14906] should_fail_ex+0x412/0x560 [ 711.884275][T14906] should_failslab+0xa8/0x100 [ 711.884300][T14906] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 711.884322][T14906] ? __alloc_skb+0x1d0/0x7d0 [ 711.884341][T14906] ? __local_bh_enable_ip+0xd0/0x130 [ 711.884368][T14906] __alloc_skb+0x1d0/0x7d0 [ 711.884389][T14906] ? netlink_ack_tlv_len+0x6c/0x210 [ 711.884413][T14906] netlink_ack+0x146/0xa50 [ 711.884431][T14906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 711.884463][T14906] ? __lock_acquire+0x6b5/0x2cf0 [ 711.884501][T14906] netlink_rcv_skb+0x2b6/0x4b0 [ 711.884524][T14906] ? __pfx_genl_rcv_msg+0x10/0x10 [ 711.884554][T14906] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 711.884595][T14906] ? down_read+0x272/0x2e0 [ 711.884624][T14906] ? genl_rcv+0xd/0x40 [ 711.884651][T14906] genl_rcv+0x28/0x40 [ 711.884675][T14906] netlink_unicast+0x80f/0x9b0 [ 711.884710][T14906] ? __pfx_netlink_unicast+0x10/0x10 [ 711.884741][T14906] ? netlink_sendmsg+0x650/0xb40 [ 711.884761][T14906] ? skb_put+0x11b/0x210 [ 711.884778][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.884790][T14906] netlink_sendmsg+0x813/0xb40 [ 711.884822][T14906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.884847][T14906] ? aa_sock_msg_perm+0xf1/0x1b0 [ 711.884879][T14906] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 711.884911][T14906] ____sys_sendmsg+0x972/0x9f0 [ 711.884946][T14906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.885080][T14906] ? kstrtoull+0x12f/0x1d0 [ 711.885189][T14906] ___sys_sendmsg+0x2a5/0x360 [ 711.885279][T14906] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.885358][T14906] ? get_pid_task+0x20/0x1f0 [ 711.885414][T14906] ? get_pid_task+0x20/0x1f0 [ 711.885469][T14906] ? get_pid_task+0x20/0x1f0 [ 711.885595][T14906] ? __fget_files+0x2a/0x420 [ 711.885649][T14906] ? __fget_files+0x3a0/0x420 [ 711.885721][T14906] __sys_sendmsg+0x183/0x260 [ 711.885809][T14906] ? __pfx___sys_sendmsg+0x10/0x10 [ 711.885961][T14906] __do_fast_syscall_32+0x20d/0x640 [ 711.886050][T14906] ? do_fast_syscall_32+0x33/0x70 [ 711.886130][T14906] ? asm_int80_emulation+0x1a/0x20 [ 711.886188][T14906] ? do_int80_emulation+0x274/0x4d0 [ 711.886275][T14906] ? trace_irq_disable+0x3b/0x150 [ 711.886334][T14906] do_fast_syscall_32+0x33/0x70 [ 711.886432][T14906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 711.886522][T14906] RIP: 0023:0xf705ef6c [ 711.886594][T14906] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 711.886649][T14906] RSP: 002b:00000000f542c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 711.886712][T14906] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 711.886749][T14906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.886784][T14906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.886826][T14906] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 711.886861][T14906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 711.886942][T14906] [ 712.235742][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.254778][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.262933][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.275311][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.336111][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.399010][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.407938][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.408674][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 712.408719][ T29] audit: type=1326 audit(1776045600.240:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 712.453289][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.465202][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.753894][ T29] audit: type=1326 audit(1776045600.240:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 712.811349][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2494'. [ 712.874561][ T29] audit: type=1326 audit(1776045600.240:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 712.911118][T14928] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2494'. [ 712.943588][T14905] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.951409][T14905] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.154671][ T29] audit: type=1326 audit(1776045600.240:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 713.334596][ T29] audit: type=1326 audit(1776045600.240:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 713.451954][T14905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.522415][ T29] audit: type=1326 audit(1776045600.250:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 713.729034][ T29] audit: type=1326 audit(1776045600.320:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 714.148221][ T29] audit: type=1326 audit(1776045600.320:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 714.228737][ T29] audit: type=1326 audit(1776045600.320:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 714.288129][T14905] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 714.311032][ T29] audit: type=1326 audit(1776045600.380:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14910 comm="syz.1.2494" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fd5f6c code=0x7ffc0000 [ 714.362924][T14905] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 714.541391][T14939] batman_adv: batadv0: Interface activated: netdevsim0 [ 714.675416][ T5831] Bluetooth: hci0: command tx timeout [ 714.697258][ T67] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.714623][ T67] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.723666][ T67] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.789662][ T67] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.564726][ T30] INFO: task kworker/1:5:5919 blocked for more than 143 seconds. [ 716.578716][ T30] Tainted: G L syzkaller #0 [ 716.588798][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 716.601882][ T30] task:kworker/1:5 state:D stack:21608 pid:5919 tgid:5919 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 716.749087][ T5831] Bluetooth: hci0: command tx timeout [ 716.777423][ T134] bridge_slave_1: left allmulticast mode [ 716.791766][ T134] bridge_slave_1: left promiscuous mode [ 716.814517][ T30] Workqueue: usb_hub_wq hub_event [ 716.819735][ T30] Call Trace: [ 716.823068][ T30] [ 716.839960][ T30] __schedule+0x15dd/0x52d0 [ 716.863419][ T30] ? __pfx___schedule+0x10/0x10 [ 716.869516][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.869513][ T30] ? schedule+0x90/0x360 [ 716.905897][T14958] FAULT_INJECTION: forcing a failure. [ 716.905897][T14958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.924595][ T30] schedule+0x164/0x360 [ 716.944542][ T30] schedule_timeout+0xc3/0x2c0 [ 716.964599][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 717.014499][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 717.016226][T14958] CPU: 0 UID: 0 PID: 14958 Comm: syz.5.2501 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.016324][T14958] Tainted: [L]=SOFTLOCKUP [ 717.016346][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.016390][T14958] Call Trace: [ 717.016414][T14958] [ 717.016444][T14958] dump_stack_lvl+0xe8/0x150 [ 717.016528][T14958] should_fail_ex+0x412/0x560 [ 717.016640][T14958] _copy_to_user+0x31/0xb0 [ 717.016720][T14958] simple_read_from_buffer+0xe1/0x170 [ 717.016826][T14958] proc_fail_nth_read+0x1bb/0x230 [ 717.016925][T14958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.017027][T14958] ? rw_verify_area+0x2a6/0x4d0 [ 717.017094][T14958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.017184][T14958] vfs_read+0x20c/0xa70 [ 717.017260][T14958] ? fdget_pos+0x246/0x320 [ 717.017328][T14958] ? __pfx___mutex_lock+0x10/0x10 [ 717.017407][T14958] ? __pfx_vfs_read+0x10/0x10 [ 717.017484][T14958] ? __fget_files+0x2a/0x420 [ 717.017565][T14958] ? __fget_files+0x3a0/0x420 [ 717.017627][T14958] ? __fget_files+0x2a/0x420 [ 717.017698][T14958] ksys_read+0x150/0x270 [ 717.017769][T14958] ? __pfx_ksys_read+0x10/0x10 [ 717.017846][T14958] ? asm_int80_emulation+0x1a/0x20 [ 717.017919][T14958] do_int80_emulation+0x173/0x4d0 [ 717.018000][T14958] ? trace_irq_disable+0x3b/0x150 [ 717.018054][T14958] ? asm_int80_emulation+0x1a/0x20 [ 717.018110][T14958] ? clear_bhb_loop+0x40/0x90 [ 717.018167][T14958] ? clear_bhb_loop+0x40/0x90 [ 717.018253][T14958] asm_int80_emulation+0x1a/0x20 [ 717.018310][T14958] RIP: 0023:0xf7195cab [ 717.018365][T14958] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 717.018420][T14958] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 717.018478][T14958] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54565d0 [ 717.018515][T14958] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 717.018549][T14958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.018584][T14958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 717.018618][T14958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.018700][T14958] [ 717.484849][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 717.489943][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 717.514637][ T30] ? wait_for_completion+0x274/0x5e0 [ 717.520042][ T30] wait_for_completion+0x2cc/0x5e0 [ 717.544875][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 717.550605][ T30] i2c_del_adapter+0x5c0/0x790 [ 717.595115][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 717.600415][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 717.624540][ T30] ? dvb_usbv2_exit+0x935/0xb60 [ 717.629453][ T30] dvb_usbv2_probe+0x4c3/0x3d40 [ 717.634879][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 717.640196][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 717.702838][ T30] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 717.714592][ T30] usb_probe_interface+0x668/0xc90 [ 717.719885][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 717.744535][ T30] really_probe+0x267/0xaf0 [ 717.749106][ T30] __driver_probe_device+0x18c/0x320 [ 717.764878][ T30] driver_probe_device+0x4f/0x240 [ 717.769991][ T30] __device_attach_driver+0x279/0x430 [ 717.784869][ T30] bus_for_each_drv+0x258/0x2f0 [ 717.789768][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 717.805662][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 717.811114][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 717.817000][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 717.822853][ T30] __device_attach+0x2c5/0x450 [ 717.844926][ T30] ? __pfx___device_attach+0x10/0x10 [ 717.850311][ T30] ? _raw_spin_unlock+0x28/0x50 [ 717.864549][ T30] device_initial_probe+0xa1/0xd0 [ 717.869660][ T30] bus_probe_device+0x12a/0x220 [ 717.884778][ T30] ? device_add+0x726/0xb70 [ 717.889399][ T30] device_add+0x7b6/0xb70 [ 717.893844][ T30] usb_set_configuration+0x1a87/0x2110 [ 717.914596][ T30] usb_generic_driver_probe+0x8d/0x150 [ 717.920335][ T30] usb_probe_device+0x1c4/0x3b0 [ 717.934593][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 717.940013][ T30] really_probe+0x267/0xaf0 [ 717.954606][ T30] __driver_probe_device+0x18c/0x320 [ 717.960156][ T30] driver_probe_device+0x4f/0x240 [ 717.974608][ T30] __device_attach_driver+0x279/0x430 [ 717.980073][ T30] bus_for_each_drv+0x258/0x2f0 [ 717.994585][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 718.000550][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 718.024545][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 718.029831][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 718.044583][ T30] __device_attach+0x2c5/0x450 [ 718.049451][ T30] ? __pfx___device_attach+0x10/0x10 [ 718.064525][ T30] ? _raw_spin_unlock+0x28/0x50 [ 718.069586][ T30] device_initial_probe+0xa1/0xd0 [ 718.084509][ T30] bus_probe_device+0x12a/0x220 [ 718.089526][ T30] ? device_add+0x726/0xb70 [ 718.094098][ T30] device_add+0x7b6/0xb70 [ 718.104523][ T30] usb_new_device+0xa08/0x16f0 [ 718.114577][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 718.119856][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 718.134565][ T30] hub_event+0x2a1c/0x4f30 [ 718.139158][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 718.144369][ T30] ? __pfx_hub_event+0x10/0x10 [ 718.164526][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 718.170333][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 718.194569][ T30] process_scheduled_works+0xb6e/0x18c0 [ 718.200193][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 718.214596][ T30] ? assign_work+0x3d5/0x5e0 [ 718.219304][ T30] worker_thread+0xa53/0xfc0 [ 718.223982][ T30] kthread+0x388/0x470 [ 718.244517][ T30] ? __pfx_worker_thread+0x10/0x10 [ 718.249726][ T30] ? __pfx_kthread+0x10/0x10 [ 718.254376][ T30] ret_from_fork+0x51e/0xb90 [ 718.274605][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 718.279797][ T30] ? __switch_to+0xc7d/0x1450 [ 718.294557][ T30] ? __pfx_kthread+0x10/0x10 [ 718.299222][ T30] ret_from_fork_asm+0x1a/0x30 [ 718.304053][ T30] [ 718.356846][ T30] [ 718.356846][ T30] Showing all locks held in the system: [ 718.434591][ T30] 1 lock held by khungtaskd/30: [ 718.439524][ T30] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 718.452228][ T134] bridge_slave_0: left allmulticast mode [ 718.484491][ T134] bridge_slave_0: left promiscuous mode [ 718.490405][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.564543][ T30] 3 locks held by kworker/u8:4/67: [ 718.569777][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 718.644631][ T30] #1: ffffc9000213fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 718.704497][ T30] #2: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 718.713588][ T30] 5 locks held by kworker/u8:6/134: [ 718.764516][ T5831] Bluetooth: hci0: command tx timeout [ 718.796275][ T30] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 718.864651][ T30] #1: ffffc90002f87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 718.944582][ T30] #2: ffffffff8fbc23b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 718.953999][ T30] #3: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 719.037929][ T30] #4: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 719.114652][ T30] 2 locks held by dhcpcd/5488: [ 719.120042][ T30] #0: ffffffff8fbb2088 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 719.174553][ T30] #1: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 719.184071][ T30] 2 locks held by getty/5587: [ 719.202718][ T30] #0: ffff8880324790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 719.224734][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 719.244604][ T30] 5 locks held by kworker/1:5/5919: [ 719.249985][ T30] #0: ffff888021ad9548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 719.274558][ T30] #1: ffffc9000445fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 719.294576][ T30] #2: ffff88802a4641e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 719.304047][ T30] #3: ffff88804ab221e0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 719.313916][ T30] #4: ffff88807a8041a8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 719.323627][ T30] 3 locks held by kworker/0:0/14914: [ 719.335162][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 719.354805][ T30] #1: ffffc90005f07c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 719.375003][ T30] #2: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 719.394802][ T30] 2 locks held by syz-executor/14920: [ 719.404924][ T30] #0: ffffffff90122870 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 719.414785][ T30] #1: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 719.424014][ T30] 3 locks held by kworker/1:2/14921: [ 719.434578][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 719.454549][ T30] #1: ffffc9000fd07c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 719.475204][ T30] #2: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 719.486604][ T30] 1 lock held by syz.2.2498/14951: [ 719.491763][ T30] #0: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 719.500927][ T30] 1 lock held by syz.4.2500/14955: [ 719.514528][ T30] #0: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 719.533634][ T30] 1 lock held by syz.5.2501/14958: [ 719.544593][ T30] #0: ffffffff8fbd0b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 719.577560][ T30] [ 719.579966][ T30] ============================================= [ 719.579966][ T30] [ 719.599071][ T30] NMI backtrace for cpu 0 [ 719.599097][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 719.599125][ T30] Tainted: [L]=SOFTLOCKUP [ 719.599133][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 719.599146][ T30] Call Trace: [ 719.599157][ T30] [ 719.599167][ T30] dump_stack_lvl+0xe8/0x150 [ 719.599202][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 719.599226][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 719.599255][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 719.599282][ T30] sys_info+0x135/0x170 [ 719.599301][ T30] watchdog+0xfd9/0x1030 [ 719.599327][ T30] ? watchdog+0x21a/0x1030 [ 719.599354][ T30] kthread+0x388/0x470 [ 719.599376][ T30] ? __pfx_watchdog+0x10/0x10 [ 719.599394][ T30] ? __pfx_kthread+0x10/0x10 [ 719.599417][ T30] ret_from_fork+0x51e/0xb90 [ 719.599448][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 719.599474][ T30] ? __switch_to+0xc7d/0x1450 [ 719.599503][ T30] ? __pfx_kthread+0x10/0x10 [ 719.599524][ T30] ret_from_fork_asm+0x1a/0x30 [ 719.599570][ T30] [ 719.599578][ T30] Sending NMI from CPU 0 to CPUs 1: [ 719.715945][ C1] NMI backtrace for cpu 1 [ 719.715967][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.715992][ C1] Tainted: [L]=SOFTLOCKUP [ 719.715999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 719.716011][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 719.716041][ C1] Code: 7e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 92 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 719.716056][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 719.716073][ C1] RAX: 0000000000b103f1 RBX: ffffffff819a9c3a RCX: 0000000080000001 [ 719.716086][ C1] RDX: 0000000000000001 RSI: ffffffff8defbe6a RDI: ffffffff8c27d580 [ 719.716098][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 719.716112][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 719.716125][ C1] R13: 1ffff11003bda000 R14: 0000000000000001 R15: 1ffff11003bda000 [ 719.716137][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 719.716159][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 719.716171][ C1] CR2: 0000560ff1458ee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 719.716187][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 719.716197][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 719.716208][ C1] Call Trace: [ 719.716217][ C1] [ 719.716225][ C1] default_idle+0x9/0x20 [ 719.716251][ C1] default_idle_call+0x72/0xb0 [ 719.716269][ C1] do_idle+0x36a/0x5f0 [ 719.716293][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 719.716316][ C1] ? __pfx_do_idle+0x10/0x10 [ 719.716344][ C1] cpu_startup_entry+0x43/0x60 [ 719.716368][ C1] start_secondary+0x101/0x110 [ 719.716390][ C1] common_startup_64+0x13e/0x147 [ 719.716417][ C1] [ 719.983641][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 719.990572][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 720.001312][ T30] Tainted: [L]=SOFTLOCKUP [ 720.005661][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.015733][ T30] Call Trace: [ 720.019042][ T30] [ 720.021984][ T30] vpanic+0x56c/0xa60 [ 720.025987][ T30] ? __pfx___schedule+0x10/0x10 [ 720.030851][ T30] ? __pfx_vpanic+0x10/0x10 [ 720.035377][ T30] ? __pfx_console_unlock+0x10/0x10 [ 720.040600][ T30] panic+0xc5/0xd0 [ 720.044334][ T30] ? __pfx_panic+0x10/0x10 [ 720.048886][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 720.054270][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 720.060439][ T30] watchdog+0x1023/0x1030 [ 720.064785][ T30] ? watchdog+0x21a/0x1030 [ 720.069215][ T30] kthread+0x388/0x470 [ 720.073291][ T30] ? __pfx_watchdog+0x10/0x10 [ 720.077984][ T30] ? __pfx_kthread+0x10/0x10 [ 720.082587][ T30] ret_from_fork+0x51e/0xb90 [ 720.087206][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 720.092353][ T30] ? __switch_to+0xc7d/0x1450 [ 720.097092][ T30] ? __pfx_kthread+0x10/0x10 [ 720.101728][ T30] ret_from_fork_asm+0x1a/0x30 [ 720.106538][ T30] [ 720.110195][ T30] Kernel Offset: disabled [ 720.114537][ T30] Rebooting in 86400 seconds..