last executing test programs: 20m50.267417721s ago: executing program 0 (id=1446): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e24, 0xb, @remote, 0x3}, {0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x0, {[0x6c1, 0x3, 0x9, 0x3, 0x0, 0x4, 0x800, 0x80]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0xc04c080}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000780)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15.9\x8b|\xe9H\xa7a>\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x02\x00\x00\x00\x00\xc7\x0f\xaa\t\x00\x00\x00;\xd5\x014g+\xbd\xd1\xe0R\x9d\x18\x19a:', 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000050500fcfffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000240012800b000100627269646765000014000280050019000900000008001a00720e0000"], 0x44}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5", 0x17}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1caacc2bbf1194598a65267", 0xcf}], 0x1}}], 0x2, 0x2090) sendto$inet(r1, &(0x7f0000000640)="5277c8d23d5d0f9e69b4600c655dbd0d97325289d6a118fb98651a8bd045a018807c9f0123c42e58fc6128b79c1149e3a29b80b40cc8a5228c65772c2d9304f3f0fb8a89011b41e73bdc852d9404f4ffe221cebfcd46352fff7c4e2c715cb56599", 0x61, 0x4, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000700)="7daab763921fe9087261cf01a6fe714469e7566c432327543768330fc28dd21081d4f295037690895f995ce339f99f0b6661a2c68e586ca592842dbfd1071cea6812a420b21fcf23fbc6c277dfe470d0da548f15fb2ed7bf4938117c4556762c45ebe87ebf3cf819d89ae2b17725033efa62324cd40f5ae93d1ca0c5257c5c5a2d4943b3a361f5649378706b1f0dfd489f7a56828950de4dfc7714cd744622059cd47f6583715e096fc9c2c8137540b930099c8539bf9b9b820650f188922110d2581d", 0xc3, 0x10008095, 0x0, 0x0) 20m49.466837754s ago: executing program 0 (id=1450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}]}]}]}, 0x4c}}, 0x0) r2 = socket$kcm(0x10, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x6}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x2, 0xff, "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", 0x3, "5c8dc20000000000fb002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x5, 0x11, 0xd5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x1, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 20m48.825328524s ago: executing program 0 (id=1452): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xeac9, 0x1}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0xfffc, 0x0, 0x7, {[@mss={0x2, 0x4, 0x4b9}]}}}}}}}}, 0x0) 20m48.514581873s ago: executing program 0 (id=1454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000140)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', r2) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x4) 20m47.623877575s ago: executing program 0 (id=1459): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f00000002c0)=""/153, 0x99) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000839000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10040004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x20004450) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) mount$fuse(0x0, 0x0, 0x0, 0x1009831, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0x1}]) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) io_destroy(r3) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1fc, 0x0, 0x2, 0x401, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0x4}, [@generic="e43412b66597eb7de725c56de9d8f99e33624dc18fb5fcff7a5acaed77c5af9de7566d87524ced2779d7a7d3ebf0702a0552789caa3f01ee4b6e679fbeee3597cd706fa4906d01f9d0238b1468765cbe4e68010d81ead6c71e3e15e98a73c241308e9cf6cc6f44b48542f00dc25c277a8eb99c88f6af3a32a9fcbab2deef8a7d62933784be4b9b7fdd5fad5be7eb94d2654bb27f09858db82ad36b9f88281f95ff217417e2528d357a2bfdbbebe3fe93ea875f5b168fa59976f8f1bea802622018ee5b60f2bdb350eb32bd35", @typed={0xa, 0x5, 0x0, 0x0, @str=',--*[\x00'}, @generic="89b56a041801b0a615a26df77b1d52c6b55b3c2ec7d979df5b9b3f432208f987b9de2d6dbff97fc2fd6dd3a53d349385c7b39e4d5feda46038e093f81f0bb63474d72bd698f8683f1d40b52cc1cce8bf493105812da2dac32fcf7b712de796fbf5f2bd28a308dacf7edab20e221ae41688b341fa4f3ecc0cbd17cd4f75539cc6d7ad8f1a6a", @generic="0a6a6d8154642fa57c51ec2e13dc2b0ebdd51d71c92f7d72b875c3d6d3f237c01d96ead23bba33b2e2d13fd85c34a8f946353d1b32ca6f39dfa1ce5ff89875d6bc86ae31ac67f0827466cf90d3573c31df3502fad94ecaed34d577fbd100113caa4b379415f98eebe3eb54a72650a423b9b759304259949a197a0f8eeb030ae5c6d347392be443372fb4ff"]}, 0x1fc}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000001) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000180)={0x8000, [0x3, 0x50, 0x8000, 0xf, 0xed4, 0x0, 0x8000, 0x31b3, 0x80, 0x6, 0xa, 0x9, 0x81, 0xb2c3, 0xdd4, 0x9, 0xf, 0x40, 0x6b5, 0xfffc, 0x100, 0x8, 0x4, 0x2, 0x17, 0x7, 0x6f, 0x2, 0x100, 0x5, 0x4, 0xd, 0xda2d, 0x85, 0xfffd, 0xffff, 0x3, 0xa144, 0x0, 0x2, 0x1, 0x8, 0x9, 0x57d, 0x1, 0x800, 0x7ff, 0x4], 0x4}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) 20m41.17485996s ago: executing program 0 (id=1485): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 20m40.601270594s ago: executing program 32 (id=1485): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) 17m24.461318576s ago: executing program 5 (id=2177): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0x9}}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080), 0x1}, 0x20) r1 = eventfd2(0x0, 0x801) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000540)={0x20, 0x8, 0x6, "0d4de6eb5737"}, 0x0, 0x0, 0x0, 0x0}) 17m20.129623334s ago: executing program 5 (id=2191): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x1402, 0x1, 0x70bd28, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}}, 0x800) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x6a, 0x8a, 0x30, 0x20, 0x413c, 0x8172, 0xb769, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0xb, 0x7, 0x40, 0x9, "", [{{0x9, 0x4, 0xa1, 0x1, 0x0, 0x88, 0x6e, 0xc7, 0x5}}, {{0x9, 0x4, 0x94, 0x0, 0x0, 0xff, 0xff, 0xff, 0x7}}, {{0x9, 0x4, 0x56, 0x7f, 0x0, 0xff, 0xff, 0x60}}]}}]}}, &(0x7f0000000f40)={0x0, 0x0, 0x5, &(0x7f0000000d00)={0x5, 0xf, 0x5}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 17m18.08533903s ago: executing program 5 (id=2196): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000340), 0x2) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x6481, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000008c0), 0x400000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f00000009c0)={0x709d628794a58f30, 0x0, 0x0, 0x0}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3c) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0xc00, 0x1ea) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001a0001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa0000000000000000000000000400000000000040040000000000000061f10000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000010000000000010400000d00000000000000feffffff000000000a00040090000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x818) 17m16.837261747s ago: executing program 5 (id=2197): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 17m16.563659927s ago: executing program 5 (id=2199): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="4001270000008be788f0b2c12036551271aefd07d4785c334b4d24f76c85e5f95ceb434f479b25000000000000"], 0x0, 0x0, &(0x7f0000000540)={0x20, 0x81, 0x3, "f0c80b"}, 0x0, &(0x7f00000005c0)={0x20, 0x83, 0x1, 'K'}, 0x0, &(0x7f0000000640)={0x20, 0x85, 0x3, "7017a3"}}) syz_usb_control_io$lan78xx(r0, &(0x7f0000002b00)={0x14, &(0x7f0000002980)={0x20, 0x3, 0xbf, {0xbf, 0x27, "3a9234e5448d8f8dd5772d3e8c149747392fa292a799118cd5c79adbe5fe6a2914802569dcfeea5ae6556bcd3fe9971546ad36eef881da23a0441d4e4c6448d456fd26b19347963691027aa24a5b2f87efb7b800ecdf9fdebf6e5b5a65d2751bf7967201453f7a19d1f6f44aced0501cd4eff95efdd4166c2af830c0aafbf271bc169d52124560c57c093f99c154e693f7d7a8a0c929c82029c410c2035f936022857d2a845e1f6692c0ef82477aedcc6324e13de0bd2354e9bf4ab0bf"}}, &(0x7f0000002a80)={0x0, 0x3, 0x68, @string={0x68, 0x3, "a4c47b7e91c41b9c952f27cbc9321aae8ab9432bd2067f638962591d68e53b3ae2b66ab0638f0faa52d87678650ef8555800e54131b3b334ffb64815ab8c03fb783d6c4faf46bb13f25c62f456c38fc3a4c71c4ed431502314f4316b2fe8200122522fb62404"}}}, &(0x7f0000002d00)={0x34, &(0x7f0000002b40)={0x0, 0x5, 0x46, "37b3da80aac7d6afc2b4983bf33c477fb76280517a3c7aa6c1181b24b4ec9743a82fba806202015d73227b14bfa96a4b1d0f1ef3155f4c3c451b23a0a5b364e1f5e7bd621d31"}, &(0x7f0000002bc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002c00)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002c40)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000002c80)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000002cc0)={0xc0, 0xa2, 0x2f, "0df294d22d582e0d06d19243660ee5085cd5f5100840ef2e41f64291aa2bcbc7497c2f6a7d7b0f301fb395b7a7d016"}}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001500)={0x0, 0x69a5, 0x49405, 0x2, 0x306}, &(0x7f0000001640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb1f7, 0x800, 0x1, 0x36}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8b6e, 0x18e2ba855198e28, 0x3, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4f1, 0x80, 0x1, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3318, 0x2, 0x1, 0x3d0}}], 0x4, &(0x7f00000028c0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x3, 0x84c, 0x0, &(0x7f00000018c0)=@buf_max_buf="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"}}, &(0x7f0000002940)) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, 0x0, &(0x7f0000000100)) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffe000/0x1000)=nil) 17m15.849254743s ago: executing program 5 (id=2203): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x20000, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0x1000000f}}) fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x967, 0xfffffff9}, {0xc, 0x5}]}, 0x18, 0x1) fchown(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a0878"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000680)={0x9, "30cb4f36a6f76b7f0a90b9a4ef864bc2869b88c4297068402f2a8b2085f9b24d", 0x100, 0x69d4e1ff, 0x0, 0x3c, 0x1}) 17m0.625559167s ago: executing program 33 (id=2203): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x20000, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x41, 0x1, 0x7fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r2, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_UQji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x9) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0x1000000f}}) fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f0000000040)=@v3={0x3000000, [{0x967, 0xfffffff9}, {0xc, 0x5}]}, 0x18, 0x1) fchown(r6, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a0878"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000680)={0x9, "30cb4f36a6f76b7f0a90b9a4ef864bc2869b88c4297068402f2a8b2085f9b24d", 0x100, 0x69d4e1ff, 0x0, 0x3c, 0x1}) 7m1.291614286s ago: executing program 1 (id=4087): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x7, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x26e, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f00000002c0)={0x28, 0x2, 0x0, 0x0, 0x3a98fa, 0x800, 0x6, 0x20b4e9}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)}, {&(0x7f0000000140)="530000008404f588", 0x8}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000009c0)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5b, 0x100) unlinkat(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) r8 = getpid() prlimit64(r8, 0xe, &(0x7f0000000100)={0xcc97, 0x5}, &(0x7f00000001c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m56.574355842s ago: executing program 1 (id=4099): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x6, 0x12e, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xc2, 0xf6, 0xb2, 0x10, 0x7b8, 0x2870, 0xeba7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11c, 0x2, 0xec, 0xba, 0x60, 0x5, "", [{{0x9, 0x4, 0x10, 0xe5, 0x6, 0xf4, 0x70, 0x35, 0x2, [], [{{0x9, 0x5, 0xd, 0x14, 0x210, 0x40, 0xf, 0x1, [@generic={0x2c, 0x21, "c92b76c998f7e6ee9891d2c712ef8f3c84ede7093137b9d3ecd4d5e4e3c6e758fb5d4c442ebf137c1aaf"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x88, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x1, 0x3, 0x3}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0xff, 0x6, 0xf6, [@generic={0x4a, 0x5, "f0ddadd07e9fe978e4384d259adc9af197966e296c0c959f93567a477c4e02c91af9c2c86d9c69b1b59f905854b022ecf6a8497ee5cfbcb498c1d5b06a1b89e7b6afbc312b437590"}, @generic={0x3e, 0x4, "1da75a9d4e7a8192bdc4baf7b6272ab9c9c14568f7426a9b1d1dfcdd6bc0df7f2944c98ca786726a5ef644a40bd5c0b8f0773888e7190ad4faa061ba"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0xdb, 0x2, 0xf7}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x7, 0x5, 0x7f}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0x2, 0x9}}]}}, {{0x9, 0x4, 0x4, 0x6, 0x1, 0x66, 0x3, 0x6a, 0x4, [], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0xf2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf4, 0xfffe}]}}]}}]}}]}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf2520010000000000000000000000000001000004d5ff000000fe880000000000000000000000000101e0000002000000000000000000000000ac1414aa00004e2101004e2000000200e0202b00"/104, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000000000000000000000000000014e2400094e2200830200000029000000", @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d5000000000000000200000000000000fc4e0000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba0000000200000002000003000000000800000001000000fc01000029bd70000c000800"], 0x134}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) 6m55.606744222s ago: executing program 1 (id=4101): r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000080)=0x9, 0x8, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'vlan1\x00', 0x846}) 6m55.049278651s ago: executing program 1 (id=4105): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) (async) r0 = gettid() (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) (async) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x1) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="5d117e7c21d7", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000001680), 0x42) 6m54.660965672s ago: executing program 1 (id=4107): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x0, 0x4f, 0x8, 0x3, 0x74c, 0x3}) r1 = syz_io_uring_setup(0x1eca, &(0x7f0000010400)={0x0, 0x8086e8, 0x0, 0x2, 0x215}, 0x0, &(0x7f0000000380), &(0x7f0000000000)) mbind(&(0x7f0000bdb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x103, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xb, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004040) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x400, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0x80000fff, 0x103) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0xffffffff80000000) 6m54.50148302s ago: executing program 1 (id=4108): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000001340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000002c0)={0x1010, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "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", ["", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x11c400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x91}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x4000085) 6m39.372843181s ago: executing program 34 (id=4108): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r0, &(0x7f0000002e80), 0x4000071, 0x830b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000001340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000002c0)={0x1010, 0x453, 0x1, 0x70bd29, 0x25dfdbff, "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", ["", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x11c400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x91}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x4000085) 55.753745624s ago: executing program 4 (id=5458): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e24, 0xb, @remote, 0x3}, {0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x0, {[0x6c1, 0x3, 0x9, 0x3, 0x0, 0x4, 0x800, 0x80]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0xc04c080}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000780)='source', &(0x7f0000000140)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15.9\x8b|\xe9H\xa7a>\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdcjN\xab\xcf\xa0\x1dN\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x02\x00\x00\x00\x00\xc7\x0f\xaa\t\x00\x00\x00;\xd5\x014g+\xbd\xd1\xe0R\x9d\x18\x19a:', 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000050500fcfffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400000000000000240012800b000100627269646765000014000280050019000900000008001a00720e0000"], 0x44}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5", 0x17}, {0x0}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a8", 0x3c}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea3822948828", 0x5c}], 0x1}}], 0x2, 0x2090) sendto$inet(r1, &(0x7f0000000640)="5277c8d23d5d0f9e69b4600c655dbd0d97325289d6a118fb98651a8bd045a018807c9f0123c42e58fc6128b79c1149e3a29b80b40cc8a5228c65772c2d9304f3f0fb8a89011b41e73bdc852d9404f4ffe221cebfcd46352fff7c4e", 0x5b, 0x4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r4, &(0x7f0000000700)="7daab763921fe9087261cf01a6fe714469e7566c432327543768330fc28dd21081d4f295037690895f995ce339f99f0b6661a2c68e586ca592842dbfd1071cea6812a420b21fcf23fbc6c277dfe470d0da548f15fb2ed7bf4938117c4556762c45ebe87ebf3cf819d89ae2b17725033efa62324cd40f5ae93d1ca0c5257c5c5a2d4943b3a361f5649378706b1f0dfd489f7a56828950de4dfc7714cd744622059cd47f6583715e096fc9c2c8137540b930099c8539bf9b9b820650f188922110d258", 0xc2, 0x10008095, 0x0, 0x0) 7.052680646s ago: executing program 6 (id=5615): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8004, @empty, 'ip_vti0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x400880, 0x2) ioctl$KVM_TDX_FINALIZE_VM(r2, 0xc008aeba, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) writev(r0, &(0x7f0000003580)=[{&(0x7f00000002c0)="97", 0x1}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getpid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000140)='\x00') 6.938888511s ago: executing program 6 (id=5616): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x1, 0x2, &(0x7f0000000080)=""/34, &(0x7f00000000c0)=0x22) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, 0x0, 0x0) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) ftruncate(r6, 0x51a9497) ioctl$TIOCGSOFTCAR(r3, 0x4b46, &(0x7f0000000140)) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 6.7248389s ago: executing program 4 (id=5460): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_ublk_setup_io_uring(0x10df, &(0x7f0000000040)={0x0, 0x1ae4, 0x0, 0x2, 0x151}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df40010010902"], 0x0) syz_ublk_setup_io_uring(0x6b41, &(0x7f00000003c0)={0x0, 0xdcf4, 0x110, 0x6, 0x1000247}, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 1) 5.939732441s ago: executing program 6 (id=5620): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, &(0x7f0000000040)="fc059e3a57", 0x5, 0x4000840, 0x0, 0x0) 5.547996544s ago: executing program 6 (id=5622): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='ns\x00') r1 = socket$inet(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0x41, [0x8, 0x1, 0x9, 0x2, 0x100, 0x1], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/65}, &(0x7f0000000340)=0x78) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x100, 0x270f, &(0x7f0000c35fff), &(0x7f0000000040)) 5.160066781s ago: executing program 2 (id=5623): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xfe}, {0x90, 0x8}, {0x7e, 0x6}, {0x60, 0x1}, {0x2, 0x5}, {0xe, 0x1}, {0x8, 0x1}, {0x4, 0x2}, {0xe5, 0x6}, {0x5, 0x2}, {0x3, 0x5}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0xc, 0x3}, {0x7f, 0x6}], "57dd76ee0310d24e"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x6}, {0x7, 0x3}, {0x8, 0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x3}, {0x7}, {0x3, 0x6}], "079a170a52738af5"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1004}, 0x2040010) 5.095222461s ago: executing program 7 (id=5624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x0, @local}}, 0x0, 0x0, 0x1, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35bc63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001a000000000000000c0000000cf7000a7e927670858815060003008269f2ad67d1eea998f3c0adcd29c80000020000000000000c05000000006100"], 0x0, 0x27, 0x0, 0x1, 0xbd5}, 0x28) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c1) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba", @ANYRES8, @ANYRES8=r0], 0x0) 4.993217161s ago: executing program 2 (id=5625): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8004, @empty, 'ip_vti0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x400880, 0x2) ioctl$KVM_TDX_FINALIZE_VM(r2, 0xc008aeba, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) writev(r0, &(0x7f0000003580)=[{&(0x7f00000002c0)="97", 0x1}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000140)='\x00') 4.934136924s ago: executing program 2 (id=5626): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x1b, {0x1b, 0x14, "0ec1da1d97fb28b6684368ae5f69f591e84d4896350e223311"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x5, 0xce, "79731a50412baed39497cd5c21cce7de70e493f33e5c53e66e68bd14102a852b1219feb5bd0c7118f70cbf36794821a2904ab2dea1fb3af5159e272891376c4fb40f063391f1de7e77a71651d861b046aa813d7392148b7ee1991427f81d84abd54bcde2d3a1cb554908d524fdac7518aee966658fb52aa828962ff6431302d319ac6c550a062c44ba22653e2ce5ab9afd209f9d44122763a4e99fdf398cb6b0d20a0350a820960451a71385e5d3762b5a52b5bd62005efe82a0f84b50527a98366b7edcdcf0330db7c9edbd61f4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x20, 0x82, 0x3, "084c89"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "f93d8b"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "28de"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "05f9a1"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010038"], 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_open_procfs(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.637275008s ago: executing program 4 (id=5627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x56, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x6, 0x40, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x12, 0x2, [{0x0, 0x6, "00479c0f"}, {0x7, 0x3, "91"}, {0x2, 0x3, "a3"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94", 0x51}], 0x2}}], 0x1, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) accept4(r1, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0xff, 0x3}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/timers\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000002f80)=""/54) 4.535108014s ago: executing program 6 (id=5628): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x1042, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.747428044s ago: executing program 3 (id=5631): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000000300)=[{0x0}], 0x1, 0x0) r2 = openat$cgroup_subtree(r0, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYRES64=r2, @ANYRES8=r0, @ANYRESOCT=r0], 0xfdef) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @remote}, {0xa}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8840}, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES64=r7], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, r4}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x402) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000001806fffe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="96753fec9078fffe1e020000"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6}, 0x94) creat(0x0, 0x0) 3.68060871s ago: executing program 6 (id=5632): r0 = creat(&(0x7f0000010280)='./file0\x00', 0xdafbe5d6891b6f0) close(r0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000010300)={[&(0x7f0000000200)=' ']}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = dup2(r3, r3) write$vga_arbiter(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='decodes m'], 0xc) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f00000002c0)={{0x5e, @rand_addr=0x64010102, 0x4e23, 0x2, 'sed\x00', 0x0, 0x50, 0x7c}, {@broadcast, 0x4e20, 0x4, 0x3, 0x80000001}}, 0x44) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000082c0100000000000000000000000007000500ff0200000000000000000000000000012f"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x7101}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r7, 0x8100}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_overlay={0xb, 0x2, 0x4, 0x800000, 0x5, {0x0, 0xea60}, {0x5, 0x2, 0x6, 0xfb, 0xc8, 0x2, "cc42ad02"}, 0x9, 0x3, {0x0}, 0x7}) write$eventfd(r7, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r7, &(0x7f0000000480)=""/82, 0x52) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) ioctl$RTC_ALM_READ(r6, 0x40187013, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x5fd}]}}}]}, 0x44}}, 0x0) 3.090730886s ago: executing program 3 (id=5633): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0xe8, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0xd4, 0x1, [@m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x10000000, 0x9, 0x3ff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x20000000, 0x9, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x7, 0x5, 0x5, 0xbfae}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x10, 0x4, 0x8001, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2.78949265s ago: executing program 4 (id=5634): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0x4, 0x2}, 0x10) bind$tipc(r3, 0x0, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.516249395s ago: executing program 3 (id=5635): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xfe}, {0x90, 0x8}, {0x7e, 0x6}, {0x60, 0x1}, {0x2, 0x5}, {0xe, 0x1}, {0x8, 0x1}, {0x4, 0x2}, {0xe5, 0x6}, {0x5, 0x2}, {0x3, 0x5}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0xc, 0x3}, {0x7f, 0x6}], "57dd76ee0310d24e"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6, 0x6}, {0x7, 0x3}, {0x8, 0x4}, {0x5, 0x1}, {0x5}, {0x0, 0x3}, {0x7}, {0x3, 0x6}], "079a170a52738af5"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1004}, 0x2040010) 2.106588551s ago: executing program 3 (id=5636): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8004, @empty, 'ip_vti0\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$incfs(r1, &(0x7f0000000180)='.log\x00', 0x400880, 0x2) ioctl$KVM_TDX_FINALIZE_VM(r2, 0xc008aeba, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) writev(r0, &(0x7f0000003580)=[{&(0x7f00000002c0)="97", 0x1}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000140)='\x00') 2.025307854s ago: executing program 4 (id=5637): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000003000)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000440)="91f8a9ff9519def28791bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000000039bf727cf8c8df22e7b00314ab6264c931e35661fc189441e0880f04197ad3e7e5", 0x62}, {&(0x7f0000000e80)="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", 0x11d}, {&(0x7f0000000a80)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b", 0x8a}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3ed", 0xa9}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e", 0x32}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6b", 0x49}, {&(0x7f00000006c0)="b341fb6dec9d6baff227ce715d28bba280448ea83b64e4ec946efaa25c427594c9a4f3fb33d0290cb6ba0de93d437c1798bb5011adf07e62a87371fb3e0e058dad986005c8762d0b6b0be62bd69a21979a54201e81d64a61a481e0e8264d01c8a80d2fa08c4c07845f", 0x69}], 0x2}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="2167ae61d085310321d30b0a3d4cab29f208308f97685a97e84a22f40ad071467772c667aadf23b14169bc8f5edab6d397f4f836872c37193f2f718b3b5e25182fea41e814d6f7bdce324fd7bd3e5af2fb9025389b38985acfbda9c6c7292c2a333fe1b7d164744df73a60c58d0ae1d520bdc05bbddbbbb60bb6823fe388793379d4683fabf21a43043e6f3e", 0x8c}], 0x2, &(0x7f0000000140)=[@ip_retopts={{0xec, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xd8, [@empty, @remote, @rand_addr=0x64010100, @multicast1, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote]}, @rr={0x7, 0xf, 0x90, [@multicast1, @empty, @broadcast]}, @end, @timestamp_prespec={0x44, 0x14, 0x2e, 0x3, 0x5, [{@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xf3}]}, @timestamp_addr={0x44, 0x24, 0xc, 0x1, 0x8, [{@private=0xa010101, 0x2}, {@rand_addr=0x64010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x3a65}, {@broadcast, 0xff}]}, @cipso={0x86, 0x6a, 0x2, [{0x2, 0xe, "53b1696fa7dd62697599a6ad"}, {0x1, 0xf, "defa7ee30ec5c27a1054e0c504"}, {0x7, 0x4, "b344"}, {0x2, 0xa, "b7ac81aec6449bfd"}, {0x7, 0x12, "2b419a805fc9d27d44023e6898dd4fc0"}, {0x5, 0x10, "32aaa90d8d9f8cb1ada3f28c76c6"}, {0x1, 0xb, "0827989464f4bf81da"}, {0x0, 0xc, "77581af8881c33ac7543"}]}]}}}], 0xf0}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.691884687s ago: executing program 2 (id=5638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='ns\x00') r1 = socket$inet(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0x41, [0x8, 0x1, 0x9, 0x2, 0x100, 0x1], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/65}, &(0x7f0000000340)=0x78) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x100, 0x270f, &(0x7f0000c35fff), &(0x7f0000000040)) 1.604367684s ago: executing program 3 (id=5639): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) dup(r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x4800, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000d00)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002080)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000000c0)="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", 0xfc}, {&(0x7f0000000640)="6c8c778bd61f52153eadf672a8afd4ac2cd4485dcd4ec767a7bc9928c1328c782cc6c00961536b8714456de68c0b95c356c5b4aabed86f3324eeb0d0c5180e6ee7", 0x41}, {&(0x7f00000006c0)="0998b6d80a5faee59cbeec7bcfcf9c1e2063f5c7082c6896033bfc01320f555949aa7fb3aa9d03660281ad546de98f985dd938e4ed7e46ad0a835981830e04e89e6a70df4c3d0e95a4ff35c7fdcdc22db9305a009437df2d7eeb7d268c412a2a8b4dc9a4a82b330784399d9b907b59e310e590915cf77c7e8aebd679af6993193e5d6f9b2d040a353af1b5a36d640147dc4a59034dfb80c58eaf1ed1b1c0a1d6c26cd0e6238521f2e427", 0xaa}, {&(0x7f0000000780)="b36fb12aeed1fca7dbe86cf8a51fcba64a4500b788fff99c2fea82772ec33fc8474c776390bdeadd0d0163242a6aeee9f37464", 0x33}, {&(0x7f00000007c0)="c53403c9821d42ed436ddabc91e99c52cf74e4b7206281f94b750df03503ba7407ac3ed8d4423ff381d8c5ac6672bec3e85d29de03", 0x35}], 0x5}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000037c0)="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", 0x34e}], 0x1}}], 0x2, 0x2000c044) writev(r3, &(0x7f0000002640)=[{&(0x7f0000000c40)="b4", 0x1}], 0x1) 1.596766837s ago: executing program 7 (id=5640): prlimit64(0x0, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004500)={0x24, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x75, 0x0, 0x1, [@nested={0x4, 0xd1}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) 1.192651684s ago: executing program 7 (id=5641): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140)) 1.106392193s ago: executing program 7 (id=5642): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0x1042, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 940.871542ms ago: executing program 7 (id=5643): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 1) 940.357118ms ago: executing program 4 (id=5644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='ns\x00') r1 = socket$inet(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0x41, [0x8, 0x1, 0x9, 0x2, 0x100, 0x1], 0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000180)=""/65}, &(0x7f0000000340)=0x78) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x100, 0x270f, &(0x7f0000c35fff), &(0x7f0000000040)) 723.574045ms ago: executing program 2 (id=5645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180271a4", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf251000000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10024}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x520, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffb51}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x78, &(0x7f0000000180)={@local, @empty, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@generic={0x6005, "2b860e40008ef2ab1cd9931a1dee29db32f7b933837aac570416b93a47c73381ccd013791362842fa170032c22c81f304e04bc892d4a9b39c9e31e1ba4bbeb53f75b63b51d73627267992525f71212c290439b0773d74889138e93a62b3c83482fe8ba460f0f"}}}, &(0x7f0000000240)={0x1, 0x3, [0x504, 0xb8c, 0x14a, 0xbd3]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r5, 0x2000009) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r7, @ANYRESHEX=r8], 0x15) 673.427577ms ago: executing program 3 (id=5646): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1afdfb307cf472eb1cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e20da00", 0x0, 0x6, 0x3, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "05010013", "0001ffff", ["06000000c5ae5c97e40000b6", "808e88e2e9ffffff3d802f79"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r2, 0x0, 0x239) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 200.714653ms ago: executing program 7 (id=5647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01010100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000080)='@', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') fchdir(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7b}}}}, ["", ""]}, 0x20}}, 0x0) r9 = dup(r6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000480), &(0x7f0000000580)=0x8) ioctl$KDFONTOP_SET_DEF(r9, 0x4b72, &(0x7f0000000740)={0x2, 0x1, 0x13, 0x19, 0x48, &(0x7f0000000340)="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"}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000611988000000000095000000000000000e1b223a6be85b21e0f2388da4fbc0249db68991725c5f1835b2e3cd819855d1a83d537a54410322741c485417312c2c3070f7bc42d89fae8e9114752f1c63f65af84e543d641ce8ae3a21106489679e"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) 0s ago: executing program 2 (id=5648): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x1b, {0x1b, 0x14, "0ec1da1d97fb28b6684368ae5f69f591e84d4896350e223311"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}}, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x5, 0xce, "79731a50412baed39497cd5c21cce7de70e493f33e5c53e66e68bd14102a852b1219feb5bd0c7118f70cbf36794821a2904ab2dea1fb3af5159e272891376c4fb40f063391f1de7e77a71651d861b046aa813d7392148b7ee1991427f81d84abd54bcde2d3a1cb554908d524fdac7518aee966658fb52aa828962ff6431302d319ac6c550a062c44ba22653e2ce5ab9afd209f9d44122763a4e99fdf398cb6b0d20a0350a820960451a71385e5d3762b5a52b5bd62005efe82a0f84b50527a98366b7edcdcf0330db7c9edbd61f4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xfd}, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)={0x20, 0x82, 0x3, "084c89"}, &(0x7f0000000380)={0x20, 0x83, 0x3, "f93d8b"}, &(0x7f00000003c0)={0x20, 0x84, 0x2, "28de"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "05f9a1"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010038"], 0x1c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_open_procfs(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xe0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): .338772][ T8548] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.338809][ T8548] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.338850][ T8548] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1650.338875][ T8548] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.407489][ T8548] usb 7-1: config 0 descriptor?? [ 1650.569887][ T8548] hub 7-1:0.0: USB hub found [ 1650.577336][ T1252] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1650.577687][ T1252] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1650.647903][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1650.648589][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1650.695549][ T8973] can0: slcan on ttyS3. [ 1650.845843][ T8548] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1650.868524][ T8548] usbhid 7-1:0.0: can't add hid device: -71 [ 1650.868762][ T8548] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1651.064266][ T1252] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1651.064295][ T1252] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1651.064317][ T1252] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1651.132409][ T8548] usb 7-1: USB disconnect, device number 100 [ 1651.582728][ T1252] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1652.404413][T23752] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1652.447442][ T8984] can0 (unregistered): slcan off ttyS3. [ 1652.572691][T23752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.572748][T23752] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1652.572776][T23752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1652.572804][T23752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1652.572828][T23752] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1652.623355][T23752] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1652.623388][T23752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1652.623424][T23752] usb 5-1: Product: syz [ 1652.623466][T23752] usb 5-1: Manufacturer: syz [ 1652.623509][T23752] usb 5-1: SerialNumber: syz [ 1652.684716][T23752] usb 5-1: config 0 descriptor?? [ 1652.830665][ T1252] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1652.831152][ T1252] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1652.873527][ T1252] usb 3-1: USB disconnect, device number 92 [ 1653.037064][T23752] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1653.037096][T23752] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1653.254908][T23752] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 1653.254939][T23752] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1653.254960][T23752] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1653.456658][T23752] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 1654.513963][T23752] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1654.514393][T23752] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1654.603860][T23752] usb 5-1: USB disconnect, device number 50 [ 1654.996578][ T9092] FAULT_INJECTION: forcing a failure. [ 1654.996578][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.998140][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.3.5250 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1654.998175][ T9092] Tainted: [L]=SOFTLOCKUP [ 1654.998183][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1654.998197][ T9092] Call Trace: [ 1654.998205][ T9092] [ 1654.998215][ T9092] dump_stack_lvl+0xe8/0x150 [ 1654.998255][ T9092] should_fail_ex+0x467/0x600 [ 1654.998296][ T9092] _copy_from_user+0x2d/0xb0 [ 1654.998322][ T9092] ___sys_sendmsg+0x1c6/0x360 [ 1654.998345][ T9092] ? __lock_acquire+0x683/0x2ce0 [ 1654.998372][ T9092] ? __pfx____sys_sendmsg+0x10/0x10 [ 1654.998430][ T9092] ? __fget_files+0x2a/0x420 [ 1654.998452][ T9092] ? __fget_files+0x3a8/0x420 [ 1654.998485][ T9092] __x64_sys_sendmsg+0x1b7/0x290 [ 1654.998512][ T9092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1654.998552][ T9092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.998576][ T9092] do_syscall_64+0x174/0x580 [ 1654.998611][ T9092] ? trace_irq_disable+0x3b/0x140 [ 1654.998646][ T9092] ? clear_bhb_loop+0x40/0x90 [ 1654.998674][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.998696][ T9092] RIP: 0033:0x7f4b5667de59 [ 1654.998716][ T9092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.998735][ T9092] RSP: 002b:00007f4b548d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.998758][ T9092] RAX: ffffffffffffffda RBX: 00007f4b56905fa0 RCX: 00007f4b5667de59 [ 1654.998774][ T9092] RDX: 000000000400c814 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1654.998789][ T9092] RBP: 00007f4b548d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.998802][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.998815][ T9092] R13: 00007f4b56906038 R14: 00007f4b56905fa0 R15: 00007ffc281cdae8 [ 1654.998848][ T9092] [ 1655.699856][ T9116] FAULT_INJECTION: forcing a failure. [ 1655.699856][ T9116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.699897][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.3.5255 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1655.699929][ T9116] Tainted: [L]=SOFTLOCKUP [ 1655.699937][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1655.699951][ T9116] Call Trace: [ 1655.699960][ T9116] [ 1655.699970][ T9116] dump_stack_lvl+0xe8/0x150 [ 1655.700010][ T9116] should_fail_ex+0x467/0x600 [ 1655.700046][ T9116] _copy_from_user+0x2d/0xb0 [ 1655.700072][ T9116] ___sys_sendmsg+0x1c6/0x360 [ 1655.700097][ T9116] ? __lock_acquire+0x683/0x2ce0 [ 1655.700125][ T9116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1655.700154][ T9116] ? kstrtouint+0x6e/0xe0 [ 1655.700211][ T9116] ? __fget_files+0x2a/0x420 [ 1655.700233][ T9116] ? __fget_files+0x3a8/0x420 [ 1655.700264][ T9116] __sys_sendmmsg+0x279/0x4d0 [ 1655.700294][ T9116] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1655.700325][ T9116] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1655.700377][ T9116] ? ksys_write+0x248/0x270 [ 1655.700407][ T9116] ? __pfx_ksys_write+0x10/0x10 [ 1655.700441][ T9116] __x64_sys_sendmmsg+0xa0/0xc0 [ 1655.700465][ T9116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.700489][ T9116] do_syscall_64+0x174/0x580 [ 1655.700523][ T9116] ? trace_irq_disable+0x3b/0x140 [ 1655.700557][ T9116] ? clear_bhb_loop+0x40/0x90 [ 1655.700584][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.700607][ T9116] RIP: 0033:0x7f4b5667de59 [ 1655.700628][ T9116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.700647][ T9116] RSP: 002b:00007f4b548d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1655.700671][ T9116] RAX: ffffffffffffffda RBX: 00007f4b56905fa0 RCX: 00007f4b5667de59 [ 1655.700688][ T9116] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1655.700704][ T9116] RBP: 00007f4b548d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.700718][ T9116] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 1655.700733][ T9116] R13: 00007f4b56906038 R14: 00007f4b56905fa0 R15: 00007ffc281cdae8 [ 1655.700781][ T9116] [ 1656.247294][ T9126] net_ratelimit: 1182 callbacks suppressed [ 1656.247316][ T9126] netlink: zone id is out of range [ 1656.247326][ T9126] netlink: zone id is out of range [ 1656.247335][ T9126] netlink: zone id is out of range [ 1656.247344][ T9126] netlink: zone id is out of range [ 1656.247353][ T9126] netlink: zone id is out of range [ 1656.247361][ T9126] netlink: zone id is out of range [ 1656.247371][ T9126] netlink: zone id is out of range [ 1656.247380][ T9126] netlink: zone id is out of range [ 1656.247389][ T9126] netlink: zone id is out of range [ 1656.247398][ T9126] netlink: zone id is out of range [ 1657.638879][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5261'. [ 1657.645695][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5261'. [ 1657.669649][ T1252] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1657.844056][ T1252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.844115][ T1252] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1657.844143][ T1252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1657.844171][ T1252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1657.844194][ T1252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1657.850507][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1657.869083][ T1252] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1657.869177][ T1252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1657.869376][ T1252] usb 3-1: Product: syz [ 1657.869393][ T1252] usb 3-1: Manufacturer: syz [ 1657.869409][ T1252] usb 3-1: SerialNumber: syz [ 1657.997289][ T1252] usb 3-1: config 0 descriptor?? [ 1658.070554][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1658.100228][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1658.100314][ T9] usb 4-1: config 0 has no interface number 0 [ 1658.100363][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1658.109713][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1658.109924][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.109948][ T9] usb 4-1: Product: syz [ 1658.109962][ T9] usb 4-1: Manufacturer: syz [ 1658.109987][ T9] usb 4-1: SerialNumber: syz [ 1658.229786][ T1252] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1658.229814][ T1252] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1658.306846][ T9] usb 4-1: config 0 descriptor?? [ 1658.338680][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1658.338779][ T9] em28xx 4-1:0.132: Video interface 132 found: [ 1658.428659][ T1252] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1658.428679][ T1252] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1658.428694][ T1252] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1658.631901][ T1252] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1658.756003][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1658.932778][ T9180] tipc: Enabling of bearer rejected, failed to enable media [ 1659.404438][ T9187] FAT-fs (nullb0): bogus number of reserved sectors [ 1659.404488][ T9187] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1660.163134][ T1252] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1660.208261][ T1252] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1661.272930][ T9] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1661.272971][ T9] em28xx 4-1:0.132: board has no eeprom [ 1661.332496][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1661.332526][ T9] em28xx 4-1:0.132: analog set to bulk mode. [ 1661.339170][ T1252] em28xx 4-1:0.132: Registering V4L2 extension [ 1661.340746][ T8548] usb 3-1: USB disconnect, device number 93 [ 1661.490976][ T1504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1661.621581][ T1504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1661.631129][ T9] usb 4-1: USB disconnect, device number 2 [ 1661.631940][ T1504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1661.687925][ T1504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1661.708733][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 1661.731701][ T1504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1661.829986][ T9227] FAULT_INJECTION: forcing a failure. [ 1661.829986][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1661.830020][ T9227] CPU: 0 UID: 0 PID: 9227 Comm: syz.3.5272 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1661.830046][ T9227] Tainted: [L]=SOFTLOCKUP [ 1661.830052][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1661.830063][ T9227] Call Trace: [ 1661.830070][ T9227] [ 1661.830078][ T9227] dump_stack_lvl+0xe8/0x150 [ 1661.830112][ T9227] should_fail_ex+0x467/0x600 [ 1661.830144][ T9227] _copy_from_user+0x2d/0xb0 [ 1661.830165][ T9227] ___sys_sendmsg+0x1c6/0x360 [ 1661.830187][ T9227] ? __lock_acquire+0x683/0x2ce0 [ 1661.830210][ T9227] ? __pfx____sys_sendmsg+0x10/0x10 [ 1661.830258][ T9227] ? __fget_files+0x2a/0x420 [ 1661.830276][ T9227] ? __fget_files+0x3a8/0x420 [ 1661.830301][ T9227] __x64_sys_sendmsg+0x1b7/0x290 [ 1661.830321][ T9227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1661.830354][ T9227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.830373][ T9227] do_syscall_64+0x174/0x580 [ 1661.830400][ T9227] ? trace_irq_disable+0x3b/0x140 [ 1661.830429][ T9227] ? clear_bhb_loop+0x40/0x90 [ 1661.830451][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1661.830479][ T9227] RIP: 0033:0x7f4b5667de59 [ 1661.830498][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1661.830513][ T9227] RSP: 002b:00007f4b548d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1661.830531][ T9227] RAX: ffffffffffffffda RBX: 00007f4b56905fa0 RCX: 00007f4b5667de59 [ 1661.830544][ T9227] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003 [ 1661.830555][ T9227] RBP: 00007f4b548d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1661.830566][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1661.830576][ T9227] R13: 00007f4b56906038 R14: 00007f4b56905fa0 R15: 00007ffc281cdae8 [ 1661.830603][ T9227] [ 1662.160304][ T9230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5273'. [ 1662.959904][ T1252] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1662.959927][ T1252] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1662.959938][ T1252] em28xx 4-1:0.132: No AC97 audio processor [ 1662.970235][ T1252] usb 4-1: Decoder not found [ 1662.970258][ T1252] em28xx 4-1:0.132: failed to create media graph [ 1662.970299][ T1252] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1662.972745][ T1252] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1662.982172][ T9] em28xx 4-1:0.132: Closing input extension [ 1663.027970][ T9246] tipc: Enabling of bearer rejected, failed to enable media [ 1663.103722][ T9] em28xx 4-1:0.132: Freeing device [ 1663.424454][ T1252] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1663.597144][ T1252] usb 5-1: Using ep0 maxpacket: 32 [ 1663.616143][ T1252] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1663.616174][ T1252] usb 5-1: config 0 has no interface number 0 [ 1663.616220][ T1252] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1663.621037][ T1252] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1663.621076][ T1252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.621097][ T1252] usb 5-1: Product: syz [ 1663.621112][ T1252] usb 5-1: Manufacturer: syz [ 1663.621128][ T1252] usb 5-1: SerialNumber: syz [ 1663.696795][ T1252] usb 5-1: config 0 descriptor?? [ 1663.724771][ T1252] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1663.724810][ T1252] em28xx 5-1:0.132: Video interface 132 found: [ 1663.853527][ T1504] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1663.950344][ T9198] xfrm0 speed is unknown, defaulting to 1000 [ 1664.129716][ T1252] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1664.238602][ T1504] Bluetooth: hci1: command tx timeout [ 1665.074292][ T9338] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5290'. [ 1665.210509][ T9338] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1665.276327][ T1252] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1665.276364][ T1252] em28xx 5-1:0.132: board has no eeprom [ 1665.336094][ T1252] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1665.336124][ T1252] em28xx 5-1:0.132: analog set to bulk mode. [ 1665.336457][ T8548] em28xx 5-1:0.132: Registering V4L2 extension [ 1665.411790][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1665.412202][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1665.412606][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1665.412992][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1665.641023][ T1504] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1665.722265][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1665.722670][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1665.723068][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1665.723449][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1665.788497][ T9358] 9p: Bad value for 'rfdno' [ 1665.921924][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1665.922321][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1665.922726][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1665.926818][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1665.927229][ T8548] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1665.927579][ T8548] em28xx 5-1:0.132: Config register raw data: 0xfffffffb [ 1665.927903][ T8548] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1665.927917][ T8548] em28xx 5-1:0.132: No AC97 audio processor [ 1666.033356][ T8548] usb 5-1: Decoder not found [ 1666.033377][ T8548] em28xx 5-1:0.132: failed to create media graph [ 1666.033417][ T8548] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1666.036283][ T8548] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1666.457637][ T9379] FAT-fs (nullb0): bogus number of reserved sectors [ 1666.457663][ T9379] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1666.503717][ T1504] Bluetooth: hci1: command tx timeout [ 1667.809104][T23752] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 1667.928088][ T9409] autofs4:pid:9409:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 1667.953472][ T9409] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.5305'. [ 1668.208770][T23752] usb 4-1: Invalid ep0 maxpacket: 32 [ 1668.346745][T23752] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 1668.498974][T23752] usb 4-1: Invalid ep0 maxpacket: 32 [ 1668.499436][T23752] usb usb4-port1: attempt power cycle [ 1668.558979][T20037] Bluetooth: hci1: command tx timeout [ 1668.930839][T23752] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 1669.386925][T23752] usb 4-1: Invalid ep0 maxpacket: 32 [ 1669.410425][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.539899][T23752] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1669.561663][T23752] usb 4-1: Invalid ep0 maxpacket: 32 [ 1669.563240][T23752] usb usb4-port1: unable to enumerate USB device [ 1670.641004][T20037] Bluetooth: hci1: command tx timeout [ 1670.742607][T23753] usb 5-1: USB disconnect, device number 51 [ 1670.828050][T23753] em28xx 5-1:0.132: Disconnecting em28xx [ 1670.828086][T23753] em28xx 5-1:0.132: Closing input extension [ 1670.888809][T20037] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 1670.897803][T23753] em28xx 5-1:0.132: Freeing device [ 1671.058065][ T9509] FAULT_INJECTION: forcing a failure. [ 1671.058065][ T9509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.058106][ T9509] CPU: 1 UID: 0 PID: 9509 Comm: syz.3.5311 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1671.058139][ T9509] Tainted: [L]=SOFTLOCKUP [ 1671.058147][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1671.058160][ T9509] Call Trace: [ 1671.058170][ T9509] [ 1671.058179][ T9509] dump_stack_lvl+0xe8/0x150 [ 1671.058218][ T9509] should_fail_ex+0x467/0x600 [ 1671.058257][ T9509] _copy_from_user+0x2d/0xb0 [ 1671.058284][ T9509] do_sock_getsockopt+0x200/0x7e0 [ 1671.058315][ T9509] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1671.058355][ T9509] ? __fget_files+0x3a8/0x420 [ 1671.058377][ T9509] ? __fget_files+0x2a/0x420 [ 1671.058406][ T9509] __x64_sys_getsockopt+0x1aa/0x250 [ 1671.058438][ T9509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.058465][ T9509] do_syscall_64+0x174/0x580 [ 1671.058501][ T9509] ? trace_irq_disable+0x3b/0x140 [ 1671.058539][ T9509] ? clear_bhb_loop+0x40/0x90 [ 1671.058566][ T9509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.058590][ T9509] RIP: 0033:0x7f4b5667de59 [ 1671.058611][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.058631][ T9509] RSP: 002b:00007f4b548d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1671.058655][ T9509] RAX: ffffffffffffffda RBX: 00007f4b56905fa0 RCX: 00007f4b5667de59 [ 1671.058672][ T9509] RDX: 0000000000000002 RSI: 000000000000011c RDI: 0000000000000003 [ 1671.058686][ T9509] RBP: 00007f4b548d6090 R08: 0000200000000140 R09: 0000000000000000 [ 1671.058703][ T9509] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1671.058718][ T9509] R13: 00007f4b56906038 R14: 00007f4b56905fa0 R15: 00007ffc281cdae8 [ 1671.058755][ T9509] [ 1671.536364][ T9536] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5314'. [ 1671.581222][ T9545] FAULT_INJECTION: forcing a failure. [ 1671.581222][ T9545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.581298][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.2.5316 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1671.581340][ T9545] Tainted: [L]=SOFTLOCKUP [ 1671.581348][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1671.581364][ T9545] Call Trace: [ 1671.581373][ T9545] [ 1671.581383][ T9545] dump_stack_lvl+0xe8/0x150 [ 1671.581424][ T9545] should_fail_ex+0x467/0x600 [ 1671.581464][ T9545] _copy_from_user+0x2d/0xb0 [ 1671.581489][ T9545] __sys_bpf+0x2e7/0xd90 [ 1671.581522][ T9545] ? __pfx___sys_bpf+0x10/0x10 [ 1671.581546][ T9545] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1671.581586][ T9545] ? rt_mutex_slowunlock+0x219/0x460 [ 1671.581630][ T9545] ? ksys_write+0x248/0x270 [ 1671.581659][ T9545] ? __pfx_ksys_write+0x10/0x10 [ 1671.581692][ T9545] __x64_sys_bpf+0xba/0xd0 [ 1671.581726][ T9545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.581752][ T9545] do_syscall_64+0x174/0x580 [ 1671.581786][ T9545] ? trace_irq_disable+0x3b/0x140 [ 1671.581821][ T9545] ? clear_bhb_loop+0x40/0x90 [ 1671.581848][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.581872][ T9545] RIP: 0033:0x7f39c595de59 [ 1671.581891][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.581910][ T9545] RSP: 002b:00007f39c3bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1671.581934][ T9545] RAX: ffffffffffffffda RBX: 00007f39c5be5fa0 RCX: 00007f39c595de59 [ 1671.581949][ T9545] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1671.581963][ T9545] RBP: 00007f39c3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.581976][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1671.581989][ T9545] R13: 00007f39c5be6038 R14: 00007f39c5be5fa0 R15: 00007fff178cd3b8 [ 1671.582020][ T9545] [ 1672.616054][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.616181][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.616452][ T9198] bridge_slave_0: entered allmulticast mode [ 1672.638073][ T9198] bridge_slave_0: entered promiscuous mode [ 1672.675141][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.675279][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.675557][ T9198] bridge_slave_1: entered allmulticast mode [ 1672.705121][ T9198] bridge_slave_1: entered promiscuous mode [ 1672.883164][ T8548] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1673.000635][ T9198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.017082][ T9198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1673.044272][ T8548] usb 3-1: Using ep0 maxpacket: 32 [ 1673.046906][ T8548] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1673.046934][ T8548] usb 3-1: config 0 has no interface number 0 [ 1673.046981][ T8548] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1673.090805][ T8548] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1673.090839][ T8548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1673.090862][ T8548] usb 3-1: Product: syz [ 1673.090878][ T8548] usb 3-1: Manufacturer: syz [ 1673.090894][ T8548] usb 3-1: SerialNumber: syz [ 1673.215359][ T8548] usb 3-1: config 0 descriptor?? [ 1673.309087][ T8548] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1673.309129][ T8548] em28xx 3-1:0.132: Video interface 132 found: [ 1673.511818][ T38] kauditd_printk_skb: 30 callbacks suppressed [ 1673.511841][ T38] audit: type=1326 audit(1784141489.638:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9626 comm="syz.3.5329" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5667de59 code=0x0 [ 1673.579197][ T9198] team0: Port device team_slave_0 added [ 1673.629438][ T8548] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1673.643555][ T9198] team0: Port device team_slave_1 added [ 1674.188038][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.188053][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.188124][ T9198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.262585][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.262600][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.262621][ T9198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1674.734784][ T8548] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1674.734817][ T8548] em28xx 3-1:0.132: board has no eeprom [ 1674.776416][ T9676] geneve2: entered promiscuous mode [ 1674.786898][ T8548] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1674.786996][ T8548] em28xx 3-1:0.132: analog set to bulk mode. [ 1674.787912][T11900] em28xx 3-1:0.132: Registering V4L2 extension [ 1675.027775][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1675.099700][ T9198] hsr_slave_0: entered promiscuous mode [ 1675.101566][ T9198] hsr_slave_1: entered promiscuous mode [ 1675.118381][ T9198] debugfs: 'hsr0' already exists in 'hsr' [ 1675.118411][ T9198] Cannot create hsr debugfs directory [ 1675.194933][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1675.195336][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1675.195780][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1675.196175][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1675.226282][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1675.236400][ T9] usb 4-1: config 3 has an invalid interface number: 132 but max is 0 [ 1675.236460][ T9] usb 4-1: config 3 has no interface number 0 [ 1675.236540][ T9] usb 4-1: config 3 interface 132 has no altsetting 0 [ 1675.251722][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=2c.a8 [ 1675.251813][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.251869][ T9] usb 4-1: Product: syz [ 1675.251914][ T9] usb 4-1: Manufacturer: syz [ 1675.251959][ T9] usb 4-1: SerialNumber: syz [ 1675.825802][ T9] usb 4-1: active config #3 != 1 ?? [ 1675.929880][ T9721] FAT-fs (nullb0): bogus number of reserved sectors [ 1675.929904][ T9721] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1676.008651][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1676.009064][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1676.009451][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1676.009834][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1676.123759][ T8548] usb 4-1: USB disconnect, device number 7 [ 1677.091469][T20037] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1677.211010][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1677.211459][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1677.223538][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1677.223984][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1677.224376][T11900] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1677.224734][T11900] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 1677.234344][T11900] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1677.234367][T11900] em28xx 3-1:0.132: No AC97 audio processor [ 1677.376857][T11900] usb 3-1: Decoder not found [ 1677.376879][T11900] em28xx 3-1:0.132: failed to create media graph [ 1677.376920][T11900] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1677.427391][T11900] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1678.473666][T23752] usb 3-1: USB disconnect, device number 94 [ 1678.485514][T23752] em28xx 3-1:0.132: Disconnecting em28xx [ 1678.485548][T23752] em28xx 3-1:0.132: Closing input extension [ 1678.829421][T23752] em28xx 3-1:0.132: Freeing device [ 1679.504035][ T9198] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1679.504075][ T9198] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.287755][ T9884] FAULT_INJECTION: forcing a failure. [ 1680.287755][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.287794][ T9884] CPU: 0 UID: 0 PID: 9884 Comm: syz.4.5351 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1680.287823][ T9884] Tainted: [L]=SOFTLOCKUP [ 1680.287831][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1680.287845][ T9884] Call Trace: [ 1680.287854][ T9884] [ 1680.287864][ T9884] dump_stack_lvl+0xe8/0x150 [ 1680.287905][ T9884] should_fail_ex+0x467/0x600 [ 1680.287943][ T9884] _copy_from_user+0x2d/0xb0 [ 1680.287968][ T9884] do_fcntl+0x949/0x19e0 [ 1680.287999][ T9884] ? smack_file_fcntl+0x150/0x320 [ 1680.288035][ T9884] ? __pfx_do_fcntl+0x10/0x10 [ 1680.288061][ T9884] ? __pfx_smack_file_fcntl+0x10/0x10 [ 1680.288123][ T9884] ? ksys_write+0x202/0x270 [ 1680.288158][ T9884] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1680.288209][ T9884] __se_sys_fcntl+0xcb/0x160 [ 1680.288234][ T9884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.288256][ T9884] do_syscall_64+0x174/0x580 [ 1680.288289][ T9884] ? trace_irq_disable+0x3b/0x140 [ 1680.288323][ T9884] ? clear_bhb_loop+0x40/0x90 [ 1680.288348][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.288369][ T9884] RIP: 0033:0x7fe5637bde59 [ 1680.288408][ T9884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.288427][ T9884] RSP: 002b:00007fe561a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1680.288452][ T9884] RAX: ffffffffffffffda RBX: 00007fe563a45fa0 RCX: 00007fe5637bde59 [ 1680.288468][ T9884] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000003 [ 1680.288481][ T9884] RBP: 00007fe561a16090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.288500][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.288514][ T9884] R13: 00007fe563a46038 R14: 00007fe563a45fa0 R15: 00007ffef752d618 [ 1680.288551][ T9884] [ 1680.466062][T23753] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1680.730648][T23753] usb 4-1: Using ep0 maxpacket: 32 [ 1681.256516][T23753] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1681.256546][T23753] usb 4-1: config 0 has no interface number 0 [ 1681.256595][T23753] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1681.288432][T23753] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1681.288468][T23753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.288486][T23753] usb 4-1: Product: syz [ 1681.288496][T23753] usb 4-1: Manufacturer: syz [ 1681.288507][T23753] usb 4-1: SerialNumber: syz [ 1681.325834][T23753] usb 4-1: config 0 descriptor?? [ 1681.360560][T23753] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1681.360599][T23753] em28xx 4-1:0.132: Video interface 132 found: [ 1681.512224][ T9198] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.512264][ T9198] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.776880][T23753] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1682.025211][T23752] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1682.170953][T23752] usb 5-1: Using ep0 maxpacket: 8 [ 1682.174358][T23752] usb 5-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1682.174389][T23752] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1682.174418][T23752] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1682.174491][T23752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.245260][T23752] usb 5-1: config 0 descriptor?? [ 1682.361117][ T37] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1682.511294][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 1682.514783][ T37] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1682.514810][ T37] usb 3-1: config 0 has no interface number 0 [ 1682.514908][ T37] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1682.518507][ T37] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1682.518539][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.518628][ T37] usb 3-1: Product: syz [ 1682.518644][ T37] usb 3-1: Manufacturer: syz [ 1682.518659][ T37] usb 3-1: SerialNumber: syz [ 1682.556840][ T9923] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1682.618021][ T37] usb 3-1: config 0 descriptor?? [ 1682.639900][ T37] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1682.640006][ T37] em28xx 3-1:0.132: Video interface 132 found: [ 1682.695118][T23752] usbhid 5-1:0.0: can't add hid device: -71 [ 1682.695720][T23752] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1682.748796][T23752] usb 5-1: USB disconnect, device number 52 [ 1682.891852][T23753] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1682.891953][T23753] em28xx 4-1:0.132: board has no eeprom [ 1682.951662][T23753] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1682.951695][T23753] em28xx 4-1:0.132: analog set to bulk mode. [ 1682.952635][ T9990] em28xx 4-1:0.132: Registering V4L2 extension [ 1683.030133][ T37] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1683.074198][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1683.074641][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1683.075052][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1683.075447][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1683.628762][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1683.629250][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1683.629732][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1683.630222][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1683.766995][ T9198] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1683.767033][ T9198] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.552592][ T9949] FAT-fs (nullb0): bogus number of reserved sectors [ 1684.552615][ T9949] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1684.838303][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1684.839870][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1684.840617][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1684.848562][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1684.858787][ T9990] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1684.862333][ T9990] em28xx 4-1:0.132: Config register raw data: 0xfffffffb [ 1684.871978][ T9990] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1684.872962][ T9990] em28xx 4-1:0.132: No AC97 audio processor [ 1684.962308][ T9964] net_ratelimit: 1182 callbacks suppressed [ 1684.962332][ T9964] netlink: zone id is out of range [ 1684.962343][ T9964] netlink: zone id is out of range [ 1684.962352][ T9964] netlink: zone id is out of range [ 1684.962435][ T9964] netlink: zone id is out of range [ 1684.962444][ T9964] netlink: zone id is out of range [ 1684.962453][ T9964] netlink: zone id is out of range [ 1684.962461][ T9964] netlink: zone id is out of range [ 1684.962471][ T9964] netlink: zone id is out of range [ 1684.962479][ T9964] netlink: zone id is out of range [ 1684.962488][ T9964] netlink: zone id is out of range [ 1685.103214][ T9954] FAT-fs (nullb0): bogus number of reserved sectors [ 1685.103236][ T9954] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1685.416597][ T9990] usb 4-1: Decoder not found [ 1685.416620][ T9990] em28xx 4-1:0.132: failed to create media graph [ 1685.416659][ T9990] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1685.453128][ T9990] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1685.620993][ T37] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1685.621030][ T37] em28xx 3-1:0.132: board has no eeprom [ 1685.673980][ T37] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1685.674082][ T37] em28xx 3-1:0.132: analog set to bulk mode. [ 1685.679811][ T9990] em28xx 3-1:0.132: Registering V4L2 extension [ 1685.750321][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1685.750651][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1685.750960][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1685.751305][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1685.842917][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1685.843251][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1685.843545][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1685.845384][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1685.965581][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1685.967583][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1685.972047][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1685.977713][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1685.985824][ T9990] em28xx 3-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1685.992440][ T9990] em28xx 3-1:0.132: Config register raw data: 0xfffffffb [ 1686.005250][ T9990] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1686.005460][ T9990] em28xx 3-1:0.132: No AC97 audio processor [ 1686.079338][ T9990] usb 3-1: Decoder not found [ 1686.079360][ T9990] em28xx 3-1:0.132: failed to create media graph [ 1686.079400][ T9990] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1686.115506][ T9990] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1686.377208][T14684] usb 3-1: USB disconnect, device number 95 [ 1686.390220][T14684] em28xx 3-1:0.132: Disconnecting em28xx [ 1686.390322][T14684] em28xx 3-1:0.132: Closing input extension [ 1686.548210][T14684] em28xx 3-1:0.132: Freeing device [ 1686.814408][ T9198] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1686.814447][ T9198] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.209413][T10028] netlink: 'syz.7.5378': attribute type 29 has an invalid length. [ 1687.850961][T10038] FAULT_INJECTION: forcing a failure. [ 1687.850961][T10038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1687.851002][T10038] CPU: 0 UID: 0 PID: 10038 Comm: syz.7.5379 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1687.851043][T10038] Tainted: [L]=SOFTLOCKUP [ 1687.851052][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1687.851066][T10038] Call Trace: [ 1687.851075][T10038] [ 1687.851085][T10038] dump_stack_lvl+0xe8/0x150 [ 1687.851126][T10038] should_fail_ex+0x467/0x600 [ 1687.851163][T10038] _copy_from_user+0x2d/0xb0 [ 1687.851189][T10038] ___sys_sendmsg+0x1c6/0x360 [ 1687.851213][T10038] ? __lock_acquire+0x683/0x2ce0 [ 1687.851240][T10038] ? __pfx____sys_sendmsg+0x10/0x10 [ 1687.851297][T10038] ? __fget_files+0x2a/0x420 [ 1687.851320][T10038] ? __fget_files+0x3a8/0x420 [ 1687.851351][T10038] __x64_sys_sendmsg+0x1b7/0x290 [ 1687.851383][T10038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1687.851428][T10038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.851455][T10038] do_syscall_64+0x174/0x580 [ 1687.851489][T10038] ? trace_irq_disable+0x3b/0x140 [ 1687.851527][T10038] ? clear_bhb_loop+0x40/0x90 [ 1687.851557][T10038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.851580][T10038] RIP: 0033:0x7f7ef9cdde59 [ 1687.851602][T10038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.851622][T10038] RSP: 002b:00007f7ef7f36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1687.851646][T10038] RAX: ffffffffffffffda RBX: 00007f7ef9f65fa0 RCX: 00007f7ef9cdde59 [ 1687.851662][T10038] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1687.851677][T10038] RBP: 00007f7ef7f36090 R08: 0000000000000000 R09: 0000000000000000 [ 1687.851691][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.851704][T10038] R13: 00007f7ef9f66038 R14: 00007f7ef9f65fa0 R15: 00007ffefaba1e68 [ 1687.851739][T10038] [ 1688.177564][T11900] usb 4-1: USB disconnect, device number 8 [ 1688.180330][T11900] em28xx 4-1:0.132: Disconnecting em28xx [ 1688.180358][T11900] em28xx 4-1:0.132: Closing input extension [ 1688.225727][T11900] em28xx 4-1:0.132: Freeing device [ 1688.576539][ T37] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1688.726650][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 1688.728529][ T37] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1688.728557][ T37] usb 5-1: config 0 has no interface number 0 [ 1688.728605][ T37] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1688.731605][ T37] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1688.731633][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.731657][ T37] usb 5-1: Product: syz [ 1688.731668][ T37] usb 5-1: Manufacturer: syz [ 1688.731679][ T37] usb 5-1: SerialNumber: syz [ 1688.782355][ T37] usb 5-1: config 0 descriptor?? [ 1688.832803][ T37] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1688.832843][ T37] em28xx 5-1:0.132: Video interface 132 found: [ 1689.021575][ T38] audit: type=1326 audit(1784141505.164:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10074 comm="syz.3.5385" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b5667de59 code=0x0 [ 1689.212841][ T37] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 1689.242561][T10087] FAULT_INJECTION: forcing a failure. [ 1689.242561][T10087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.242619][T10087] CPU: 0 UID: 0 PID: 10087 Comm: syz.2.5388 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1689.242650][T10087] Tainted: [L]=SOFTLOCKUP [ 1689.242658][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1689.242672][T10087] Call Trace: [ 1689.242681][T10087] [ 1689.242691][T10087] dump_stack_lvl+0xe8/0x150 [ 1689.242731][T10087] should_fail_ex+0x467/0x600 [ 1689.242770][T10087] _copy_from_user+0x2d/0xb0 [ 1689.242796][T10087] __sys_bind+0x1cc/0x410 [ 1689.242843][T10087] ? __pfx___sys_bind+0x10/0x10 [ 1689.242891][T10087] ? __pfx_ksys_write+0x10/0x10 [ 1689.242926][T10087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.242951][T10087] __x64_sys_bind+0x7a/0x90 [ 1689.242986][T10087] do_syscall_64+0x174/0x580 [ 1689.243020][T10087] ? trace_irq_disable+0x3b/0x140 [ 1689.243057][T10087] ? clear_bhb_loop+0x40/0x90 [ 1689.243085][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.243108][T10087] RIP: 0033:0x7f39c595de59 [ 1689.243130][T10087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1689.243151][T10087] RSP: 002b:00007f39c3bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1689.243173][T10087] RAX: ffffffffffffffda RBX: 00007f39c5be5fa0 RCX: 00007f39c595de59 [ 1689.243189][T10087] RDX: 0000000000000010 RSI: 0000200000e15000 RDI: 0000000000000003 [ 1689.243203][T10087] RBP: 00007f39c3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.243217][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.243230][T10087] R13: 00007f39c5be6038 R14: 00007f39c5be5fa0 R15: 00007fff178cd3b8 [ 1689.243265][T10087] [ 1689.809078][T10094] FAT-fs (nullb0): bogus number of reserved sectors [ 1689.809125][T10094] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1690.948501][T14684] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1691.082122][ T9198] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1691.100833][T14684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.100900][T14684] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1691.100916][T14684] usb 4-1: config 0 has no interface number 1 [ 1691.100955][T14684] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1691.100973][T14684] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1691.100997][T14684] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6 [ 1691.101052][T14684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.175996][T14684] usb 4-1: config 0 descriptor?? [ 1691.185383][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1691.332279][ T9198] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1691.377184][T10130] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5393'. [ 1691.397958][ T37] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1691.398000][ T37] em28xx 5-1:0.132: board has no eeprom [ 1691.459637][T11900] usb 4-1: USB disconnect, device number 9 [ 1691.469237][ T37] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1691.469266][ T37] em28xx 5-1:0.132: analog set to bulk mode. [ 1691.469628][ T5827] em28xx 5-1:0.132: Registering V4L2 extension [ 1691.632026][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1691.787489][ T5827] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1691.787886][ T5827] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1691.788266][ T5827] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1691.788645][ T5827] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1691.804408][ T37] usb 5-1: USB disconnect, device number 53 [ 1691.883986][T10137] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1691.888568][ T9198] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1692.158952][ T37] em28xx 5-1:0.132: Disconnecting em28xx [ 1692.167409][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1692.249158][T10159] netlink: 'syz.4.5395': attribute type 1 has an invalid length. [ 1692.888131][ T9198] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1693.113668][ T9198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1693.317643][T10180] tipc: Enabling of bearer rejected, failed to enable media [ 1693.331052][ T5827] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1693.331126][ T5827] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1693.331163][ T5827] em28xx 5-1:0.132: No AC97 audio processor [ 1693.378927][ T5827] usb 5-1: Decoder not found [ 1693.378947][ T5827] em28xx 5-1:0.132: failed to create media graph [ 1693.378986][ T5827] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1693.405700][ T5827] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1693.407428][ T37] em28xx 5-1:0.132: Closing input extension [ 1693.469827][ T37] em28xx 5-1:0.132: Freeing device [ 1693.496898][T10193] net_ratelimit: 1182 callbacks suppressed [ 1693.496919][T10193] netlink: zone id is out of range [ 1693.496928][T10193] netlink: zone id is out of range [ 1693.496936][T10193] netlink: zone id is out of range [ 1693.496944][T10193] netlink: zone id is out of range [ 1693.496952][T10193] netlink: zone id is out of range [ 1693.496961][T10193] netlink: zone id is out of range [ 1693.496968][T10193] netlink: zone id is out of range [ 1693.496977][T10193] netlink: zone id is out of range [ 1693.496985][T10193] netlink: zone id is out of range [ 1693.496994][T10193] netlink: zone id is out of range [ 1693.819405][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1693.878514][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1693.912281][T19688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1693.912507][T19688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1693.940326][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1693.940574][T17856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1694.135190][T10205] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1695.732595][ T31] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1695.891728][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1695.891785][ T31] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1695.891804][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.930573][ T31] usb 5-1: config 0 descriptor?? [ 1695.931528][T10228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1696.062908][ T1252] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1696.212928][ T1252] usb 4-1: Using ep0 maxpacket: 8 [ 1696.219473][ T1252] usb 4-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1696.219510][ T1252] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1696.219547][ T1252] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1696.219571][ T1252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.280911][ T1252] usb 4-1: config 0 descriptor?? [ 1696.404685][T10257] FAULT_INJECTION: forcing a failure. [ 1696.404685][T10257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.404727][T10257] CPU: 1 UID: 0 PID: 10257 Comm: syz.2.5409 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1696.404760][T10257] Tainted: [L]=SOFTLOCKUP [ 1696.404769][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1696.404783][T10257] Call Trace: [ 1696.404792][T10257] [ 1696.404802][T10257] dump_stack_lvl+0xe8/0x150 [ 1696.404843][T10257] should_fail_ex+0x467/0x600 [ 1696.404879][T10257] _copy_from_user+0x2d/0xb0 [ 1696.404920][T10257] ___sys_sendmsg+0x1c6/0x360 [ 1696.404947][T10257] ? __lock_acquire+0x683/0x2ce0 [ 1696.404976][T10257] ? __pfx____sys_sendmsg+0x10/0x10 [ 1696.405036][T10257] ? __fget_files+0x2a/0x420 [ 1696.405059][T10257] ? __fget_files+0x3a8/0x420 [ 1696.405093][T10257] __x64_sys_sendmsg+0x1b7/0x290 [ 1696.405122][T10257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1696.405164][T10257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.405190][T10257] do_syscall_64+0x174/0x580 [ 1696.405227][T10257] ? clear_bhb_loop+0x40/0x90 [ 1696.405255][T10257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.405280][T10257] RIP: 0033:0x7f39c595de59 [ 1696.405304][T10257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.405325][T10257] RSP: 002b:00007f39c3b95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1696.405355][T10257] RAX: ffffffffffffffda RBX: 00007f39c5be6090 RCX: 00007f39c595de59 [ 1696.405371][T10257] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1696.405385][T10257] RBP: 00007f39c3b95090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.405398][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.405412][T10257] R13: 00007f39c5be6128 R14: 00007f39c5be6090 R15: 00007fff178cd3b8 [ 1696.405448][T10257] [ 1696.431801][ T31] hid (null): unknown global tag 0xe [ 1696.683072][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.686916][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.686993][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.687098][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.687192][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.687281][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.687347][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.687420][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.687487][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.687574][ T31] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0 [ 1696.825769][ T31] asus 0003:0B05:1ABE.001F: ignoring exceeding usage max [ 1696.850297][ T31] asus 0003:0B05:1ABE.001F: unknown global tag 0xe [ 1696.850322][ T31] asus 0003:0B05:1ABE.001F: item 0 1 1 14 parsing failed [ 1696.854105][ T31] asus 0003:0B05:1ABE.001F: Asus hid parse failed: -22 [ 1696.862200][ T31] asus 0003:0B05:1ABE.001F: probe with driver asus failed with error -22 [ 1696.889506][ T1252] hid (null): global environment stack underflow [ 1696.889539][ T1252] hid (null): invalid report_count 2060869942 [ 1696.937409][ T1252] logitech-djreceiver 0003:046D:C52B.0020: global environment stack underflow [ 1696.937434][ T1252] logitech-djreceiver 0003:046D:C52B.0020: item 0 2 1 11 parsing failed [ 1696.938194][ T1252] logitech-djreceiver 0003:046D:C52B.0020: logi_dj_probe: parse failed [ 1696.939366][ T1252] logitech-djreceiver 0003:046D:C52B.0020: probe with driver logitech-djreceiver failed with error -22 [ 1696.945499][ T31] usb 5-1: USB disconnect, device number 54 [ 1697.112721][T23753] usb 4-1: USB disconnect, device number 10 [ 1697.396755][T10293] tipc: Started in network mode [ 1697.396775][T10293] tipc: Node identity _, cluster identity 4711 [ 1697.396830][T10293] tipc: Enabling of bearer rejected, failed to enable media [ 1697.494187][ T8548] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1697.658420][ T9198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.671933][ T8548] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1697.671968][ T8548] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1697.671990][ T8548] usb 3-1: Product: syz [ 1697.752509][ T8548] usb 3-1: config 0 descriptor?? [ 1697.766011][ T8548] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1697.771644][ T8548] usb 3-1: Detected FT232H [ 1698.232935][ T8548] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1698.243139][ T8548] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1698.259258][ T8548] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1698.281037][ T8548] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1698.299646][ T8548] usb 3-1: USB disconnect, device number 96 [ 1698.347458][ T8548] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1698.348356][ T8548] ftdi_sio 3-1:0.0: device disconnected [ 1699.605379][ T9198] veth0_vlan: entered promiscuous mode [ 1699.690955][ T9198] veth1_vlan: entered promiscuous mode [ 1699.795586][T10347] FAULT_INJECTION: forcing a failure. [ 1699.795586][T10347] name failslab, interval 1, probability 0, space 0, times 0 [ 1699.795626][T10347] CPU: 0 UID: 0 PID: 10347 Comm: syz.2.5416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1699.795657][T10347] Tainted: [L]=SOFTLOCKUP [ 1699.795666][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1699.795679][T10347] Call Trace: [ 1699.795688][T10347] [ 1699.795698][T10347] dump_stack_lvl+0xe8/0x150 [ 1699.795741][T10347] should_fail_ex+0x467/0x600 [ 1699.795781][T10347] should_failslab+0xa8/0x100 [ 1699.795814][T10347] __kmalloc_noprof+0xfe/0x780 [ 1699.795833][T10347] ? rcu_is_watching+0x15/0xb0 [ 1699.795860][T10347] ? tomoyo_realpath_from_path+0xef/0x640 [ 1699.795888][T10347] ? tomoyo_realpath_from_path+0xef/0x640 [ 1699.795931][T10347] tomoyo_realpath_from_path+0xef/0x640 [ 1699.795968][T10347] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1699.796007][T10347] tomoyo_path_number_perm+0x246/0x5f0 [ 1699.796048][T10347] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1699.796083][T10347] ? __lock_acquire+0x683/0x2ce0 [ 1699.796119][T10347] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1699.796151][T10347] ? hook_file_ioctl+0x1f3/0x600 [ 1699.796182][T10347] ? lockdep_hardirqs_on+0x7a/0x110 [ 1699.796237][T10347] ? __fget_files+0x2a/0x420 [ 1699.796263][T10347] ? __fget_files+0x2a/0x420 [ 1699.796284][T10347] ? __fget_files+0x3a8/0x420 [ 1699.796306][T10347] ? __fget_files+0x2a/0x420 [ 1699.796333][T10347] security_file_ioctl+0xc3/0x2a0 [ 1699.796360][T10347] __se_sys_ioctl+0x47/0x170 [ 1699.796388][T10347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.796413][T10347] do_syscall_64+0x174/0x580 [ 1699.796448][T10347] ? trace_irq_disable+0x3b/0x140 [ 1699.796485][T10347] ? clear_bhb_loop+0x40/0x90 [ 1699.796515][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.796538][T10347] RIP: 0033:0x7f39c595de59 [ 1699.796560][T10347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.796580][T10347] RSP: 002b:00007f39c3bb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.796604][T10347] RAX: ffffffffffffffda RBX: 00007f39c5be5fa0 RCX: 00007f39c595de59 [ 1699.796620][T10347] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000006 [ 1699.796632][T10347] RBP: 00007f39c3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1699.796645][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1699.796657][T10347] R13: 00007f39c5be6038 R14: 00007f39c5be5fa0 R15: 00007fff178cd3b8 [ 1699.796692][T10347] [ 1699.816020][T10347] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1699.926672][ T9198] veth0_macvtap: entered promiscuous mode [ 1699.964426][ T9198] veth1_macvtap: entered promiscuous mode [ 1700.041312][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1700.124452][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1700.149527][ T1514] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.149583][ T1514] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.149621][ T1514] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.149658][ T1514] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.466702][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.466725][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.934599][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.934629][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1706.165049][T10455] FAULT_INJECTION: forcing a failure. [ 1706.165049][T10455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.165088][T10455] CPU: 0 UID: 0 PID: 10455 Comm: syz.7.5430 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1706.165118][T10455] Tainted: [L]=SOFTLOCKUP [ 1706.165126][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1706.165141][T10455] Call Trace: [ 1706.165150][T10455] [ 1706.165161][T10455] dump_stack_lvl+0xe8/0x150 [ 1706.165201][T10455] should_fail_ex+0x467/0x600 [ 1706.165240][T10455] _copy_from_user+0x2d/0xb0 [ 1706.165264][T10455] ___sys_sendmsg+0x1c6/0x360 [ 1706.165289][T10455] ? __lock_acquire+0x683/0x2ce0 [ 1706.165320][T10455] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.165348][T10455] ? kstrtouint+0x6e/0xe0 [ 1706.165412][T10455] ? __fget_files+0x2a/0x420 [ 1706.165433][T10455] ? __fget_files+0x3a8/0x420 [ 1706.165465][T10455] __sys_sendmmsg+0x279/0x4d0 [ 1706.165496][T10455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1706.165530][T10455] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1706.165574][T10455] ? ksys_write+0x248/0x270 [ 1706.165604][T10455] ? __pfx_ksys_write+0x10/0x10 [ 1706.165638][T10455] __x64_sys_sendmmsg+0xa0/0xc0 [ 1706.165663][T10455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.165687][T10455] do_syscall_64+0x174/0x580 [ 1706.165719][T10455] ? trace_irq_disable+0x3b/0x140 [ 1706.165755][T10455] ? clear_bhb_loop+0x40/0x90 [ 1706.165783][T10455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.165805][T10455] RIP: 0033:0x7f7ef9cdde59 [ 1706.165826][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.165845][T10455] RSP: 002b:00007f7ef7f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1706.165867][T10455] RAX: ffffffffffffffda RBX: 00007f7ef9f65fa0 RCX: 00007f7ef9cdde59 [ 1706.165883][T10455] RDX: 0000000000000001 RSI: 0000200000005c80 RDI: 0000000000000003 [ 1706.165897][T10455] RBP: 00007f7ef7f36090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.165910][T10455] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 1706.165922][T10455] R13: 00007f7ef9f66038 R14: 00007f7ef9f65fa0 R15: 00007ffefaba1e68 [ 1706.165955][T10455] [ 1708.122900][ T5827] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 1708.328385][ T5827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1708.331935][ T5827] usb 7-1: not running at top speed; connect to a high speed hub [ 1708.377197][ T5827] usb 7-1: config 66 has an invalid interface number: 41 but max is 0 [ 1708.377230][ T5827] usb 7-1: config 66 has no interface number 0 [ 1708.377264][ T5827] usb 7-1: config 66 interface 41 has no altsetting 0 [ 1708.411606][ T5827] usb 7-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 1708.411630][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.411645][ T5827] usb 7-1: Product: syz [ 1708.411656][ T5827] usb 7-1: Manufacturer: syz [ 1708.411666][ T5827] usb 7-1: SerialNumber: syz [ 1710.379452][T14684] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1710.411962][ T5827] go7007 7-1:66.41: probe with driver go7007 failed with error -12 [ 1710.480970][ T5827] usb 7-1: USB disconnect, device number 101 [ 1710.544833][T14684] usb 5-1: Using ep0 maxpacket: 8 [ 1710.548199][T14684] usb 5-1: config 3 has an invalid interface number: 12 but max is 0 [ 1710.548229][T14684] usb 5-1: config 3 has no interface number 0 [ 1710.548262][T14684] usb 5-1: config 3 interface 12 has no altsetting 0 [ 1710.550747][T14684] usb 5-1: New USB device found, idVendor=1371, idProduct=9022, bcdDevice=ec.da [ 1710.550777][T14684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.550799][T14684] usb 5-1: Product: 餿퇟듥雊䯔┋壊驉㎶ㄮ䕁岛殓룪췄䑯ꎋ姻㖹睘홨㣳▓⌀撴޷彋袊୑댺ꄣꋮ쾫턍⭮鵇背㘢櫽鴬庝ᕌ鞌⏭猰슞柄㯌㐫ఊ啚ᔦ薦ꖱ陼㵴픴켁牗噲韁฀겵ꢁ䓥틐⣤홊⋅ꨚ폞輲⡓聾뻫ᖞ懗㬄楗䊣靛砿觇吹ቂ [ 1710.550832][T14684] usb 5-1: Manufacturer: ❫ଇ粓ힷ莮贡䭘⥈䏧蘐磎쀯㣲ۦ跪鑅䏠肑뾪쭏ꀆퟡ칂婋푈羚䡂ꕢ颇뜉钫﹛鄌ꪄ咓␺巋伤覤ْ늭ﳽ쑶日蹸飌辳Ꙑ⭽❃ꪑ໒嬓誱⮂ [ 1710.550861][T14684] usb 5-1: SerialNumber: Х [ 1710.888834][T10539] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5444'. [ 1710.965209][ T1252] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1711.062428][T14684] usb 5-1: USB disconnect, device number 55 [ 1711.105724][T10539] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1711.127172][ T1252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.127245][ T1252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1711.127275][ T1252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1711.127298][ T1252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1711.127340][ T1252] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1711.127363][ T1252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.206865][ T1252] usb 4-1: config 0 descriptor?? [ 1711.688947][ T1252] hid_parser_main: 369 callbacks suppressed [ 1711.688975][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689008][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689553][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689586][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689610][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689634][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689665][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689688][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689729][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.689754][ T1252] zeroplus 0003:0C12:0030.0021: unknown main item tag 0x0 [ 1711.845012][ T1252] zeroplus 0003:0C12:0030.0021: hidraw0: USB HID v40.81 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 1711.845051][ T1252] zeroplus 0003:0C12:0030.0021: no inputs found [ 1711.939975][ T1252] usb 4-1: USB disconnect, device number 11 [ 1712.224772][T10590] fido_id[10590]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1712.649768][T11900] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1713.287201][T11900] usb 3-1: Using ep0 maxpacket: 16 [ 1713.290286][T11900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.290323][T11900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.290347][T11900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1713.290393][T11900] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1713.290418][T11900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.360464][T11900] usb 3-1: config 0 descriptor?? [ 1713.384638][T11900] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 1713.456359][ T4953] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1713.541908][ T4953] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 1713.567753][T14684] usb 3-1: USB disconnect, device number 97 [ 1713.668345][ T4953] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 1714.388102][T10650] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1714.536028][T10650] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 1716.179479][ T37] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1716.332678][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 1716.589189][ T1504] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1716.658051][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1716.659168][ T37] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1716.659203][ T37] usb 3-1: can't read configurations, error -71 [ 1716.694624][ T1504] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1716.740223][ T1504] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1716.898200][ T1504] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1716.963004][ T1504] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1720.075308][T20037] Bluetooth: hci0: command tx timeout [ 1720.923368][ T6852] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1721.073380][ T6852] usb 4-1: Using ep0 maxpacket: 8 [ 1721.091134][ T6852] usb 4-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1721.091170][ T6852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1721.091214][ T6852] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1721.091250][ T6852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.181981][ T6852] usb 4-1: config 0 descriptor?? [ 1721.638725][ T6852] hid (null): global environment stack underflow [ 1721.638761][ T6852] hid (null): invalid report_count 2060869942 [ 1721.674710][ T6852] logitech-djreceiver 0003:046D:C52B.0022: global environment stack underflow [ 1721.674728][ T6852] logitech-djreceiver 0003:046D:C52B.0022: item 0 2 1 11 parsing failed [ 1721.675240][ T6852] logitech-djreceiver 0003:046D:C52B.0022: logi_dj_probe: parse failed [ 1721.675296][ T6852] logitech-djreceiver 0003:046D:C52B.0022: probe with driver logitech-djreceiver failed with error -22 [ 1721.864844][T23753] usb 4-1: USB disconnect, device number 12 [ 1722.124653][T20037] Bluetooth: hci0: command tx timeout [ 1722.260343][T10673] xfrm0 speed is unknown, defaulting to 1000 [ 1722.530125][T10794] can: request_module (can-proto-4) failed. [ 1722.938830][T10814] net_ratelimit: 1182 callbacks suppressed [ 1722.938855][T10814] netlink: zone id is out of range [ 1722.938865][T10814] netlink: zone id is out of range [ 1722.938874][T10814] netlink: zone id is out of range [ 1722.938883][T10814] netlink: zone id is out of range [ 1722.938891][T10814] netlink: zone id is out of range [ 1722.938900][T10814] netlink: zone id is out of range [ 1722.938908][T10814] netlink: zone id is out of range [ 1722.938916][T10814] netlink: zone id is out of range [ 1722.938925][T10814] netlink: zone id is out of range [ 1722.938934][T10814] netlink: zone id is out of range [ 1723.295252][T23753] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1723.451814][T23753] usb 7-1: config 0 has no interfaces? [ 1723.454289][T23753] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1723.454320][T23753] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1723.454342][T23753] usb 7-1: Manufacturer: syz [ 1723.454357][T23753] usb 7-1: SerialNumber: syz [ 1723.509654][T23753] usb 7-1: config 0 descriptor?? [ 1723.564382][ T1252] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1723.755027][ T1252] usb 4-1: config 0 has no interfaces? [ 1723.767736][ T1252] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1723.767770][ T1252] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1723.767791][ T1252] usb 4-1: Manufacturer: syz [ 1723.767807][ T1252] usb 4-1: SerialNumber: syz [ 1723.848361][ T31] usb 7-1: USB disconnect, device number 102 [ 1723.873437][ T1252] usb 4-1: config 0 descriptor?? [ 1724.167882][T10850] FAULT_INJECTION: forcing a failure. [ 1724.167882][T10850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.167921][T10850] CPU: 0 UID: 0 PID: 10850 Comm: syz.3.5485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1724.167949][T10850] Tainted: [L]=SOFTLOCKUP [ 1724.167956][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1724.167969][T10850] Call Trace: [ 1724.167977][T10850] [ 1724.167986][T10850] dump_stack_lvl+0xe8/0x150 [ 1724.168028][T10850] should_fail_ex+0x467/0x600 [ 1724.168067][T10850] _copy_from_user+0x2d/0xb0 [ 1724.168093][T10850] ucma_write+0x166/0x2f0 [ 1724.168132][T10850] ? __pfx_ucma_write+0x10/0x10 [ 1724.168165][T10850] ? security_file_permission+0x75/0x260 [ 1724.168191][T10850] ? rw_verify_area+0x209/0x4d0 [ 1724.168223][T10850] vfs_writev+0x4c4/0x990 [ 1724.168257][T10850] ? __pfx_ucma_write+0x10/0x10 [ 1724.168313][T10850] ? __pfx_vfs_writev+0x10/0x10 [ 1724.168406][T10850] ? __fget_files+0x2a/0x420 [ 1724.168433][T10850] ? __fget_files+0x3a8/0x420 [ 1724.168455][T10850] ? __fget_files+0x2a/0x420 [ 1724.168487][T10850] do_writev+0x15a/0x2e0 [ 1724.168524][T10850] ? __pfx_do_writev+0x10/0x10 [ 1724.168566][T10850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.168593][T10850] do_syscall_64+0x174/0x580 [ 1724.168633][T10850] ? clear_bhb_loop+0x40/0x90 [ 1724.168662][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.168685][T10850] RIP: 0033:0x7f4b5667de59 [ 1724.168708][T10850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.168728][T10850] RSP: 002b:00007f4b548b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1724.168752][T10850] RAX: ffffffffffffffda RBX: 00007f4b56906090 RCX: 00007f4b5667de59 [ 1724.168769][T10850] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000016 [ 1724.168782][T10850] RBP: 00007f4b548b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.168795][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.168808][T10850] R13: 00007f4b56906128 R14: 00007f4b56906090 R15: 00007ffc281cdae8 [ 1724.168841][T10850] [ 1724.206556][T20037] Bluetooth: hci0: command tx timeout [ 1724.533672][ T1252] usb 4-1: USB disconnect, device number 13 [ 1724.868084][T10880] FAULT_INJECTION: forcing a failure. [ 1724.868084][T10880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.868122][T10880] CPU: 1 UID: 0 PID: 10880 Comm: syz.6.5490 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1724.868151][T10880] Tainted: [L]=SOFTLOCKUP [ 1724.868159][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1724.868173][T10880] Call Trace: [ 1724.868181][T10880] [ 1724.868190][T10880] dump_stack_lvl+0xe8/0x150 [ 1724.868229][T10880] should_fail_ex+0x467/0x600 [ 1724.868276][T10880] _copy_from_user+0x2d/0xb0 [ 1724.868300][T10880] ___sys_sendmsg+0x1c6/0x360 [ 1724.868325][T10880] ? __lock_acquire+0x683/0x2ce0 [ 1724.868352][T10880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1724.868408][T10880] ? __fget_files+0x2a/0x420 [ 1724.868428][T10880] ? __fget_files+0x3a8/0x420 [ 1724.868459][T10880] __x64_sys_sendmsg+0x1b7/0x290 [ 1724.868485][T10880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1724.868525][T10880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.868549][T10880] do_syscall_64+0x174/0x580 [ 1724.868580][T10880] ? trace_irq_disable+0x3b/0x140 [ 1724.868616][T10880] ? clear_bhb_loop+0x40/0x90 [ 1724.868642][T10880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.868664][T10880] RIP: 0033:0x7fe7346fde59 [ 1724.868682][T10880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.868701][T10880] RSP: 002b:00007fe732935028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1724.868742][T10880] RAX: ffffffffffffffda RBX: 00007fe734986090 RCX: 00007fe7346fde59 [ 1724.868762][T10880] RDX: 0000000000000010 RSI: 0000200000000900 RDI: 0000000000000004 [ 1724.868776][T10880] RBP: 00007fe732935090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.868789][T10880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.868801][T10880] R13: 00007fe734986128 R14: 00007fe734986090 R15: 00007ffcb8fe5648 [ 1724.868834][T10880] [ 1725.544131][T10898] FAULT_INJECTION: forcing a failure. [ 1725.544131][T10898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.544170][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.6.5495 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1725.544200][T10898] Tainted: [L]=SOFTLOCKUP [ 1725.544208][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1725.544221][T10898] Call Trace: [ 1725.544230][T10898] [ 1725.544240][T10898] dump_stack_lvl+0xe8/0x150 [ 1725.544290][T10898] should_fail_ex+0x467/0x600 [ 1725.544328][T10898] _copy_from_user+0x2d/0xb0 [ 1725.544353][T10898] do_tcp_setsockopt+0x504/0x1f80 [ 1725.544381][T10898] ? lockdep_hardirqs_on+0x7a/0x110 [ 1725.544419][T10898] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1725.544453][T10898] ? __fget_files+0x2a/0x420 [ 1725.544479][T10898] ? sock_common_setsockopt+0x36/0xc0 [ 1725.544511][T10898] ? tcp_setsockopt+0x3d/0xe0 [ 1725.544534][T10898] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1725.544568][T10898] do_sock_setsockopt+0x17c/0x1b0 [ 1725.544606][T10898] __x64_sys_setsockopt+0x143/0x1b0 [ 1725.544630][T10898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.544654][T10898] do_syscall_64+0x174/0x580 [ 1725.544685][T10898] ? trace_irq_disable+0x3b/0x140 [ 1725.544719][T10898] ? clear_bhb_loop+0x40/0x90 [ 1725.544749][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.544771][T10898] RIP: 0033:0x7fe7346fde59 [ 1725.544792][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.544809][T10898] RSP: 002b:00007fe732956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1725.544832][T10898] RAX: ffffffffffffffda RBX: 00007fe734985fa0 RCX: 00007fe7346fde59 [ 1725.544847][T10898] RDX: 0000000000000020 RSI: 0000000000000006 RDI: 0000000000000003 [ 1725.544859][T10898] RBP: 00007fe732956090 R08: 00000000000000d8 R09: 0000000000000000 [ 1725.544872][T10898] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.544886][T10898] R13: 00007fe734986038 R14: 00007fe734985fa0 R15: 00007ffcb8fe5648 [ 1725.544920][T10898] [ 1726.180234][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5499'. [ 1726.290738][T20037] Bluetooth: hci0: command tx timeout [ 1727.618826][T10951] 9p: Bad value for 'wfdno' [ 1727.961488][T10975] FAULT_INJECTION: forcing a failure. [ 1727.961488][T10975] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.961560][T10975] CPU: 1 UID: 0 PID: 10975 Comm: syz.7.5505 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1727.961593][T10975] Tainted: [L]=SOFTLOCKUP [ 1727.961601][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1727.961615][T10975] Call Trace: [ 1727.961625][T10975] [ 1727.961635][T10975] dump_stack_lvl+0xe8/0x150 [ 1727.961678][T10975] should_fail_ex+0x467/0x600 [ 1727.961718][T10975] should_failslab+0xa8/0x100 [ 1727.961748][T10975] kmem_cache_alloc_noprof+0xa4/0x650 [ 1727.961785][T10975] ? do_getname_kernel+0x54/0x230 [ 1727.961821][T10975] ? do_getname_kernel+0x54/0x230 [ 1727.961862][T10975] do_getname_kernel+0x54/0x230 [ 1727.961896][T10975] ? kern_path+0x1b/0x150 [ 1727.961921][T10975] kern_path+0x25/0x150 [ 1727.961946][T10975] lookup_bdev+0xc8/0x290 [ 1727.961989][T10975] ? __pfx_lookup_bdev+0x10/0x10 [ 1727.962022][T10975] ? irqentry_exit+0x218/0x8f0 [ 1727.962057][T10975] ? trace_irq_disable+0x3b/0x140 [ 1727.962089][T10975] get_tree_bdev_flags+0xba/0x4f0 [ 1727.962114][T10975] ? __pfx_ext4_fill_super+0x10/0x10 [ 1727.962205][T10975] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1727.962227][T10975] ? __pfx_ext4_get_tree+0x10/0x10 [ 1727.962252][T10975] vfs_get_tree+0x92/0x2a0 [ 1727.962277][T10975] vfs_cmd_create+0xa2/0x200 [ 1727.962351][T10975] __se_sys_fsconfig+0x6bf/0x810 [ 1727.962380][T10975] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1727.962404][T10975] ? ksys_write+0x248/0x270 [ 1727.962427][T10975] ? __pfx_ksys_write+0x10/0x10 [ 1727.962454][T10975] ? __x64_sys_fsconfig+0x20/0xc0 [ 1727.962479][T10975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.962499][T10975] do_syscall_64+0x174/0x580 [ 1727.962528][T10975] ? clear_bhb_loop+0x40/0x90 [ 1727.962562][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.962579][T10975] RIP: 0033:0x7f7ef9cdde59 [ 1727.962595][T10975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1727.962611][T10975] RSP: 002b:00007f7ef7ef4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1727.962630][T10975] RAX: ffffffffffffffda RBX: 00007f7ef9f66180 RCX: 00007f7ef9cdde59 [ 1727.962643][T10975] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1727.962653][T10975] RBP: 00007f7ef7ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.962665][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.962675][T10975] R13: 00007f7ef9f66218 R14: 00007f7ef9f66180 R15: 00007ffefaba1e68 [ 1727.962702][T10975] [ 1729.161059][T10991] net_ratelimit: 776 callbacks suppressed [ 1729.161081][T10991] netlink: set zone limit has 8 unknown bytes [ 1729.435153][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.435384][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.435642][T10673] bridge_slave_0: entered allmulticast mode [ 1729.438474][T10673] bridge_slave_0: entered promiscuous mode [ 1729.504867][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1729.506621][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.506936][T10673] bridge_slave_1: entered allmulticast mode [ 1729.536968][T10673] bridge_slave_1: entered promiscuous mode [ 1729.641651][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1729.666711][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.847050][T10673] team0: Port device team_slave_0 added [ 1729.909895][T10673] team0: Port device team_slave_1 added [ 1730.313156][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.313176][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.313221][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.369717][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.369784][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.369846][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1730.453792][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.891046][T10673] hsr_slave_0: entered promiscuous mode [ 1730.951003][T10673] hsr_slave_1: entered promiscuous mode [ 1731.291079][T10673] debugfs: 'hsr0' already exists in 'hsr' [ 1731.291110][T10673] Cannot create hsr debugfs directory [ 1732.922632][T11168] netlink: set zone limit has 8 unknown bytes [ 1734.348012][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5525'. [ 1734.605628][ T37] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1734.782415][ T37] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1734.782453][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.782468][ T37] usb 3-1: Product: syz [ 1734.782479][ T37] usb 3-1: Manufacturer: syz [ 1734.782490][ T37] usb 3-1: SerialNumber: syz [ 1734.941729][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1735.078049][T11229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.128062][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1735.414284][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1735.414348][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1735.653055][ T38] audit: type=1326 audit(1784141551.756:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11243 comm="syz.3.5526" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b5667de59 code=0x0 [ 1736.703020][T11229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5524'. [ 1736.831908][T11273] openvswitch: netlink: Actions may not be safe on all matching packets [ 1736.970539][T11277] program syz.7.5530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1737.100106][T11273] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 1737.591413][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 1737.591478][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1737.593040][ T37] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1737.735516][ T37] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1737.768771][ T37] usb 3-1: USB disconnect, device number 100 [ 1737.846676][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1737.849199][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1737.849239][ T9] usb 4-1: can't read configurations, error -71 [ 1738.011285][T20037] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 1740.040977][T11328] FAULT_INJECTION: forcing a failure. [ 1740.040977][T11328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.041019][T11328] CPU: 1 UID: 0 PID: 11328 Comm: syz.7.5538 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1740.041057][T11328] Tainted: [L]=SOFTLOCKUP [ 1740.041065][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1740.041079][T11328] Call Trace: [ 1740.041088][T11328] [ 1740.041098][T11328] dump_stack_lvl+0xe8/0x150 [ 1740.041139][T11328] should_fail_ex+0x467/0x600 [ 1740.041176][T11328] _copy_from_user+0x2d/0xb0 [ 1740.041201][T11328] ___sys_sendmsg+0x1c6/0x360 [ 1740.041225][T11328] ? __lock_acquire+0x683/0x2ce0 [ 1740.041272][T11328] ? __pfx____sys_sendmsg+0x10/0x10 [ 1740.041334][T11328] ? __fget_files+0x2a/0x420 [ 1740.041356][T11328] ? __fget_files+0x3a8/0x420 [ 1740.041389][T11328] __x64_sys_sendmsg+0x1b7/0x290 [ 1740.041418][T11328] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1740.041462][T11328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.041488][T11328] do_syscall_64+0x174/0x580 [ 1740.041524][T11328] ? trace_irq_disable+0x3b/0x140 [ 1740.041561][T11328] ? clear_bhb_loop+0x40/0x90 [ 1740.041593][T11328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.041616][T11328] RIP: 0033:0x7f7ef9cdde59 [ 1740.041638][T11328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.041659][T11328] RSP: 002b:00007f7ef7f36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1740.041683][T11328] RAX: ffffffffffffffda RBX: 00007f7ef9f65fa0 RCX: 00007f7ef9cdde59 [ 1740.041701][T11328] RDX: 000000002c000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 1740.041716][T11328] RBP: 00007f7ef7f36090 R08: 0000000000000000 R09: 0000000000000000 [ 1740.041730][T11328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.041744][T11328] R13: 00007f7ef9f66038 R14: 00007f7ef9f65fa0 R15: 00007ffefaba1e68 [ 1740.041780][T11328] [ 1741.109739][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1741.262031][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1741.262068][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1741.262096][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1741.265029][ T31] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1741.265061][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.265083][ T31] usb 4-1: Product: syz [ 1741.265099][ T31] usb 4-1: Manufacturer: syz [ 1741.265115][ T31] usb 4-1: SerialNumber: syz [ 1741.396616][ T31] usb 4-1: config 0 descriptor?? [ 1741.397449][T11342] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1741.428659][ T31] usb 4-1: ucan: probing device on interface #0 [ 1741.428688][ T31] usb 4-1: ucan: invalid endpoint configuration [ 1741.428704][ T31] usb 4-1: ucan: probe failed; try to update the device firmware [ 1741.636090][ T8548] usb 4-1: USB disconnect, device number 16 [ 1742.404616][T11372] FAULT_INJECTION: forcing a failure. [ 1742.404616][T11372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.404657][T11372] CPU: 0 UID: 0 PID: 11372 Comm: syz.2.5547 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1742.404689][T11372] Tainted: [L]=SOFTLOCKUP [ 1742.404697][T11372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1742.404711][T11372] Call Trace: [ 1742.404720][T11372] [ 1742.404734][T11372] dump_stack_lvl+0xe8/0x150 [ 1742.404774][T11372] should_fail_ex+0x467/0x600 [ 1742.404811][T11372] _copy_from_user+0x2d/0xb0 [ 1742.404837][T11372] ___sys_recvmsg+0x173/0x5a0 [ 1742.404867][T11372] ? __pfx____sys_recvmsg+0x10/0x10 [ 1742.404896][T11372] ? __fget_files+0x2a/0x420 [ 1742.404935][T11372] ? __fget_files+0x3a8/0x420 [ 1742.404966][T11372] __x64_sys_recvmsg+0x1b4/0x290 [ 1742.404994][T11372] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1742.405036][T11372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.405061][T11372] do_syscall_64+0x174/0x580 [ 1742.405093][T11372] ? trace_irq_disable+0x3b/0x140 [ 1742.405127][T11372] ? clear_bhb_loop+0x40/0x90 [ 1742.405153][T11372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.405175][T11372] RIP: 0033:0x7f39c595de59 [ 1742.405194][T11372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.405212][T11372] RSP: 002b:00007f39c3bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1742.405234][T11372] RAX: ffffffffffffffda RBX: 00007f39c5be5fa0 RCX: 00007f39c595de59 [ 1742.405268][T11372] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1742.405280][T11372] RBP: 00007f39c3bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.405294][T11372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.405306][T11372] R13: 00007f39c5be6038 R14: 00007f39c5be5fa0 R15: 00007fff178cd3b8 [ 1742.405379][T11372] [ 1742.692664][T11378] FAULT_INJECTION: forcing a failure. [ 1742.692664][T11378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1742.692703][T11378] CPU: 1 UID: 0 PID: 11378 Comm: syz.7.5550 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1742.692734][T11378] Tainted: [L]=SOFTLOCKUP [ 1742.692743][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1742.692757][T11378] Call Trace: [ 1742.692766][T11378] [ 1742.692776][T11378] dump_stack_lvl+0xe8/0x150 [ 1742.692815][T11378] should_fail_ex+0x467/0x600 [ 1742.692855][T11378] _copy_from_user+0x2d/0xb0 [ 1742.692881][T11378] ___sys_sendmsg+0x1c6/0x360 [ 1742.692904][T11378] ? __lock_acquire+0x683/0x2ce0 [ 1742.692932][T11378] ? __pfx____sys_sendmsg+0x10/0x10 [ 1742.692993][T11378] ? __fget_files+0x2a/0x420 [ 1742.693014][T11378] ? __fget_files+0x3a8/0x420 [ 1742.693046][T11378] __x64_sys_sendmsg+0x1b7/0x290 [ 1742.693073][T11378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1742.693114][T11378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.693140][T11378] do_syscall_64+0x174/0x580 [ 1742.693173][T11378] ? trace_irq_disable+0x3b/0x140 [ 1742.693207][T11378] ? clear_bhb_loop+0x40/0x90 [ 1742.693232][T11378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.693254][T11378] RIP: 0033:0x7f7ef9cdde59 [ 1742.693275][T11378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1742.693294][T11378] RSP: 002b:00007f7ef7f36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1742.693317][T11378] RAX: ffffffffffffffda RBX: 00007f7ef9f65fa0 RCX: 00007f7ef9cdde59 [ 1742.693334][T11378] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1742.693348][T11378] RBP: 00007f7ef7f36090 R08: 0000000000000000 R09: 0000000000000000 [ 1742.693370][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.693387][T11378] R13: 00007f7ef9f66038 R14: 00007f7ef9f65fa0 R15: 00007ffefaba1e68 [ 1742.693421][T11378] [ 1744.151540][ T37] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1744.301872][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 1744.304488][ T37] usb 4-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1744.304522][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1744.304557][ T37] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 1744.304582][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.363564][ T37] usb 4-1: config 0 descriptor?? [ 1744.521849][ T31] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1744.735009][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1744.744249][ T31] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1744.744278][ T31] usb 7-1: config 0 has no interface number 0 [ 1744.744381][ T31] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1744.748840][ T31] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1744.748871][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.748950][ T31] usb 7-1: Product: syz [ 1744.748967][ T31] usb 7-1: Manufacturer: syz [ 1744.748982][ T31] usb 7-1: SerialNumber: syz [ 1744.756216][ T31] usb 7-1: config 0 descriptor?? [ 1744.796198][ T31] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1744.796227][ T31] em28xx 7-1:0.132: Video interface 132 found: [ 1744.985810][ T37] hid (null): global environment stack underflow [ 1744.985837][ T37] hid (null): invalid report_count 2060869942 [ 1745.123845][ T37] logitech-djreceiver 0003:046D:C52B.0023: global environment stack underflow [ 1745.123864][ T37] logitech-djreceiver 0003:046D:C52B.0023: item 0 2 1 11 parsing failed [ 1745.173382][ T31] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1745.177259][T11432] netlink: zone id is out of range [ 1745.177271][T11432] netlink: zone id is out of range [ 1745.177277][T11432] netlink: zone id is out of range [ 1745.177283][T11432] netlink: zone id is out of range [ 1745.177288][T11432] netlink: zone id is out of range [ 1745.177294][T11432] netlink: zone id is out of range [ 1745.177300][T11432] netlink: zone id is out of range [ 1745.177305][T11432] netlink: zone id is out of range [ 1745.177311][T11432] netlink: zone id is out of range [ 1745.177316][T11432] netlink: zone id is out of range [ 1745.225519][ T37] logitech-djreceiver 0003:046D:C52B.0023: logi_dj_probe: parse failed [ 1745.225726][ T37] logitech-djreceiver 0003:046D:C52B.0023: probe with driver logitech-djreceiver failed with error -22 [ 1745.318207][ T37] usb 4-1: USB disconnect, device number 17 [ 1745.560240][T11410] FAT-fs (nullb0): bogus number of reserved sectors [ 1745.560262][T11410] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1745.844870][ T31] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1745.844911][ T31] em28xx 7-1:0.132: board has no eeprom [ 1745.902948][ T31] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1745.902975][ T31] em28xx 7-1:0.132: analog set to bulk mode. [ 1745.917682][ T5827] em28xx 7-1:0.132: Registering V4L2 extension [ 1745.961911][ T31] usb 7-1: USB disconnect, device number 103 [ 1745.988287][ T31] em28xx 7-1:0.132: Disconnecting em28xx [ 1746.413292][ T6852] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1746.570901][ T6852] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1746.570943][ T6852] usb 4-1: can't read configurations, error -61 [ 1746.631865][ T5827] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1746.631885][ T5827] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1746.631896][ T5827] em28xx 7-1:0.132: No AC97 audio processor [ 1746.677747][ T5827] usb 7-1: Decoder not found [ 1746.677763][ T5827] em28xx 7-1:0.132: failed to create media graph [ 1746.677788][ T5827] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1746.713523][ T6852] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1746.969076][ T5827] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1746.969327][ T31] em28xx 7-1:0.132: Closing input extension [ 1746.998110][ T6852] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1746.998148][ T6852] usb 4-1: can't read configurations, error -61 [ 1746.999845][ T6852] usb usb4-port1: attempt power cycle [ 1747.374019][ T6852] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1747.398602][ T6852] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1747.398641][ T6852] usb 4-1: can't read configurations, error -61 [ 1747.402120][ T31] em28xx 7-1:0.132: Freeing device [ 1747.534780][ T6852] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1747.559540][ T6852] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1747.559581][ T6852] usb 4-1: can't read configurations, error -61 [ 1747.583813][ T6852] usb usb4-port1: unable to enumerate USB device [ 1747.661857][T11494] FAULT_INJECTION: forcing a failure. [ 1747.661857][T11494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.661893][T11494] CPU: 0 UID: 0 PID: 11494 Comm: syz.7.5568 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1747.661918][T11494] Tainted: [L]=SOFTLOCKUP [ 1747.661925][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1747.661936][T11494] Call Trace: [ 1747.661943][T11494] [ 1747.661951][T11494] dump_stack_lvl+0xe8/0x150 [ 1747.661984][T11494] should_fail_ex+0x467/0x600 [ 1747.662014][T11494] _copy_from_user+0x2d/0xb0 [ 1747.662034][T11494] do_sock_getsockopt+0x200/0x7e0 [ 1747.662059][T11494] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1747.662089][T11494] ? __fget_files+0x3a8/0x420 [ 1747.662106][T11494] ? __fget_files+0x2a/0x420 [ 1747.662128][T11494] __x64_sys_getsockopt+0x1aa/0x250 [ 1747.662150][T11494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.662170][T11494] do_syscall_64+0x174/0x580 [ 1747.662196][T11494] ? trace_irq_disable+0x3b/0x140 [ 1747.662225][T11494] ? clear_bhb_loop+0x40/0x90 [ 1747.662246][T11494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.662263][T11494] RIP: 0033:0x7f7ef9cdde59 [ 1747.662279][T11494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1747.662294][T11494] RSP: 002b:00007f7ef7f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1747.662314][T11494] RAX: ffffffffffffffda RBX: 00007f7ef9f65fa0 RCX: 00007f7ef9cdde59 [ 1747.662326][T11494] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000003 [ 1747.662337][T11494] RBP: 00007f7ef7f36090 R08: 0000200000000000 R09: 0000000000000000 [ 1747.662348][T11494] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1747.662375][T11494] R13: 00007f7ef9f66038 R14: 00007f7ef9f65fa0 R15: 00007ffefaba1e68 [ 1747.662402][T11494] [ 1749.531199][T10673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1749.573479][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1749.586580][T10673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1749.609104][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1749.613028][T10673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1749.615181][ T8548] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1749.706461][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1749.725691][T10673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1749.767789][T10673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1749.783837][ T8548] usb 3-1: Using ep0 maxpacket: 32 [ 1749.787791][ T8548] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1749.787821][ T8548] usb 3-1: config 0 has no interface number 0 [ 1749.787868][ T8548] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1749.812545][ T8548] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1749.812577][ T8548] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.812597][ T8548] usb 3-1: Product: syz [ 1749.812611][ T8548] usb 3-1: Manufacturer: syz [ 1749.812626][ T8548] usb 3-1: SerialNumber: syz [ 1749.886426][ T8548] usb 3-1: config 0 descriptor?? [ 1749.900196][T11549] FAULT_INJECTION: forcing a failure. [ 1749.900196][T11549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1749.900234][T11549] CPU: 1 UID: 0 PID: 11549 Comm: syz.3.5577 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1749.900262][T11549] Tainted: [L]=SOFTLOCKUP [ 1749.900270][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1749.900282][T11549] Call Trace: [ 1749.900290][T11549] [ 1749.900300][T11549] dump_stack_lvl+0xe8/0x150 [ 1749.900337][T11549] should_fail_ex+0x467/0x600 [ 1749.900373][T11549] _copy_from_user+0x2d/0xb0 [ 1749.900399][T11549] __sys_connect+0x155/0x470 [ 1749.900435][T11549] ? __pfx___sys_connect+0x10/0x10 [ 1749.900479][T11549] ? __pfx_ksys_write+0x10/0x10 [ 1749.900511][T11549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.900533][T11549] __x64_sys_connect+0x7a/0x90 [ 1749.900565][T11549] do_syscall_64+0x174/0x580 [ 1749.900599][T11549] ? trace_irq_disable+0x3b/0x140 [ 1749.900634][T11549] ? clear_bhb_loop+0x40/0x90 [ 1749.900660][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.900681][T11549] RIP: 0033:0x7f4b5667de59 [ 1749.900702][T11549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.900720][T11549] RSP: 002b:00007f4b548b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1749.900745][T11549] RAX: ffffffffffffffda RBX: 00007f4b56906090 RCX: 00007f4b5667de59 [ 1749.900761][T11549] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 1749.900776][T11549] RBP: 00007f4b548b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.900790][T11549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.900802][T11549] R13: 00007f4b56906128 R14: 00007f4b56906090 R15: 00007ffc281cdae8 [ 1749.900834][T11549] [ 1750.107906][ T8548] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1750.107946][ T8548] em28xx 3-1:0.132: Video interface 132 found: [ 1750.361115][ T8548] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1750.862206][T11566] FAT-fs (nullb0): bogus number of reserved sectors [ 1750.862230][T11566] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1752.229116][ T8548] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1752.229199][ T8548] em28xx 3-1:0.132: board has no eeprom [ 1752.295080][ T8548] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1752.295111][ T8548] em28xx 3-1:0.132: analog set to bulk mode. [ 1752.295626][T11900] em28xx 3-1:0.132: Registering V4L2 extension [ 1752.416488][ T8548] usb 3-1: USB disconnect, device number 101 [ 1752.417112][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1752.491612][ T8548] em28xx 3-1:0.132: Disconnecting em28xx [ 1752.563553][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1752.832632][ T1514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.832723][ T1514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1752.901019][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.901158][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1753.711806][T11900] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1753.711833][T11900] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1753.711849][T11900] em28xx 3-1:0.132: No AC97 audio processor [ 1753.765184][T11900] usb 3-1: Decoder not found [ 1753.765206][T11900] em28xx 3-1:0.132: failed to create media graph [ 1753.765246][T11900] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1753.796446][T11900] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1753.798247][ T8548] em28xx 3-1:0.132: Closing input extension [ 1753.920850][ T8548] em28xx 3-1:0.132: Freeing device [ 1754.205163][ T6852] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1754.379210][ T6852] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1754.379244][ T6852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.379266][ T6852] usb 4-1: Product: syz [ 1754.379281][ T6852] usb 4-1: Manufacturer: syz [ 1754.379297][ T6852] usb 4-1: SerialNumber: syz [ 1754.646850][T11618] net_ratelimit: 1536 callbacks suppressed [ 1754.646874][T11618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1754.891433][ T6852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1754.891500][ T6852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1754.972219][T11638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1755.256997][T11638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1755.865156][ T37] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1756.035534][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 1756.654620][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5587'. [ 1756.939441][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1756.942032][ T37] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1756.943662][ T37] usb 3-1: config 251 has an invalid interface number: 33 but max is 0 [ 1756.943688][ T37] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.943706][ T37] usb 3-1: config 251 has no interface number 0 [ 1756.943733][ T37] usb 3-1: config 251 interface 33 has no altsetting 0 [ 1756.946208][ T37] usb 3-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90 [ 1756.946238][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.946258][ T37] usb 3-1: Product: syz [ 1756.946272][ T37] usb 3-1: Manufacturer: syz [ 1756.946286][ T37] usb 3-1: SerialNumber: syz [ 1757.302234][ T37] qmi_wwan 3-1:251.33: probe with driver qmi_wwan failed with error -22 [ 1757.368190][ T37] usb 3-1: USB disconnect, device number 102 [ 1757.638757][T11696] netlink: zone id is out of range [ 1757.638775][T11696] netlink: zone id is out of range [ 1757.638785][T11696] netlink: zone id is out of range [ 1757.638794][T11696] netlink: zone id is out of range [ 1757.638804][T11696] netlink: zone id is out of range [ 1757.638813][T11696] netlink: zone id is out of range [ 1757.638822][T11696] netlink: zone id is out of range [ 1757.638890][T11696] netlink: zone id is out of range [ 1757.698497][ T6852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1757.698529][ T6852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1757.742245][ T6852] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1757.781316][ T6852] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1757.825590][ T6852] usb 4-1: USB disconnect, device number 22 [ 1758.252947][T10673] veth0_vlan: entered promiscuous mode [ 1758.291486][T10673] veth1_vlan: entered promiscuous mode [ 1758.430324][T10673] veth0_macvtap: entered promiscuous mode [ 1758.467331][T10673] veth1_macvtap: entered promiscuous mode [ 1758.580943][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.691952][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.749155][T19690] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.749354][T19690] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.749383][T19690] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.749409][T19690] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.798507][T19690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.798530][T19690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.267912][T11754] net_ratelimit: 766 callbacks suppressed [ 1761.267932][T11754] netlink: zone id is out of range [ 1761.267942][T11754] netlink: zone id is out of range [ 1761.267950][T11754] netlink: zone id is out of range [ 1761.267959][T11754] netlink: zone id is out of range [ 1761.267968][T11754] netlink: zone id is out of range [ 1761.267977][T11754] netlink: zone id is out of range [ 1761.267986][T11754] netlink: zone id is out of range [ 1761.267995][T11754] netlink: zone id is out of range [ 1761.268004][T11754] netlink: zone id is out of range [ 1761.268013][T11754] netlink: zone id is out of range [ 1761.381715][T11112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.381736][T11112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.704339][ T37] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1761.742028][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5607'. [ 1761.742058][T11764] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1761.861124][ T37] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1761.861159][ T37] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1761.861184][ T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1761.872688][ T37] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1761.872779][ T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.872834][ T37] usb 7-1: Product: syz [ 1761.872874][ T37] usb 7-1: Manufacturer: syz [ 1761.872915][ T37] usb 7-1: SerialNumber: syz [ 1761.974702][T11769] FAULT_INJECTION: forcing a failure. [ 1761.974702][T11769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.974743][T11769] CPU: 1 UID: 0 PID: 11769 Comm: syz.3.5608 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1761.974774][T11769] Tainted: [L]=SOFTLOCKUP [ 1761.974782][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1761.974796][T11769] Call Trace: [ 1761.974806][T11769] [ 1761.974816][T11769] dump_stack_lvl+0xe8/0x150 [ 1761.974856][T11769] should_fail_ex+0x467/0x600 [ 1761.974898][T11769] _copy_from_user+0x2d/0xb0 [ 1761.974922][T11769] ___sys_sendmsg+0x1c6/0x360 [ 1761.974946][T11769] ? __lock_acquire+0x683/0x2ce0 [ 1761.974973][T11769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1761.975033][T11769] ? __fget_files+0x2a/0x420 [ 1761.975054][T11769] ? __fget_files+0x3a8/0x420 [ 1761.975093][T11769] __x64_sys_sendmsg+0x1b7/0x290 [ 1761.975121][T11769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1761.975163][T11769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.975187][T11769] do_syscall_64+0x174/0x580 [ 1761.975221][T11769] ? trace_irq_disable+0x3b/0x140 [ 1761.975256][T11769] ? clear_bhb_loop+0x40/0x90 [ 1761.975284][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.975306][T11769] RIP: 0033:0x7f4b5667de59 [ 1761.975327][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1761.975346][T11769] RSP: 002b:00007f4b548d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1761.975370][T11769] RAX: ffffffffffffffda RBX: 00007f4b56905fa0 RCX: 00007f4b5667de59 [ 1761.975387][T11769] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1761.975401][T11769] RBP: 00007f4b548d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.975415][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.975429][T11769] R13: 00007f4b56906038 R14: 00007f4b56905fa0 R15: 00007ffc281cdae8 [ 1761.975463][T11769] [ 1762.076108][ T37] usb 7-1: config 0 descriptor?? [ 1762.078170][T11752] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1762.216787][ T37] usb 7-1: ucan: probing device on interface #0 [ 1762.216826][ T37] usb 7-1: ucan: invalid endpoint configuration [ 1762.216871][ T37] usb 7-1: ucan: probe failed; try to update the device firmware [ 1762.355085][ T37] usb 7-1: USB disconnect, device number 104 [ 1762.771093][T23753] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1762.945096][T23753] usb 3-1: device descriptor read/64, error -71 [ 1763.185027][T23753] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1763.316661][T23753] usb 3-1: device descriptor read/64, error -71 [ 1763.426039][T23753] usb usb3-port1: attempt power cycle [ 1763.805906][ T9990] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1763.806085][T23753] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1763.833560][T23753] usb 3-1: device descriptor read/8, error -71 [ 1763.969168][ T9990] usb 5-1: config 0 has no interfaces? [ 1763.971460][ T9990] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1763.971494][ T9990] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1763.971517][ T9990] usb 5-1: Manufacturer: syz [ 1763.971533][ T9990] usb 5-1: SerialNumber: syz [ 1764.016386][ T9990] usb 5-1: config 0 descriptor?? [ 1764.065091][T23753] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1764.365037][T23753] usb 3-1: device descriptor read/8, error -71 [ 1764.426789][T11838] FAULT_INJECTION: forcing a failure. [ 1764.426789][T11838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.426829][T11838] CPU: 0 UID: 0 PID: 11838 Comm: syz.4.5460 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1764.426858][T11838] Tainted: [L]=SOFTLOCKUP [ 1764.426867][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1764.426881][T11838] Call Trace: [ 1764.426890][T11838] [ 1764.426900][T11838] dump_stack_lvl+0xe8/0x150 [ 1764.426948][T11838] should_fail_ex+0x467/0x600 [ 1764.426990][T11838] _copy_from_user+0x2d/0xb0 [ 1764.427015][T11838] ucma_write+0x166/0x2f0 [ 1764.427053][T11838] ? __pfx_ucma_write+0x10/0x10 [ 1764.427084][T11838] ? security_file_permission+0x75/0x260 [ 1764.427109][T11838] ? rw_verify_area+0x209/0x4d0 [ 1764.427139][T11838] vfs_writev+0x4c4/0x990 [ 1764.427174][T11838] ? __pfx_ucma_write+0x10/0x10 [ 1764.427212][T11838] ? __pfx_vfs_writev+0x10/0x10 [ 1764.427259][T11838] ? __fget_files+0x2a/0x420 [ 1764.427285][T11838] ? __fget_files+0x3a8/0x420 [ 1764.427306][T11838] ? __fget_files+0x2a/0x420 [ 1764.427337][T11838] do_writev+0x15a/0x2e0 [ 1764.427371][T11838] ? __pfx_do_writev+0x10/0x10 [ 1764.427413][T11838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.427438][T11838] do_syscall_64+0x174/0x580 [ 1764.427470][T11838] ? trace_irq_disable+0x3b/0x140 [ 1764.427507][T11838] ? clear_bhb_loop+0x40/0x90 [ 1764.427534][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.427557][T11838] RIP: 0033:0x7f33e4d7de59 [ 1764.427578][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.427598][T11838] RSP: 002b:00007f33e2fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1764.427623][T11838] RAX: ffffffffffffffda RBX: 00007f33e5006090 RCX: 00007f33e4d7de59 [ 1764.427639][T11838] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000016 [ 1764.427654][T11838] RBP: 00007f33e2fb5090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.427669][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.427683][T11838] R13: 00007f33e5006128 R14: 00007f33e5006090 R15: 00007ffe6c5e87e8 [ 1764.427718][T11838] [ 1764.525570][T23753] usb usb3-port1: unable to enumerate USB device [ 1764.637124][ T1252] usb 5-1: USB disconnect, device number 56 [ 1765.332408][T11847] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1765.468763][ T1252] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1765.674384][ T1252] usb 3-1: Using ep0 maxpacket: 32 [ 1765.676473][ T1252] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1765.676500][ T1252] usb 3-1: config 0 has no interface number 0 [ 1765.676539][ T1252] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1765.715547][ T1252] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1765.715670][ T1252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.715690][ T1252] usb 3-1: Product: syz [ 1765.715703][ T1252] usb 3-1: Manufacturer: syz [ 1765.715715][ T1252] usb 3-1: SerialNumber: syz [ 1765.778377][ T1252] usb 3-1: config 0 descriptor?? [ 1765.838646][ T1252] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1765.838690][ T1252] em28xx 3-1:0.132: Video interface 132 found: [ 1766.233021][ T1252] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1766.744251][T11893] FAT-fs (nullb0): bogus number of reserved sectors [ 1766.744273][T11893] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1767.827295][ T1252] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1767.827334][ T1252] em28xx 3-1:0.132: board has no eeprom [ 1767.893800][ T1252] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1767.893828][ T1252] em28xx 3-1:0.132: analog set to bulk mode. [ 1767.895036][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 1768.022148][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1768.022504][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1768.022836][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1768.023187][ T9] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1768.370420][ T1252] usb 3-1: USB disconnect, device number 107 [ 1768.384360][ T1252] em28xx 3-1:0.132: Disconnecting em28xx [ 1768.630302][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1768.630330][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1768.630345][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 1768.633628][ T9] usb 3-1: Decoder not found [ 1768.633648][ T9] em28xx 3-1:0.132: failed to create media graph [ 1768.633688][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1768.639489][T11969] net_ratelimit: 1547 callbacks suppressed [ 1768.639518][T11969] netlink: set zone limit has 8 unknown bytes [ 1768.663904][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1768.663977][ T1252] em28xx 3-1:0.132: Closing input extension [ 1768.687983][ T1252] em28xx 3-1:0.132: Freeing device [ 1769.078951][T11898] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1769.110709][T11963] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1769.368285][T11992] FAULT_INJECTION: forcing a failure. [ 1769.368285][T11992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1769.368318][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.7.5643 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1769.368342][T11992] Tainted: [L]=SOFTLOCKUP [ 1769.368348][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1769.368359][T11992] Call Trace: [ 1769.368365][T11992] [ 1769.368373][T11992] dump_stack_lvl+0xe8/0x150 [ 1769.368410][T11992] should_fail_ex+0x467/0x600 [ 1769.368440][T11992] _copy_from_user+0x2d/0xb0 [ 1769.368459][T11992] ___sys_sendmsg+0x1c6/0x360 [ 1769.368488][T11992] ? __lock_acquire+0x683/0x2ce0 [ 1769.368508][T11992] ? __pfx____sys_sendmsg+0x10/0x10 [ 1769.368529][T11992] ? kstrtouint+0x6e/0xe0 [ 1769.368571][T11992] ? __fget_files+0x2a/0x420 [ 1769.368587][T11992] ? __fget_files+0x3a8/0x420 [ 1769.368610][T11992] __sys_sendmmsg+0x279/0x4d0 [ 1769.368636][T11992] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1769.368665][T11992] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1769.368705][T11992] ? ksys_write+0x248/0x270 [ 1769.368733][T11992] ? __pfx_ksys_write+0x10/0x10 [ 1769.368760][T11992] __x64_sys_sendmmsg+0xa0/0xc0 [ 1769.368778][T11992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.368802][T11992] do_syscall_64+0x174/0x580 [ 1769.368829][T11992] ? trace_irq_disable+0x3b/0x140 [ 1769.368855][T11992] ? clear_bhb_loop+0x40/0x90 [ 1769.368876][T11992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.368893][T11992] RIP: 0033:0x7f7ef9cdde59 [ 1769.368909][T11992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.368924][T11992] RSP: 002b:00007f7ef7f36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1769.368942][T11992] RAX: ffffffffffffffda RBX: 00007f7ef9f65fa0 RCX: 00007f7ef9cdde59 [ 1769.368955][T11992] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1769.368967][T11992] RBP: 00007f7ef7f36090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.368979][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1769.368989][T11992] R13: 00007f7ef9f66038 R14: 00007f7ef9f65fa0 R15: 00007ffefaba1e68 [ 1769.369015][T11992] [ 1769.666000][T11898] bond1 (unregistering): Released all slaves [ 1769.739525][T11989] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1770.145559][ T39] INFO: task kworker/u8:50:19678 blocked for more than 143 seconds. [ 1770.145590][ T39] Tainted: G L syzkaller #0 [ 1770.145603][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1770.145615][ T39] task:kworker/u8:50 state:D stack:21416 pid:19678 tgid:19678 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1770.145680][ T39] Workqueue: netns cleanup_net [ 1770.145719][ T39] Call Trace: [ 1770.145728][ T39] [ 1770.145743][ T39] __schedule+0x16dc/0x5500 [ 1770.145806][ T39] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1770.145843][ T39] ? rt_spin_lock+0x1e0/0x400 [ 1770.145874][ T39] ? __pfx___schedule+0x10/0x10 [ 1770.145916][ T39] ? schedule+0x90/0x2b0 [ 1770.145951][ T39] schedule+0x164/0x2b0 [ 1770.145986][ T39] rxrpc_destroy_all_calls+0x443/0x570 [ 1770.146156][ T39] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1770.146194][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 1770.146263][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1770.146297][ T39] ? __timer_delete_sync+0x538/0x600 [ 1770.146325][ T39] rxrpc_exit_net+0x6f/0xc0 [ 1770.146393][ T39] ops_undo_list+0x43d/0x8d0 [ 1770.146434][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 1770.146483][ T39] ? rt_spin_unlock+0x157/0x200 [ 1770.146513][ T39] ? idr_destroy+0x21b/0x2a0 [ 1770.146546][ T39] ? rt_spin_unlock+0x163/0x200 [ 1770.146580][ T39] cleanup_net+0x575/0x810 [ 1770.146616][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 1770.146656][ T39] ? rcu_is_watching+0x15/0xb0 [ 1770.146687][ T39] ? process_scheduled_works+0xa20/0x14e0 [ 1770.146716][ T39] process_scheduled_works+0xa8e/0x14e0 [ 1770.146776][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1770.146810][ T39] ? assign_work+0x3cf/0x5d0 [ 1770.146843][ T39] worker_thread+0xa47/0xfb0 [ 1770.146931][ T39] kthread+0x388/0x470 [ 1770.146966][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1770.146992][ T39] ? __pfx_kthread+0x10/0x10 [ 1770.147028][ T39] ret_from_fork+0x514/0xb70 [ 1770.147068][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1770.147102][ T39] ? __switch_to+0xc89/0x1420 [ 1770.147134][ T39] ? __pfx_kthread+0x10/0x10 [ 1770.147171][ T39] ret_from_fork_asm+0x1a/0x30 [ 1770.147213][ T39] [ 1770.147307][ T39] [ 1770.147307][ T39] Showing all locks held in the system: [ 1770.147324][ T39] 1 lock held by khungtaskd/39: [ 1770.147337][ T39] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1770.147457][ T39] 2 locks held by getty/5355: [ 1770.147471][ T39] #0: ffff888032b9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1770.147574][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1770.147657][ T39] 3 locks held by kworker/u8:50/19678: [ 1770.147670][ T39] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1770.147726][ T39] #1: ffffc90003e97c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1770.147780][ T39] #2: ffffffff8f5a2580 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1770.147845][ T39] 3 locks held by kworker/1:6/23753: [ 1770.147858][ T39] #0: ffff88813ff1a938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1770.147911][ T39] #1: ffffc90004e3fc40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1770.147966][ T39] #2: ffff888029d8a210 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 1770.148074][ T39] 2 locks held by syz.6.5632/11898: [ 1770.148088][ T39] #0: ffffffff8fafa038 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1770.148184][ T39] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1770.148245][ T39] 2 locks held by syz.4.5644/11990: [ 1770.148259][ T39] #0: ffffffff99e90a98 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x340/0xa40 [ 1770.148363][ T39] #1: ffffffff8f30cc60 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 1770.148479][ T39] 6 locks held by syz.3.5646/12008: [ 1770.148493][ T39] 1 lock held by syz.7.5647/12010: [ 1770.148506][ T39] #0: ffff88803f708430 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 1770.148589][ T39] 1 lock held by syz.7.5647/12012: [ 1770.148604][ T39] [ 1770.148610][ T39] ============================================= [ 1770.148610][ T39] [ 1770.148622][ T39] NMI backtrace for cpu 1 [ 1770.148641][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1770.148671][ T39] Tainted: [L]=SOFTLOCKUP [ 1770.148678][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1770.148692][ T39] Call Trace: [ 1770.148701][ T39] [ 1770.148711][ T39] dump_stack_lvl+0xe8/0x150 [ 1770.148747][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1770.148777][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1770.148870][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1770.148903][ T39] sys_info+0x135/0x170 [ 1770.148929][ T39] watchdog+0xfd7/0x1030 [ 1770.148972][ T39] ? watchdog+0x1c7/0x1030 [ 1770.149015][ T39] kthread+0x388/0x470 [ 1770.149049][ T39] ? __pfx_watchdog+0x10/0x10 [ 1770.149081][ T39] ? __pfx_kthread+0x10/0x10 [ 1770.149116][ T39] ret_from_fork+0x514/0xb70 [ 1770.149153][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1770.149188][ T39] ? __switch_to+0xc89/0x1420 [ 1770.149222][ T39] ? __pfx_kthread+0x10/0x10 [ 1770.149257][ T39] ret_from_fork_asm+0x1a/0x30 [ 1770.149298][ T39] [ 1770.149308][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1770.149343][ C0] NMI backtrace for cpu 0 [ 1770.149369][ C0] CPU: 0 UID: 0 PID: 12008 Comm: syz.3.5646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1770.149397][ C0] Tainted: [L]=SOFTLOCKUP [ 1770.149404][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1770.149416][ C0] RIP: 0010:rcu_is_watching+0x8/0xb0 [ 1770.149443][ C0] Code: 1c 55 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <53> 65 ff 05 50 69 f3 10 e8 3b 2b 98 09 89 c3 83 f8 08 73 65 49 bf [ 1770.149460][ C0] RSP: 0018:ffffc90003c068f0 EFLAGS: 00000202 [ 1770.149477][ C0] RAX: 0000000000000001 RBX: ffffc90003c06a18 RCX: ffff88803423be00 [ 1770.149492][ C0] RDX: ffffc90003c06a01 RSI: dffffc0000000000 RDI: ffffc90003c06a10 [ 1770.149506][ C0] RBP: 1ffffffff207c901 R08: ffffc90003c06a90 R09: 0000000000000000 [ 1770.149520][ C0] R10: ffffc90003c06a58 R11: fffff52000780d4d R12: ffffc90003c00000 [ 1770.149535][ C0] R13: ffffffff8176e25f R14: ffffc90003c06a08 R15: ffffc90003c06aa0 [ 1770.149550][ C0] FS: 00007f4b548d66c0(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 1770.149566][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1770.149579][ C0] CR2: 00007f39c5be7dac CR3: 000000005ec14000 CR4: 00000000003526f0 [ 1770.149597][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1770.149609][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1770.149622][ C0] Call Trace: [ 1770.149629][ C0] [ 1770.149637][ C0] unwind_next_frame+0x1b66/0x2550 [ 1770.149661][ C0] ? arch_stack_walk+0xe3/0x150 [ 1770.149680][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1770.149702][ C0] __unwind_start+0x514/0x660 [ 1770.149724][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1770.149754][ C0] arch_stack_walk+0xe3/0x150 [ 1770.149775][ C0] ? stack_trace_save+0xa9/0x100 [ 1770.149806][ C0] stack_trace_save+0xa9/0x100 [ 1770.149835][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1770.149861][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1770.149900][ C0] ? __lock_acquire+0x683/0x2ce0 [ 1770.149920][ C0] kasan_save_track+0x3e/0x80 [ 1770.149969][ C0] ? udp_rcv+0x40e/0x1db0 [ 1770.149997][ C0] kasan_save_free_info+0x40/0x50 [ 1770.150021][ C0] __kasan_slab_free+0x5c/0x80 [ 1770.150040][ C0] kmem_cache_free+0x187/0x6c0 [ 1770.150060][ C0] ? udp_rcv+0x40e/0x1db0 [ 1770.150089][ C0] udp_rcv+0x40e/0x1db0 [ 1770.150124][ C0] ? __pfx_udp_rcv+0x10/0x10 [ 1770.150155][ C0] ? __pfx_udp_rcv+0x10/0x10 [ 1770.150182][ C0] ip_protocol_deliver_rcu+0x27e/0x440 [ 1770.150202][ C0] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 1770.150222][ C0] ip_local_deliver_finish+0x3bb/0x6f0 [ 1770.150244][ C0] NF_HOOK+0x336/0x3c0 [ 1770.150263][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1770.150284][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1770.150301][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1770.150320][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1770.150341][ C0] ? ip_local_deliver+0x113/0x190 [ 1770.150360][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1770.150377][ C0] ip_sublist_rcv_finish+0x1f0/0x240 [ 1770.150402][ C0] ip_sublist_rcv+0x767/0xa70 [ 1770.150428][ C0] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 1770.150450][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1770.150469][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1770.150492][ C0] ip_list_rcv+0x3ec/0x440 [ 1770.150515][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 1770.150533][ C0] ? __pfx___schedule+0x10/0x10 [ 1770.150560][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1770.150577][ C0] ? kmem_cache_alloc_bulk_noprof+0x48d/0x780 [ 1770.150598][ C0] ? __pfx_ip_list_rcv+0x10/0x10 [ 1770.150618][ C0] __netif_receive_skb_list_core+0x804/0x830 [ 1770.150730][ C0] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1770.150762][ C0] netif_receive_skb_list_internal+0x995/0xcf0 [ 1770.150811][ C0] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 1770.150835][ C0] ? eth_type_trans+0x352/0x800 [ 1770.150870][ C0] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1770.150904][ C0] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 1770.150976][ C0] netif_receive_skb_list+0x67/0x480 [ 1770.150998][ C0] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 1770.151021][ C0] bpf_test_run_xdp_live+0x1875/0x1c20 [ 1770.151047][ C0] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 1770.151073][ C0] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1770.151121][ C0] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1770.151169][ C0] ? _copy_from_user+0x94/0xb0 [ 1770.151190][ C0] ? bpf_test_init+0x113/0x150 [ 1770.151207][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1770.151227][ C0] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1770.151274][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1770.151297][ C0] ? __fget_files+0x2a/0x420 [ 1770.151318][ C0] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1770.151338][ C0] bpf_prog_test_run+0x2cb/0x340 [ 1770.151360][ C0] __sys_bpf+0xa22/0xd90 [ 1770.151382][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 1770.151404][ C0] ? do_futex+0x3e7/0x4e0 [ 1770.151445][ C0] ? rcu_is_watching+0x15/0xb0 [ 1770.151471][ C0] __x64_sys_bpf+0xba/0xd0 [ 1770.151499][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.151519][ C0] do_syscall_64+0x174/0x580 [ 1770.151548][ C0] ? trace_irq_disable+0x3b/0x140 [ 1770.151577][ C0] ? clear_bhb_loop+0x40/0x90 [ 1770.151600][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1770.151618][ C0] RIP: 0033:0x7f4b5667de59 [ 1770.151634][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1770.151650][ C0] RSP: 002b:00007f4b548d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1770.151669][ C0] RAX: ffffffffffffffda RBX: 00007f4b56905fa0 RCX: 00007f4b5667de59 [ 1770.151683][ C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1770.151696][ C0] RBP: 00007f4b56713e6f R08: 0000000000000000 R09: 0000000000000000 [ 1770.151708][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1770.151719][ C0] R13: 00007f4b56906038 R14: 00007f4b56905fa0 R15: 00007ffc281cdae8 [ 1770.151744][ C0] [ 1770.162474][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1770.162558][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1770.162665][ T39] Tainted: [L]=SOFTLOCKUP [ 1770.162688][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1770.162731][ T39] Call Trace: [ 1770.162754][ T39] [ 1770.162780][ T39] vpanic+0x56c/0xa60 [ 1770.162867][ T39] ? __pfx___schedule+0x10/0x10 [ 1770.162963][ T39] ? __pfx_vpanic+0x10/0x10 [ 1770.163047][ T39] panic+0xc5/0xd0 [ 1770.163112][ T39] ? __pfx_panic+0x10/0x10 [ 1770.163166][ T39] ? preempt_schedule_common+0x82/0xd0 [ 1770.163247][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1770.163279][ T39] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1770.163312][ T39] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1770.163345][ T39] watchdog+0x1030/0x1030 [ 1770.163399][ T39] ? watchdog+0x1c7/0x1030 [ 1770.163458][ T39] kthread+0x388/0x470 [ 1770.163533][ T39] ? __pfx_watchdog+0x10/0x10 [ 1770.163563][ T39] ? __pfx_kthread+0x10/0x10 [ 1770.163595][ T39] ret_from_fork+0x514/0xb70 [ 1770.163630][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1770.163664][ T39] ? __switch_to+0xc89/0x1420 [ 1770.163693][ T39] ? __pfx_kthread+0x10/0x10 [ 1770.163725][ T39] ret_from_fork_asm+0x1a/0x30 [ 1770.163762][ T39] [ 1770.164472][ T39] Kernel Offset: disabled