last executing test programs: 2m46.426278281s ago: executing program 4 (id=3727): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fcntl$getown(r2, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r3, 0x12) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 2m45.844420442s ago: executing program 4 (id=3728): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) lsetxattr$security_ima(0x0, &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x5}, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x1}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)}, {&(0x7f0000000340)="6c0d97ed15ebe0741cb9aee45bd179fad4ee5b61239bedfb2a207de51fc892579171863c57a5", 0x26}, {&(0x7f00000006c0)="2a770509e5683cab3fa7cd8551779eba352eb482e2e19fadfbc1ca07081978299176cfcc3272d6d35f5880e538f939ee868b733085f8b9bc5162e95162a363f45719f032e7d9b479856a312e84877af46511ca6979243c5cba075fe1ec73e96b0fe6158f04a70f951c1a63f0ae62ccd8e3c2efa3a4d354475f145ba4f07123f39eb110ab92cd538cca8630603b84a3b6ec4d6f4aa1adb8da28ed8a7e8f0891a40a7989b36da4ce626292484680bd0077", 0xb0}, {&(0x7f0000000780)="fae67deb7cffbbddfa8019d4d4fec0cfbbf5b8272562b9ae4e27a1560a696080fcd3d2b223058d28ed56deaf06319d7cf11dc886a1ce9ca67beeb851ea9ad2ad2b43c92f2aafe407102da8f9f4c5dcb57d7ab723bd5b7a5dcec3131b8054482a45f684c316399fc87b1d3c3fca4a44fa3c11052466c59bc4e0378fa0920b1f1ff24d1d5b937441e3781ade126b0ab91859b5efaeb3707d69daa92df3d51023403c0f928da04900b3c5d8704c6eb32335391d41b81f5ddad760a7251e8cc0b9cb9ef251900013a315afeedf634caabc3f83ad234b7177c89349bfc6e3a19999535857c010", 0xe4}], 0x4}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2m44.247479058s ago: executing program 4 (id=3732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b00000002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x318, 0x400001, 0x14}, 0x9c) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x200, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4091, 0xffb, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004004}, 0x40080) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x5) sendmmsg(r0, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)="95d5bb7a2f2526d075805cf27b58d77d1d706f221a13b23c5e7595802bd082ffdd2d92eadddf84e39374ff8222874ff81a44ebb53f54b4c953cf1122801530847b56662191416b9b19ffe298766117e503a43860001bf49b7e7d717173b3731a6ee2c83e73f79625f7f29524e3352cae391d40cf9b65b2e06d3ef7f34c49b58265cfccd9e7438e001161830dea62191fb6ce33e14a559ed7f916465665328ac8d645384ea35ced2f882bcfa1956d111a40ea06068d403b988316b71b29d6fa", 0xbf}, {&(0x7f0000000580)="717ea549561ffcea262244a65ee8aba2550e0c27fb61f129fef5f97e24bdc234447eb33ef6c4bfbca544c89a13e35e210d25f62e5e3f08d80bd4b60d9456d2574e12f34b69c7c5de90b1875c1d96d063d440f8ae59f4f15a39dec2b55fb63fd72467b3f43774cc6e14835a29e9d0a39e025dbb", 0x73}, {&(0x7f0000000600)="45938ff588de0ca6c9fefa5e4c51ab1a1ee85d5cb07a53a6d460a2225f12408392c3dd79c21b47db22cff8515acb374a476cfb936ab36c34462aca7af6309a203428bf013777fdd71887fafb7af79f965c9c4155875e4dc25fc719bed88bd613606eb914da0b0c67a1f3a7255a8442b4eea8d01740a4447d63a1014d586bf897289dfccf9c3190d51554bde401b819db4eaee34f8636fc4b406922bf29cfd986abe9ec50b263de9d974d6b606350fe5870ea713869e6c69704af58c6d2f7d2d8d71e45c930", 0xc5}, {&(0x7f0000000700)="8f340b852b1167d57c3193f5ee41103fa8e9a0d36ad307033028f766b239892a25a4f53c261f5e42b2d9e4028bdcdbf31e220805818c1626ac61984c5eac77fbafbc95b14f7b7103397ffc4711b60685f1efc2e9f00a1866a4e1e614b0d839e87c8fdbd14885e3b504efb658d29998654c92f113650d0896c0dded2763ecb34a61d914a75a7a132d9433abe188876f171c043d394f2fc1f3656dbfc16bb7e3c919c6e9aa004327f01243072f75f2", 0xae}, {&(0x7f0000000240)="d954a7404f1fc132601a44cb", 0xc}, {0x0}, {&(0x7f0000000880)="7ad4103dcd790e314fd73c70f9a5089c82d504d56147504dbd57e86336d0223a4059c1242933c0952d381616628a8bfb49e0dcc3ca6f3bbe5db72abbe948bd40c7bab4efbdc94bbcce14df042aae73789a672e2ef385f737e805dd2ba7d6a4df0fc51849bff95701a1f852ed519e50ea49f4235a9b298ee5fe182934ca1a95d9cb305aa143d2e3c033248713ef8a39f8b7179f3fce817bb072123edd8a56661c57", 0xa1}, {0x0}, {0x0}], 0x9, &(0x7f0000000a80)=[{0xd0, 0x132, 0x7, "8338dc1652617af03adde938c347469d4d802973b3165028f4281bd66ab6201f0a28430e9d478337ac6f3b43f464e5b6c27c146c893c5c02063c9b45a7faf894ae418cf6f2dde42caef43f5955ea246dfa45767b321fc32f369d21bff4c8496d137d14864b943e7ad8be6b3aeac71a1f28d8005395a361eec1c2d77a4875a7d946058d31cea0f6cba96b488f63e4211aa6d11890bc7c0e5b441b555771ab8149def2d30251b80da4f9c32a4781c719bdfd8f27a1cd12ddae62"}, {0xd0, 0x114, 0xd3a, "cade7361d0b8c5d4d03ffddbba30da59bae977b98399363a63d33e1e52cf45f70ce00db9e07a25ed91098f87afc5efe9665b3f3c001b0fab2a4faa4fdfdb4ae4e12ecde5b15bcb24801a83b3ee92197a59eaa77bb5552d72e423da4b7b4d33da7154d0b40352178ec5b9b645c009754833706bfa2b072c520897d02ac2302d7b404a595279a956ca2fc6106142f018732e4fdd7dd2c108ef884cd09b01baf282f5a581dcfe0831849d662af509f434060e1abf2d72c0e0f7a0f65f2b8e"}], 0x1a0}}, {{&(0x7f0000000c40)=@generic={0x29, "b880f32a17d80cd34875060877e457c1b2bc5e8ba077202d3e511330a562a6a52f0269ad15c2f53c9111cfc822f7ebddae002fd46019b29c17f2ba722c5357c53e29d9d3c85b9c0b25777ece312a1c7593e8b044288a2ea875c0e8176b3f7bd01e3f40ffe5f4f7af54bc2429cdb3387cc6e6e3f7e12600b038de8ab6db65"}, 0x80, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=[{0xd8, 0x11, 0x4, "09d929ca32f151a4bd0e2c3496ef64af5b96db0c54c70bf0b6cf149795cc18fff43dd853ee2d53960b5f15d6a52908ae90ef544d604287b76dcd72b108f998cd6e8140bcf53a2ff97de585fbcb02a9661268e028bb1533f5c724d7c18cc1d8e040f1e3ffc558438dd21f0b0548596ec029a8842a8af96cc2fe4ceeaafec2b9c8bc3f10529d836f6d164b8d412dd174f127e052aba972a9354be43b969a9406d66e3dfde48f2f38d8c0a7a9dadac95d6fd10bec8f4e3411cfc13a1cd04571f9ca6a"}, {0xb8, 0x10f, 0x4, "c32bb0ccbaacebc2afe208f9bfad1b8b6f616031323c699783d4d3ffaa43ca26480ccc39ade178c32976fef526240649090bfabaa181331a56621228b5a0ffeb5f598e51d71e648c171919e77fb4e3350f98f28752521ec78966190386b561a1ebad7e687f5d88e8a287d230a17c94f995825884e7d403426907b0676173993c4ba2bcd6f3837c540ebd81567d3ea2d7ce03509fe3ab19f535c1f3e9b128cd2df73b281d11b9"}, {0xc10, 0x193, 0xea3, "1b489b40b5d2bb1333b5975298f4ba1059e311c347d46459cd00351dbb964e1ca9575390167e8cf64f50c700aa052537f3d02183e6e0b430175fdb83e05db045b446aba1619ecdb046a816ab4fc8d5db96f54e1f45b313142d8af4c89b1aa537ad661538396afe9b1cc14731a1e9d1e853bd367be2109ef3d9a232ac888862b0fb07d4ca2720476003419646b04031bc4236e551922a4338fe0d0aa2bbc0718b3a75d04c42307a9952c43df959cff16ce3e82cafa4998dab444a938e9e18e835b0c319ea739a46d7df7c63385651ffc33ac1733304b04475de2120c7335fec57d963b548fc9679ccf8101a5d0e3abbce60f097519f8377edd0fdd10bb551bc2df525622a0dee6d98d90b8f21dad8d87dea8909c5e939fd450ca078959f869eb8d213abce03572602dd3c6e4b6849d87cee1d487b70692a3668f88512e5e59bc0ccf9a78fc1e3c543604f379c2a8a378b0e12b57cad4e2d1ce55877d8e66b981b4c90bfb997603a3061a72d09d2feba4ade2e49295bbcf70e0fe98472e26ea37dd3156d1884dbd04c0e6512930db9bb9e1a938ba89d26ca8a2a2a8aa312eaee133506605b508750683f4817159c7662f2bf55cb335e6be61a993d249787aaa610d0700045c98c18428e79592c81266b3a54774d7f047620fc38816811b6bfd15c4c2364fa063552c109d8b6a21fb846c05b1bcdbdf863f7ec65355cbd1ae42d3f4ab5fe55d2f601b590a7ccd55c55356747eb5a241df69f96650602cb4af7e991428d9e65bbfed697ae660664d0ed6669a0ac8d008ad9160723bd65220b6ca81fad2c55ebcaa223f412ad89ff0d861ae842b614b2fd95648d46af0a046f601b53d3aa526a4f686161d17caa10cca07bf1fe5e53078dfcb9073096c5e9a0211b64a132be5fa7e8b2465ed6e92e7808a6974ef49953f9380ce7abeae8f3f1befe70e4c535ed476bd7113340d6d96be8c584088326a50f639c7ef23311b33042ae0f59d58e049e5d0603dce16fc6805992facd07ece256687ff2e5c026e1b5e3d66642284274a04cd6243dcfc71951e87c14933175f7254a6d51ce147a7263904381362c680fee73fd4ab0a32eb58c0b5011277765a3ee60a145ff24366aed448ae52b60d5cdbf64ce7f12c93e591d49bb2453b6c1a3160074b4b9cf2e3ac3bd4540cd55f4899704a50e183d1a735cc73a090f457df46f4190f4f1e4b83f51c9b30f0da5e021a06b2d3d98d6d1e4dc48dd06dddc6f3ca44cae6e0149124a976a594e04a92c565eb3ff96449fe12e33799d0982eaae2ec9d11e1a3ee3e9ce1414c87391f5845b36be7c6d37e386137d28490d829a42e23b7487bc69aa18bd4403031215c83dbe064994fd26203ce3b1eb8c8d3da2feeac1956b15ec6053513424d7660f3b2070be27b48e57f854349b7082f0facdd1df9b6ad6014fc872da0340fbb11bf38dc57f75b2ac9ae52a17e8c68303d7015fc67bd58d9687d53ab660331c218127bd2e2f07a230bf5950b790587fde5d78e0da44e06106007bdaf519efa60748b7b1c8d869c17d8d70724ef30a7da05b9a13eded8ef00b4474fa34578a0785be0d9a50eb70f7209cbeb915958731fafa68cafe18400192449ba21bdcc6d920947c422b3a7be45dd507aee337fdd4f9fa92aab73074bb2254a9c1ed9adb984b35d7d679d0edc631c8c8e3f7552efc0a29a6a781f09b4bc21c41e7f673997c1db8d505924b9dd6593914bbe55dc0f5027168cfcbbabf51c593eb09dd04cc4f2ec0fb02a5d273dbc9ecd68fcc59dabc255ba98e19a9cb0e60783feb45f29ae067b62fba184b737b094225a1dec2c8c5043541999c291bf4a4dfab995a5996d5ddd86606fe2381d96977f79bbb0ff32dea286d0a1396aff988f1e63a059b67bfc2079fed80261a049fd6c7942cdd95043938beafd61246ba8f9207e2d5de368cb4ccc3aa0160ead8a1ae722a8740a89c2ffc23b189b18db6f745d228a759206d5c5bd0358963e6bf145b82f5bf6597eb2dd7551f582bae2f9e2c044272a07d3da14fef1b41bbd683d3606e1c1eb5d4e4a790b3cc45ba61e1b715800835c1093e0ab009c848ec1dd8e498ed26c43e519f59f92711aadff90bd7a24b5e524fb70ff9ab9dbf2e7fba56956474193c56a2d5d1186e2acc77f18e1aadd6a5a4e0214e4d1adf04c5d825384543fe53696e3ba76301f911f68cd230e5b45ae2e6e1c6dbdacd72ff9fe6be181ac41c8f4b45e6241380d650c7938e97c5cacb49cfe0e7593c2548dec93a4b3d5180461ad6761e58b990d87f88ebfd1b546749a1976cd9461f2dc5842e4cc5f25475bc1ecb9b623a64b52c8a25d6ee816076e9288aba5dca1d56ba52e19054bd7650958ab9ffd9ffcbd53caa7a69c4edbf8f36780eaf0b9f34e4881ef8c2ec2cbc0e9e52357d1e1d993c62dc08d0ace1c7485aa374a9bc59a3b52b04b7b6b2827d76ce959dbdf20439727b08e088eeb01c803a09038b177133d53b534b25c456e1df512f964f23b00a8b5555f0a33adcaa3f2662b318eeed0ba9eee7fbb93d2256e391cefad3dc2c77f4c260f46024e755872bf4c602eb586038078b5c93632b69f96f4040a7d6c84c439d3eba5f3783ac06cef994179514e40f837c233b6f58849c5997a3aa9c0cb4e5b362879449abb5916b8c0c7057850fe84bf0cafc67065d7a0927646032de7b60c662ae4a406ad2000e167862713f12cabc2aada7af58f85811a5387de747f28b61cee9908adcaf5d8b9b2621bf9b066bc2bcd1946e63c387246256a3b345d8f2945e313e7c7cbec4f174306c09d2e95de6643cf3a94d903a72e2e41d45eb56c666b4b5456da9c7509e75efbd2a4f5f09a8046bc647020c9f75fa6e9b76454989f5947ffa556283e521c3cf138dc500f9a79711c6270e3c195b441787fc967ebe7534a25c9af537d7ebc78f0311e7dd81bc0a4d1238098043aeef3217a144528849b16b569f3aceb557c18ff8b6d074ea03ccbd74b6cde7211f0b4f36ed672d52394ff414c989065b42fe77c5f9ea2793ea783aadcd8fefb3e4d4fa4818ba8708fa417d9d2c4cbbb85cef092b3b0cacee6066486c635b2fee8f5a5c5f8684bfe91b84bd3b3f7522c4a1e1851fd7246d3b692b0934cddb5cf57762124479782bdeeb4ba8ceb0c3ca0d29bccf2fead3729d76c2abf631d1f27be3bc1093a66e8816e70c3b2b740ac47963fd9c42e76342111947450903e3fa5dda5875c9bcf5249bb4226e2fb40692421883a97a3aaa2ad1a8ed576c27117021375640ed30270262d5af67bda8ef5697bdd0eed4e1a04ba9c32deb54de186b066d888481074a5958899c923bc25589ba4cb17a4a89d51a8edb95d62fad81191fe4ed11b3a9c05cca3ff36ff851610c0e83d2233e24f9101c3a34083237206d98293cd154f270dee9f4ded85f9422171aa8aad7e6a078f28e9457d5e0c895462bf99d97e0f3874f492c1ac680ef0f61fde82471f1746a9343663ebf2c94c4127c5c458c212c8b0a209df1bf52e0836cc88184d269ca886176cfb5480fd50e3dd3348d1c010e66343900240deb6103d201925c1e81d2b939444094b4eb836d62d61e9c7a8489daeea4df02d8cfe5b24186f9007a3564c361e75885b7dd93788db6a56e275dbf129dbe30d92bd3e8e6d6619668c34ac01a84e8c612a3100b3829c979a2ee33c03866b25e787358fea6680a7b5c46afd16753015df563da3ecef5feb4bb4cf18fd25f0f235a902b9130663ae3b3019f79a9ba036150ba97068d7a68539b5a20d4a2b88650dd91a2286ef7585fb840e23bcff19af442f011681465c609dbc1782af3003b40ffad751a964b9ded88954eb067715316ea8f7c4dd7308009385b5f59a1bdcd925a5389b69b1f547bd30a850c531ff499d89e8de2cf37509d7cccea2352915cb84c53745c91c79ac33db8580dba5494a04891704690f2625beebba50692a254c8fed0f360a63104b8a3bb51a9f61558cfe837a5ab42a7b8e80b45f3ae90a14c33005468a05d85b672749e123032b01481dbd05da5db61b91ea6fb69b848306cf5013d171ad0b28dc616e4d697024a7ff9a382763cf8034263f12602a5f5030824cb2517e0d1110d825e35879cb9a307fc7ac6b73d02529e9123a131c67b0b8fb3c90e62865d25383841703cc0204b7bb43b3270ba937464e0e43a482d94287b37877db366f1cfb27784254a4e4481dbd1172e5af633b62f8bff3c3e0f0c31b14685e2e0dd59e5b4532d767f5869bdf8029a8d8aa9233349914c28fcf6ea3d13d3723833affae9dffa74626d6216e125b48e2d1b09a2bcc0375b1dace05d0481af66c8817fa88eda86cde02f0f99"}, {0x58, 0x3a, 0x5a, "4a7f664aca6a095d1e8cb0f57fd848ff04e49c77a6729dfcd62554ebc0ec16ab6ce8dcad36175c617c22a92bf174162140f12238e7a3013aefd861de3d5f4674e5100dfd"}], 0xdf8}}, {{&(0x7f0000003180)=@l2tp6={0xa, 0x0, 0x9, @empty, 0x400, 0x1}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003200)="8bb4be041d892706071548e2935cabcba3b9a1608498a32431aa816b4ee1122d6e30c8837e1d50c92eef838a3f037aa5f5cfc33e8e7232821b76ea3efa518fdc113a049a4ef311b59c053bf469a6a79ab492ad6977396bf8c1f8ce90ebbe93cc19318e0ded995748b5b5173f8ff9319ccbfdc2b231e77dd907976dac27419c15c50ddd53281f67ba28e6cca1aa45660cd6f76cc7761df35979799da669f7893c57cd8efd0a07a627d52eff0b4d2bc84a229e84298e7ee2c5b94c0e35d795111f702d4aeb7831f1131f", 0xc9}, {&(0x7f0000002140)}, {&(0x7f0000003300)="e25480cbb0d87819de0d2a704b2c8d431fa81ac186a499903b73110b8037a9dd2382e53c962d795a4787bea0265035fd2095e4cb9b060332700c2b1a8ada0a30e45df72d94d15b4e39238239ce3ac4a3e7f483b53fc43a5f43d08abfcf54972107db658d40341adbabe8db978651dc09abf95b74f92556b88fdc02d9229f303bf3ab79b46eb5b79d2d", 0x89}, {&(0x7f00000033c0)="c6581496c892f9b4ce920eeaeea80e38f30e28f21b71ee3fcd21124281f906f2089fcb54d4a7956680219096fb434ad2e842ff4e06ebbb075fc5841b6c5d7828b0f6161afa78be0a1da5e4464b94eaab305ce3ccbc77f074580bf3a4415d553f63a8bff147b14e9858a54545413f6ddd879936876f996c763e52d7c078d7118cf291b8bf544d5edde93d896d99b6552a752fc904e992461798acf984502889bc78681357143bde46b9b8d7a54cbc9edfe0", 0xb1}], 0x4, &(0x7f00000034c0)=[{0xe0, 0x104, 0x0, "53a0ff9be808951e148923117a6c8b144bc6a08ae4e9419433d063cc98562a135b3e7ed37220490ee37bd623c87687768c9438e7d674accf2a06f6647337cbbd4b33a1a61d4d8bbcda6937f8f5bb17d26cc77504e786c84aad6f9f0d8c6079cab9493d8d5d1b03d10df47ac18ab9e91bad999f721704bfcd698d35110d4f29c85c7c61f63098a54fa0711f9e547d4c082876eb6328fe97d37f5678cacc25e2615af8888485033477a0d741f9b6380a4e344cab2a1fdde4a02bc836ff0e3dce7d963b6b84a43e2d966e9b75499f0289"}, {0xf8, 0x119, 0xa, "1f141e7fb827837561a8faf5fdb29aa8949851c43cfbaa167a16ea1e817d39fba30fecf32d2017385e211572aa9fb37492aa9044b87765f27425cb5c16eac5629c2b5879b68596f32dcd04915b56ba74fd5cd3ca3b1edb7527b195a32f4a79a84f7e10fe4517b2e46ee4f60a919bc50cfa96e444f6d8d60eacd601ab83e96f3a93472fdf9a0c3b023aa7ce7b4cffec34d96cd030048a899dd4af64f6695f4e28949d36a2c5b334ea7b7bc2fe1b4262b28bc99d2c2ca17f1b913123441f030e27d73c81f445baeecffff9f09090884ee886b5bbcef1994d06b076a17422b66df9543b3731"}], 0x1d8}}], 0x3, 0x40010) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7) 2m42.405277439s ago: executing program 4 (id=3739): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) mount$afs(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000200), 0x4080, &(0x7f0000000340)={[{@dyn}, {@flock_openafs}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x480c0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r4, &(0x7f00000024c0)=""/209, 0xfd36, 0x698) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) 2m41.451289736s ago: executing program 4 (id=3743): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x648) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000c, 0x204031, 0xffffffffffffffff, 0xffffd000) write$P9_RVERSION(r3, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) (fail_nth: 2) sendfile(r3, r3, 0x0, 0x7a680000) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r6 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendfile(r4, r5, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) 2m40.546388754s ago: executing program 4 (id=3745): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f00000002c0)=""/212, 0xd4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) bind$packet(r2, &(0x7f0000000380)={0x11, 0x0, r3}, 0x14) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x81, 0x5, 0x1, 'queue1\x00', 0xfffffffe}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) 2m25.376075063s ago: executing program 32 (id=3745): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f00000002c0)=""/212, 0xd4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) bind$packet(r2, &(0x7f0000000380)={0x11, 0x0, r3}, 0x14) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x81, 0x5, 0x1, 'queue1\x00', 0xfffffffe}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) 12.141112674s ago: executing program 2 (id=4160): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x31, 0x1, 0x1, "d569e861dd2f1aeb7ee8589325f457a0c04b14100000000096ba216b1e8ac19e", 0x32344d59}) 11.893682751s ago: executing program 2 (id=4162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000240)=""/142, 0x8e}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000400)=""/5, 0x10}], 0xfffffffffffff0c, &(0x7f0000000540)=""/13, 0xd}, 0x20000006}], 0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8c00) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x6797, 0x80, 0x2, 0x2a9}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x0, 0x2007, @fd_index=0x7, 0x800, 0x0, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, 0x0, 0x0) 10.666099949s ago: executing program 2 (id=4167): syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae5"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x4, 0x40, 0x80, [{{0x9, 0x4, 0x0, 0xa6, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x8, 0x24, 0x6, 0x0, 0x0, "36f265"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0xff80, 0xe}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0x31}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x4e}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x0, 0x81, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x18, 0x5, 0x81, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xfffc, 0x6, 0x5, 0x0, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x5, 0xfff9, 0x52, 0x38, 0x6, 0x2}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xf7, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0xfbcb2819a7bff72a, 0xdf, 0x1, 0x0, 0x40, 0x8}, 0x1b, &(0x7f0000000100)={0x5, 0xf, 0x1b, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x2, 0x11, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xfd, 0x82, 0x8}]}, 0x8, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x426}}, {0xce, &(0x7f0000000180)=@string={0xce, 0x3, "d168368c11ef06d3fba6dcf1b95549df2593914fda7562d0448df921dfcf3a81f0b6bca4ffad642bf69c636890db63d1f25a76536aff1b1ad40b9e0e7005d8eff7d30abb9545e8b24bd4d64ad32fb6911118aadcbb002f55b779940b7c361dfe3b9c549ce9fb52f0505b636fab789a0c044b5fc7132233329940c9036e16c79c0381bb92a768f3826933b975305a47481730332cbb9ee81dd613790bdf65e68dd4fbcfa7fd16431060f0593e69c8723aae51503c58734e57a87f910c2e06e03ab446a863670878581e82154b"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1c0a}}, {0xb0, &(0x7f0000000340)=@string={0xb0, 0x3, "0a2adc364d4d6a342e2fc4deb40023ca7ba93d522bcb30a587f8742d5eacb2f37bf2d48527a029ea79a7d491a72c00fa8d2713c4af857cd03fc051b55ec1c13fc8413f16f889627982f0c1cfdee77d2fd69fbb24278b4210230778d06eb6cd4d62cd36dbe25a1e501ccb2f1b4ed87dce48114a2621414597de5f06752b935758db3b5980684a603543e9994f320a65171017f519fb36da913a74669c471a8887d6daed892c15fe6a64063f01f0ce"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44c}}]}) 9.600800615s ago: executing program 3 (id=4172): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r4, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 8.622024237s ago: executing program 3 (id=4176): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) (async) eventfd2(0x2, 0xc0000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ff7000/0x1000)=nil) 8.175746474s ago: executing program 3 (id=4177): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x11, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/235, 0xeb}, {0x0}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r4, 0xcf032000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r5}, 0x18) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)="cda9cd612c628e41cb074edba74d7b02661cd5fc0dfe7016e05c81791eea501c8fbc3a5fa0fdeed73b41201902718adaa14b325041c29f17cad6370f271a15d5d1c4cf29e5206ab9c3948058bbb2f6b1290859c01187e04152a0f78c23c04e20ddae24346dce362b397cceeba7e683441b16efa00d0abd732b9c5222f51cbb8bf832a243674b01bbc0a3c529636c26e1b276f97c5bffb0aee05d065214828d65a246bc840e4dc8ce42506d68a159ca77ba", 0xb1}, {&(0x7f00000007c0)="ec5669cad508f05d63e9d674e60a5236e8662edc359862a421cd10b546b47627c43f18500b51dd76f86bef961fc5ce311a626b406ad186ef1c8a07e2e300ceb645996d055496e1d5684d846769deda5752faeda43c95a0bfe9b421acafe7221882558e41938eb14ff5452991e888653e0e0a24249f856227f1b562141afe0adfa5e5a2c099bb5da1900109b4f6fd51cd9d2a5c56250d4499a39d6c35ef2d9bfcaf61b4eb17e6cafae49b74038edac112b4eb6ba66b5962e0a16351c086a66cab4820f2853d094624582df35daa82ad5354a15c97d03533bd41f88ffb61a5", 0xde}, {&(0x7f00000008c0)="52ea76e328fa8613f4476309f4bd043479100ef013a6cf70fb4ec54200860dc62152e032e7c7946dfd137fff7b0faf676ce12f7be64d0d59a9c9e79188adcdb7498f3e77903f64adf442227d58fba7f5be891f7816bc0e8d674d01b30041480b3a207ecaa1a8e7aceaf158836ec8859afb7206d961e55db7dd7020142fa5e116d88c36f5d652cae45d4111fa1413", 0x8e}, {&(0x7f0000000ac0)="3228c682d20c236d6538dc53d93dca28363d3928c37777e770ff36dfcf444a73f7c1ab629e076f531627d55db4e79ec20143cb0b01a5260e4f39debd8ec75f3da37ff366c272485f9edb1f64d7ce1125024b02edd380cbf280e07cc1050ca837f72ec65e234895e20894a8dcd3ef16f3b9276d08445ad756ce60c030cfe52bf90bae0b6480b63909a6716b63b4cf8c14bb62afe89fc98fbf1c2b736635f4dcfc4d8b5c01d36e7af0422f96ee1c1dba24e00dcbce09422a1534c11933cb1419b9044fe23dbaa3d0d3d6f49876d557a7a56d697c7e69d0901bcdef476f844f96", 0xdf}, {&(0x7f0000000440)="cf370949417662ac3e834cb5dc03c5470fc9bf49478e51572b67668d4844b5c2cf587a7398f51288c6703cd755b5303e79a4f8cb77120484fdab84f49f3568a10fc018df027eca53ff059614ddb8794c578c380755f3bb7f06b0b506e18c663dd86bcb", 0x63}, {&(0x7f0000000500)="bafe2101d5111ded7f370ea4b6b7b771f1876384a2e5d8354aa1d16414c4362d069ade86a0aaf14bf890e924ffb34a9e96fe92faaa70197249df34b1a1e7f8438cbd8d5b2d7f47", 0x47}, {&(0x7f00000002c0)="94d65f6451ad0c354c2c7569bbf7bb27bc12c8412de07fa3d1df127e14cf828b95a325", 0x23}, {&(0x7f00000005c0)="4dedb1434271bf17bbb042ff8c4a3bb9119667193d5a660330e877dcc3cd981836e0e9567b09d0b8b45d7c234edaccdee00ff0ce7d4a71e8b43b4a96cc764755f661274e33b322be32412e5cd719f21075e2e0d8341ed7d7832c520ebc2868db1790e0c1183195ded4a85435b2", 0x6d}], 0x8, &(0x7f0000000c40)=[{0x48, 0x117, 0x4, "42b7a7c4caf4d74dc1c88a300f50be52ae3deaefe4c614d0afab92cbde6dc25c142b36b0489b58b513341872f04f1545bae1"}, {0x20, 0x10b, 0xc, "7383ca94dc8caca72c3d7aadcbea"}], 0x68}}, {{&(0x7f0000000cc0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="477d6b7a1c238dbdeb5fd98a5748a7c4ef892c9923fa878fbd43bd148f929333adc0fc64d7ecbbb50cfd49e9b8ecba0da402f6c984325864783e29b8865963a10a1ad1c737fe695472b23b4cf893fcd63f8aa2439e25071e8c1b64451ceddd99e809547626c25a47be74113c1d0447678a848d4f446beed702cbfd10379f012e27d28f15acec4dd7dc2765690cb28dfb3fcfb006b618c0d703485127be0542a100b45b27098f8a643723846a4c01e93a2ca016d10e7e6733d597cd1c6e86317e351d3f371639da10942f91b48f9fcfa55b231e254f0c6e28208d8eeab3ac29ec29a1a7795f3261a376af8244e273df0b76fa2b4210c1", 0xf6}, {&(0x7f0000000e40)="3564302b8e8162c3e1cd1d114dc3d599588f80b622b10eb1469e6c502e407b3c236e7e410f0018b577edb03c09d3bcd95e15212954c9c03a489f830481de06ae9de66de96b3659a4a294f074f54ccbae5773db5a6e52a72dc8a82cf5b6464939954611ac5ce4aae374d6ceb908e0ffd9b3d7760e5d1bbe198bdb3488a4d729c94909b46249a1b5b57735d091b52a0593b30dfd9c82dbbb3f", 0x98}, {&(0x7f0000000f00)="5307535107c59f412cd94aa5321fb90782bfe9788c60c5757598d121820fa529a554007318736e1a37c3493e318dc86405c1a0256617c62af4877941f417fe176b3411b293c082a070b708aabceb04e03e81a24dfcc8e2c49c39dfee00e126e66eef602158a9f23aeba73ed3e2c4bcf4cd41d1f961ebe4a21a1b724777939179afdd2c3198f56cbab7666a4c67665ad385c21e909082dd4f2f1a341dc183512a72a917e2305d28aa", 0xa8}], 0x3, &(0x7f0000001000)=[{0x30, 0x196, 0xdc8, "9e5a5321d433100ef9c940979e4396c86709a191c87f15f0b220445ae4271233"}], 0x30}}, {{&(0x7f0000001040)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000002500)=[{&(0x7f00000010c0)="ff23e6d5108571a7bc5bc603431197d428b08a30d463572c89dd7593f0a6e1625332ba2bd686cbecff9cbfe72ab08b1f7e2ad3c2bedc0dd0f399a3f16427fecaf5b5a114832daa04b90cedd9f9298e53fdb3477a6df2", 0x56}, {&(0x7f0000001140)="58a5954ef0a1cadfdbe0a35c083075f8549845dc143e3cd4e26a74f895ca723474a7912f0752294b9aa865b7cba7b38aeec0612aa9fc5a860bc670868caae0f3ea3e1e1f6c90fc59075ebe69fdb05cd44d8e91b3a10b1eddc0766b18bad30ef89238fd7881bdfd1bbb3679ee2e10289592c1c01144f8cce33016e1c30693f390fdb054179161ad5a6bd64c21c04b039cfd71fc58b8f1bbd362cc111e98f534fe4a08810e801c2dd777fbe74b9cb5af50b6c9fbb897c602a9a651ae7e3d7a27ee05955c4a55bdf4b9d394fe06a31c5f0d88b7296b66b43f7e114b46060b0e70c4296609f0de12d5c033e04af88f6ec3fbf92d56fe61c380a6b1f55f4e2c81", 0xfe}, {&(0x7f0000001240)="13b2783a56", 0x5}, {&(0x7f0000001280)="7ae276e4065bc365399b015ef04986ae84766b6d0bb3f74b01851313f73c5d9b8c125adbbe585afbd9a28d8ebf63ce37dbc43c8180e3cb1ab36231c8b17566ca2b8240e70701e408cadc48083fe54f6ba0bdf5a53884ee8db25cb1a33a270c8714dff1f423e11a9cd8706333ca0a67dded54c72b", 0x74}, {&(0x7f0000001300)="fb5f3730987d3b968b5511208e323267c17ce2772d5a9d4b33f41a7e2dcf2502b6a6bc434e44d46be7e4d4c65e5a127c1a75a06f970ce6266f73d7b7388d3d62cae86744cbeaf1438dfc9b1faea87ce8af11158e07a40c006c5df7accc4df1d37056d047916136b92b52caa850793cb17f2f2c06eb8c8cb29358dd9f3de9c292b8c3a48c8706e4c0d43e0d1e0d57c4100f7f1828d3baca8ba1fd57570ad5ac3d26b86c562c35761572ad21355397bb3f16c92c59d5d2d44a2e8e25b54b3fe65625f18f44a212ed0dd3f0e7b2", 0xcc}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="2c06a3e785b7a200a930d89df7547f97f0f3e08d8611d5e15190a87969adbd91f135eb97cbaba12080e73f7484aaaaadae37587495cc76c3f9da17794e21ba77e6b0f71e7b7c21995958026e49719cdbcc25c5aaf97e44bf4b1a6c4e8ae5c5ca426821158815153e151ad73fc62a3b9b48d157c0eb158f612bbf21625dcbf91474cb952be037b5163bf0fffcea4273e1ddb428aa05d26166ec338b488f84437fd26b31a3b6fa5aaa2eeb15a7b721d3f13d0036dcefee28ca70afb3da9736f9ef15d501ebafd07bc2296f5e2f382110a692994eb119cd9e48baba3cca", 0xdc}], 0x7, &(0x7f0000002580)=[{0x40, 0x117, 0x4, "5f8b4c8b12bfc69614953b4d86db05555f0c04bdf49db8efd3587661db07c5c347c72be58ba0d3aaac91c300"}, {0x98, 0x110, 0x101, "f6a75476699fd2c87469f03731f63994c7e496784c2175bbc93c5174c657b6d45ad65145b2a997ad82c20cf47d034e1a63a2ec0fd16b257928fc799d0e9db0ed61431e17ee57fbcadae14345faa1e72e84b14aa7d86f800ba41c17171d98a25991f7244014dafbc0639b9a7b0d94e6aa3878ef7ea26b2ca0d468e8c1c7ca9ce232dc3b319e11a4f9"}, {0x40, 0x119, 0xca9, "bfc8cb519fa0dbb612d2502541b4316cff8a7d90c95404800e1ae63409f03b1b194712d0da606e2b12daf2a260"}, {0x60, 0x134, 0xb90, "51b0f0c81e2810b3edd24a5d6309fe18dcc1664e37cdc4f7f3005edf1bf2de491f29b7334afcedfeab82c9fed83971366974d4d0ca76bf6180c085f9ecb783b14df193432fa183896d779011e771e4e0"}, {0xf0, 0x6, 0xa, "159d6aac2b9f39fb20ebd3d106a2953fa9081dcda7936a90ef2b37fe372570a897d164779773347ae538b2d926d2cb8f18e405b64fc9c54e750c382508bb1e1b2b544ae21d13812c05b36226591149d7a5da75117143b4e68d759661779b874b0a602edee9ede491bc58d0d7a1ef1586996d85f306ede8723277fee8e0866d7452ce5d5676a53d1f99acee519b4b45e13a18038a86b2b81496d518ac54094c31fd69318411c6806f3f46cb8ab65f30ca13b67cb32442eef1fefa18fedcb743f9103ea13412ccd73c50227d9572b52acd3d4b2b005ac6bc5082fc16bb9cf33d83"}, {0x40, 0x1, 0x754, "84ece484384395701487a7d86aee096572cdef1eec2ed97d1cbdca50334261db187039a74183f54cfe49e68ce4"}], 0x2a8}}], 0x4, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) unshare(0x600) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) 7.311521517s ago: executing program 2 (id=4183): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) getsockname$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000007c0)={0x0, 0x80000001}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r3, @ANYBLOB="1400020000000002000000000000000000000001080008001c030000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x40100, 0x22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x3, 0x5, 0xa, @private1={0xfc, 0x1, '\x00', 0x3}, @rand_addr=' \x01\x00', 0x8000, 0x80, 0x7, 0x800}}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x810c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_FAMILY={0x5, 0xd, 0x10}]}, 0x34}}, 0xc880) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7, 0x700, 0x5, 0x2, {{0xa, 0x4, 0x2, 0x3b, 0x28, 0x64, 0x0, 0x5, 0x4, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x14, 0x0, [{0x7, 0xe, "e067ed4b21748fa9331edb5c"}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf2513000000040001809c00018008000100", @ANYRES32=r8, @ANYBLOB="08000300010000001400020076657468315f746f5f7465616d0000001400020073797a6b6100000008000100500f8c02015fa5374f845fa931b69b21ad37c641e6428857c306eebf19b966440689060bd5aae028d22c9a89931c81c29f7634c3b52d7487bb", @ANYRES32=r9, @ANYBLOB="14000200626f6e645f736c6176655f3100000000140002007465616d5f736c6176655f3000000000080003000300000014000200626f6e645f736c6176655f3000000000140002007465616d3000000000000000000000002400018008000100", @ANYRES32=r7, @ANYBLOB="080003006bde04b10800030000000000080003000000000004000180480001801400020076657468305f746f5f62726964676500080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRESDEC=r6, @ANYBLOB="080003000300000008000300040000000800030002000000"], 0x124}}, 0x4000000) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$EVIOCGPROP(r10, 0x40047438, &(0x7f0000000180)=""/246) 7.301184857s ago: executing program 5 (id=4184): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0xfffd, 0x0, 0x67, 0xfffd, @loopback=0x7f000011, @empty}, "00186371ae9b1c03"}}}}}, 0x0) preadv(r3, 0x0, 0x0, 0x206, 0x2b4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "338e3468c0ad2a4f4813347ed3e1c0bf"}) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xecf86c37d53049cc) close(r5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000002cc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c80)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8970bf2", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf25070000002c00018008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000014000180080003000200000008000300000000005000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="08000300000000000c00018008000100", @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES16=r4, @ANYRES32, @ANYRES64=0x0], 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x20004849) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000090000000000000000000000e99400000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000540)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000002680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905090aff03f70709090587"], 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000080)={0x7fff, 0x3, 0x80000000, 0x1, 0x8, 0x80000000, 0x2}) 6.257529182s ago: executing program 0 (id=4185): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@empty, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x7, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @loopback, {0x10, 0x4, 0x2, 0x2b, 0x3, 0x64, 0x200, 0xff, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x36, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}, {@local, 0x9bf}, {@private=0xa010101, 0x8}, {@loopback, 0x5}]}, @lsrr={0x83, 0x3, 0x6f}]}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) getrlimit(0x3, &(0x7f0000000040)) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40080) write(r0, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) 5.610308491s ago: executing program 2 (id=4186): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x8000, 0x101000) 4.818552874s ago: executing program 0 (id=4188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400"], 0x48) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x20008, r0}, 0x38) 4.786057151s ago: executing program 3 (id=4189): rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) 4.673096564s ago: executing program 0 (id=4190): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(&(0x7f0000003b00)={0x20ca6bd519f76f4b, 0x0, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 4.67211731s ago: executing program 2 (id=4191): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) sched_setscheduler(r2, 0x6, &(0x7f0000000180)=0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1c1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setitimer(0x1, &(0x7f00000001c0)={{0x0, 0xea60}, {0x77359400}}, &(0x7f0000000240)) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000080)={0x40, 0x1, 0xfffffffffffffe78, {0x7, 0x23, "2088d0f2b1"}}, &(0x7f00000004c0)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "cbb80945036d14cdb4c10a079e0ea91ebafa01ce4a70d4b177bf56f68969c4bdd74d843e5a8e3a63cf7d336958fcd7442a5455532e0592175f278578693a73cace603edde4246066658508de0e6e523b246599ec2b578fdee42a2420"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.556601994s ago: executing program 1 (id=4192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRESHEX], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)}, {&(0x7f0000000040)}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) ioctl$SNDCTL_TMR_SOURCE(r5, 0xc0045406) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) dup3(r1, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.461192876s ago: executing program 3 (id=4193): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) r2 = syz_usb_connect$cdc_ncm(0x4, 0x8f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x0, 0xd0, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "8b5a98878a"}, {0x5, 0x24, 0x0, 0xff01}, {0xd, 0x24, 0xf, 0x1, 0xfeb5, 0x6, 0x3, 0xf}, {0x6, 0x24, 0x1a, 0x9, 0x3c}, [@mbim={0xc, 0x24, 0x1b, 0x100, 0x2, 0x6, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0x2}, @obex={0x5, 0x24, 0x15, 0x7}, @dmm={0x7, 0x24, 0x14, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xf, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xc, 0x7e, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x0, 0x40, 0xc, 0xff, 0x1}, 0x21, &(0x7f0000000140)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x4, 0xf000, 0x2, [0xff3f00, 0x0, 0x0, 0x0]}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0xc1, &(0x7f00000002c0)=@string={0xc1, 0x3, "0ced2f728a57cffce5d12f81628fb1829718db6e5aa970dca644375c5930f92be75514dd2a3d7591e5a7246648ffdf464a5a6235da1328a19ea511a0b18280c1879114f45032a8b747d540c5483a198968d24115bcd23f2081fc23c3f1fbddc41ad0193ee3df379c78edd142a6ce2f6df8490964745644ed0b3e4182baa4b43643d9254640f234a9d9848fbe5c22ae3e6e60dd2447f09270d44b44fccd359a9f4142d998d06ac6b1da13d6870d8139ddfecc3d3b205737d9b0ac64229c0159"}}, {0xd0, &(0x7f00000003c0)=@string={0xd0, 0x3, "74a864cd14924075658b5c03ca1742e57a3b5a599fa92e1bad7c01352244aeb9d110bd3b095d78d85a71df0e21a56e2df768ba508dcc500fbb677a21b20ade0271ac5ddd102e939bed2a97df6a7c053199c9e7fafe6eac13d85993c232ec60d3897b655edb4bbb0f9bf8ecd7c097730c167fa981da63f17b6580888b3adfd2e567f5a47ed2c6daa0b06a966f08a9240e3c38baf5149719ebc05c9f3201724fd70360748d6c6066cb3c1d317334aa21ef8312560e5ccbd4e6627272ba9c58d152acb480f0330db40d9437a41aaeaa"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42f}}]}) r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000340)={0x40, 0xe, 0x4, "051e5ceb"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="249f79"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000480)={0x20, 0x0, 0x2, "ce62"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) syz_usb_control_io$sierra_net(r3, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x40, 0xb, 0x1b, {0x1b, 0xf, "cc5e440194171859192e066b713534082b52aba05878dfa0fb"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000000fc0)={0x1c, &(0x7f0000000b00)={0x0, 0x13, 0x2a, "e4da43b41a01485b5229651a9baaf8a09eff0567ba5e5fb9ba67ebbee609f4884a4f5df31ed847ca8663"}, &(0x7f0000000b40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000f80)={0x21, 0x0, 0x1, "84"}}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000700)={0x14, &(0x7f0000000600)={0x40, 0x24, 0xc7, {0xc7, 0x21, "543d65409fc898d9be1a683c8a34ed94591529c06fabd333b109efd357109b04f13648ceaeb067dc741b3099e5aa04ef027b743babb39418bfaa05686463414247ac4a7cc99a1b1fb2983d38c50c3e46a6be5a57f921ac7f20805c9211f28c6a1caf2ef25cebeda67a8662b45142254e99f069c1bd25855d7379b3430015283374b1d0273675d73d20079499ecb7a9b3a7614925d3266309fc69e1c28852d57bf6d897999307b7dae6c79b4d4f0e21c91a4ebd31add15033b197c3256c175d5a89beff1ac1"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x0, 0x9, 0x8f, "2cc0dc218fd91f54be16b765a140bf2533951c2fe07835e4c42686e83ebd077c3825334593bea96cbe0171454422571d210ec28a0f0e5b88b36dca5783825da1da97e4b5a318009d22e13f6b306d7f5b6ab3a455adb740c74bf6064f0a64ce5a8fbe40213c27b817fdcf7f494631dc1345a571646e2b953212e99d403f0e84e76bd30173cbcc17bbda3a1f23c456d8"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x2, 0x1, 0x9, 0x5, 0x0, 0x76, 0xa, 0x7, 0x5, 0x93f0, 0x3, 0x8}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x1cf}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x8fac}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) 4.191995698s ago: executing program 5 (id=4194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000897000/0x3000)=nil, 0x3000, 0xb635773f06ebbee7, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_open_dev$media(0x0, 0x1, 0x0) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0) 4.064332638s ago: executing program 1 (id=4195): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='xen_mmu_alloc_ptpage\x00'}, 0x18) io_setup(0x23, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x437, 0x1, 0x25dfdbf4, {0x0, 0x0, 0x0, r5, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x0) 4.027885704s ago: executing program 5 (id=4196): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/18, 0x12}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 3.905190543s ago: executing program 0 (id=4197): socket(0x1, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010000009500200c00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc1400002c4788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r6 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89ef, 0x0) r7 = syz_io_uring_setup(0x476a, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x4, 0x3de}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) (async) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/d\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) 3.852139526s ago: executing program 5 (id=4198): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@empty, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x7, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x1, 0x0, @loopback, {0x10, 0x4, 0x2, 0x2b, 0x3, 0x64, 0x200, 0xff, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x36, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x39}, 0x9}, {@local, 0x9bf}, {@private=0xa010101, 0x8}, {@loopback, 0x5}]}, @lsrr={0x83, 0x3, 0x6f}]}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) getrlimit(0x3, &(0x7f0000000040)) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) pipe(0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40080) write(r0, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) 2.738463981s ago: executing program 5 (id=4199): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r1 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r1, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x11, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {0x0}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r4, 0xcf032000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r5}, 0x18) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)="cda9cd612c628e41cb074edba74d7b02661cd5fc0dfe7016e05c81791eea501c8fbc3a5fa0fdeed73b41201902718adaa14b325041c29f17cad6370f271a15d5d1c4cf29e5206ab9c3948058bbb2f6b1290859c01187e04152a0f78c23c04e20ddae24346dce362b397cceeba7e683441b16efa00d0abd732b9c5222f51cbb8bf832a243674b01bbc0a3c529636c26e1b276f97c5bffb0aee05d065214828d65a246bc840e4dc8ce42506d68a159ca77ba", 0xb1}, {&(0x7f00000007c0)="ec5669cad508f05d63e9d674e60a5236e8662edc359862a421cd10b546b47627c43f18500b51dd76f86bef961fc5ce311a626b406ad186ef1c8a07e2e300ceb645996d055496e1d5684d846769deda5752faeda43c95a0bfe9b421acafe7221882558e41938eb14ff5452991e888653e0e0a24249f856227f1b562141afe0adfa5e5a2c099bb5da1900109b4f6fd51cd9d2a5c56250d4499a39d6c35ef2d9bfcaf61b4eb17e6cafae49b74038edac112b4eb6ba66b5962e0a16351c086a66cab4820f2853d094624582df35daa82ad5354a15c97d03533bd41f88ffb61a5", 0xde}, {&(0x7f00000008c0)="52ea76e328fa8613f4476309f4bd043479100ef013a6cf70fb4ec54200860dc62152e032e7c7946dfd137fff7b0faf676ce12f7be64d0d59a9c9e79188adcdb7498f3e77903f64adf442227d58fba7f5be891f7816bc0e8d674d01b30041480b3a207ecaa1a8e7aceaf158836ec8859afb7206d961e55db7dd7020142fa5e116d88c36f5d652cae45d4111fa1413", 0x8e}, {&(0x7f0000000ac0)="3228c682d20c236d6538dc53d93dca28363d3928c37777e770ff36dfcf444a73f7c1ab629e076f531627d55db4e79ec20143cb0b01a5260e4f39debd8ec75f3da37ff366c272485f9edb1f64d7ce1125024b02edd380cbf280e07cc1050ca837f72ec65e234895e20894a8dcd3ef16f3b9276d08445ad756ce60c030cfe52bf90bae0b6480b63909a6716b63b4cf8c14bb62afe89fc98fbf1c2b736635f4dcfc4d8b5c01d36e7af0422f96ee1c1dba24e00dcbce09422a1534c11933cb1419b9044fe23dbaa3d0d3d6f49876d557a7a56d697c7e69d0901bcdef476f844f96", 0xdf}, {&(0x7f0000000440)="cf370949417662ac3e834cb5dc03c5470fc9bf49478e51572b67668d4844b5c2cf587a7398f51288c6703cd755b5303e79a4f8cb77120484fdab84f49f3568a10fc018df027eca53ff059614ddb8794c578c380755f3bb7f06b0b506e18c663dd86bcb", 0x63}, {&(0x7f0000000500)="bafe2101d5111ded7f370ea4b6b7b771f1876384a2e5d8354aa1d16414c4362d069ade86a0aaf14bf890e924ffb34a9e96fe92faaa70197249df34b1a1e7f8438cbd8d5b2d7f47", 0x47}, {&(0x7f00000002c0)="94d65f6451ad0c354c2c7569bbf7bb27bc12c8412de07fa3d1df127e14cf828b95a325", 0x23}, {&(0x7f00000005c0)="4dedb1434271bf17bbb042ff8c4a3bb9119667193d5a660330e877dcc3cd981836e0e9567b09d0b8b45d7c234edaccdee00ff0ce7d4a71e8b43b4a96cc764755f661274e33b322be32412e5cd719f21075e2e0d8341ed7d7832c520ebc2868db1790e0c1183195ded4a85435b2", 0x6d}], 0x8, &(0x7f0000000c40)=[{0x48, 0x117, 0x4, "42b7a7c4caf4d74dc1c88a300f50be52ae3deaefe4c614d0afab92cbde6dc25c142b36b0489b58b513341872f04f1545bae1"}, {0x20, 0x10b, 0xc, "7383ca94dc8caca72c3d7aadcbea"}], 0x68}}, {{&(0x7f0000000cc0)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="477d6b7a1c238dbdeb5fd98a5748a7c4ef892c9923fa878fbd43bd148f929333adc0fc64d7ecbbb50cfd49e9b8ecba0da402f6c984325864783e29b8865963a10a1ad1c737fe695472b23b4cf893fcd63f8aa2439e25071e8c1b64451ceddd99e809547626c25a47be74113c1d0447678a848d4f446beed702cbfd10379f012e27d28f15acec4dd7dc2765690cb28dfb3fcfb006b618c0d703485127be0542a100b45b27098f8a643723846a4c01e93a2ca016d10e7e6733d597cd1c6e86317e351d3f371639da10942f91b48f9fcfa55b231e254f0c6e28208d8eeab3ac29ec29a1a7795f3261a376af8244e273df0b76fa2b4210c1", 0xf6}, {&(0x7f0000000e40)="3564302b8e8162c3e1cd1d114dc3d599588f80b622b10eb1469e6c502e407b3c236e7e410f0018b577edb03c09d3bcd95e15212954c9c03a489f830481de06ae9de66de96b3659a4a294f074f54ccbae5773db5a6e52a72dc8a82cf5b6464939954611ac5ce4aae374d6ceb908e0ffd9b3d7760e5d1bbe198bdb3488a4d729c94909b46249a1b5b57735d091b52a0593b30dfd9c82dbbb3f", 0x98}, {&(0x7f0000000f00)="5307535107c59f412cd94aa5321fb90782bfe9788c60c5757598d121820fa529a554007318736e1a37c3493e318dc86405c1a0256617c62af4877941f417fe176b3411b293c082a070b708aabceb04e03e81a24dfcc8e2c49c39dfee00e126e66eef602158a9f23aeba73ed3e2c4bcf4cd41d1f961ebe4a21a1b724777939179afdd2c3198f56cbab7666a4c67665ad385c21e909082dd4f2f1a341dc183512a72a917e2305d28aa", 0xa8}], 0x3, &(0x7f0000001000)=[{0x30, 0x196, 0xdc8, "9e5a5321d433100ef9c940979e4396c86709a191c87f15f0b220445ae4271233"}], 0x30}}, {{&(0x7f0000001040)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000002580)=[{0x40, 0x117, 0x4, "5f8b4c8b12bfc69614953b4d86db05555f0c04bdf49db8efd3587661db07c5c347c72be58ba0d3aaac91c300"}, {0x98, 0x110, 0x101, "f6a75476699fd2c87469f03731f63994c7e496784c2175bbc93c5174c657b6d45ad65145b2a997ad82c20cf47d034e1a63a2ec0fd16b257928fc799d0e9db0ed61431e17ee57fbcadae14345faa1e72e84b14aa7d86f800ba41c17171d98a25991f7244014dafbc0639b9a7b0d94e6aa3878ef7ea26b2ca0d468e8c1c7ca9ce232dc3b319e11a4f9"}, {0x40, 0x119, 0xca9, "bfc8cb519fa0dbb612d2502541b4316cff8a7d90c95404800e1ae63409f03b1b194712d0da606e2b12daf2a260"}, {0x60, 0x134, 0xb90, "51b0f0c81e2810b3edd24a5d6309fe18dcc1664e37cdc4f7f3005edf1bf2de491f29b7334afcedfeab82c9fed83971366974d4d0ca76bf6180c085f9ecb783b14df193432fa183896d779011e771e4e0"}, {0xf0, 0x6, 0xa, "159d6aac2b9f39fb20ebd3d106a2953fa9081dcda7936a90ef2b37fe372570a897d164779773347ae538b2d926d2cb8f18e405b64fc9c54e750c382508bb1e1b2b544ae21d13812c05b36226591149d7a5da75117143b4e68d759661779b874b0a602edee9ede491bc58d0d7a1ef1586996d85f306ede8723277fee8e0866d7452ce5d5676a53d1f99acee519b4b45e13a18038a86b2b81496d518ac54094c31fd69318411c6806f3f46cb8ab65f30ca13b67cb32442eef1fefa18fedcb743f9103ea13412ccd73c50227d9572b52acd3d4b2b005ac6bc5082fc16bb9cf33d83"}, {0x40, 0x1, 0x754, "84ece484384395701487a7d86aee096572cdef1eec2ed97d1cbdca50334261db187039a74183f54cfe49e68ce4"}], 0x2a8}}], 0x4, 0x0) recvmmsg(r6, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000) unshare(0x600) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) 2.559902808s ago: executing program 1 (id=4200): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) sendto$inet6(r0, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000800)={0x6, 0x1, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/216, 0xd8}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x4000000000000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) 1.566664546s ago: executing program 1 (id=4201): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) sendto$inet6(r0, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000800)={0x6, 0x1, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000640)=""/216, 0xd8}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20000000, 0x4, 0x0, 0x0, 0x3, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x4000000000000, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x9000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) 1.144514317s ago: executing program 0 (id=4202): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000000090001"], 0xb8}}, 0x20050800) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) sendmsg$AUDIT_GET(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000010280)=@deltfilter={0x2abc, 0x2d, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xfff3}, {0x7, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x2a7c, 0x2, [@TCA_CGROUP_POLICE={0x30, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}]}, @TCA_CGROUP_POLICE={0x838, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xf7b, 0x7, 0x8, 0x2, 0x9, 0x4, 0x3, 0xd2e, 0x400, 0x8, 0x2, 0x401, 0x3ff, 0x6, 0x7, 0x10000, 0x9, 0x8, 0x80, 0xf3b, 0x400, 0x0, 0x10001, 0x3, 0x2a6b, 0x8, 0x7, 0x2, 0x2, 0x7ff, 0x3c, 0x0, 0xffffffff, 0x5, 0x6, 0x8, 0x4, 0xff, 0x7f, 0x45, 0x10, 0x2, 0xfa5, 0xd, 0x7, 0x200, 0x5, 0x9a3, 0x100, 0x48, 0xfffff266, 0x5757, 0x2, 0x5, 0xd, 0xfffffff6, 0x552e, 0xf, 0x3ff, 0x7, 0x9, 0x7ff, 0x5ad1, 0x9, 0x5, 0x4113, 0x6, 0x3, 0x9, 0x2, 0x9, 0x2, 0x3, 0x800, 0x4, 0x8, 0x6, 0x0, 0x200, 0x4, 0x6, 0x400, 0x6, 0x0, 0x0, 0x9, 0x9, 0x3ff, 0xc80e, 0x4, 0x3000, 0x0, 0x1, 0x3, 0x7, 0xd2a2, 0x4, 0x8, 0x4, 0x1, 0x7, 0x4, 0x6, 0x7, 0x4, 0x3d, 0x6920, 0x8000, 0x5, 0xbc9, 0x1, 0x0, 0x4, 0xffffffff, 0x6, 0x6, 0x7, 0xf982, 0x2, 0x79a780, 0x401, 0x80000000, 0x8000, 0x2d14b516, 0x8420, 0x6, 0xe, 0xf, 0x2, 0x80, 0xfffffb2b, 0x3, 0x7, 0x5, 0x1ff, 0x4, 0x8001, 0x4, 0x9, 0x5, 0x8, 0x4, 0x4, 0xe, 0x3, 0x4, 0x6, 0x75, 0x9, 0x6, 0x5, 0x10, 0x4, 0x2, 0xe67, 0x338, 0x1, 0x4e2, 0x0, 0xfffffffb, 0x9, 0x1, 0x4, 0x2, 0x7, 0x101, 0xffffffff, 0xe, 0x1, 0x2, 0x5, 0x0, 0x8, 0x7f, 0x400, 0x5, 0xfffffff9, 0x3, 0x7, 0x800, 0x3, 0x2, 0x401, 0xf, 0x1, 0xc1df, 0x2, 0x8, 0x9, 0x0, 0x10000, 0x1, 0x400, 0x8, 0xffff, 0x5, 0xd, 0x2, 0x9, 0x5, 0x4, 0xfffffffb, 0x0, 0x2, 0x2, 0x1, 0x1, 0x4a99, 0xffffff6d, 0x7f, 0x5, 0xf, 0x8, 0x9, 0x1, 0x7, 0x1, 0x5, 0x1, 0xfffffff5, 0x2, 0x4, 0x6, 0x8, 0xbd4, 0xfffffffe, 0xca, 0x7, 0x9, 0xfffffffe, 0xfffffff8, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x8, 0xffffed5f, 0x7ff, 0x6, 0x0, 0x4, 0x1, 0x253, 0xfffffe01, 0x8, 0xcc6, 0x5, 0xd9a9, 0xf0000000, 0x4, 0x7fffffff, 0x4, 0xc, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x88}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x0, 0xe5, 0x5, 0x9, 0x939, 0x9, 0x0, 0x3, 0xfffffffb, 0x15, 0x4, 0x2, 0x3, 0x7877, 0x6, 0x6, 0xa, 0x4dfeb5ba, 0x80000001, 0x7, 0x1000, 0xff, 0xfffffff7, 0x101, 0xfdb7, 0xfa8f, 0x7fffffff, 0x7, 0x1, 0x5, 0xfff, 0x6, 0x8, 0xd50b, 0x2, 0x7, 0xf, 0x2343, 0xf81c, 0x7fffffff, 0x9, 0x3, 0xb4de, 0x2, 0x5, 0x1, 0x3, 0x20000, 0x1, 0x3, 0x3ff, 0x6, 0x7, 0x3, 0x4, 0x4, 0x8d3d, 0x3, 0x5, 0x8, 0xfa99, 0x83, 0x0, 0x8, 0xffff0001, 0xffffffff, 0x7, 0x6e8, 0x0, 0x1000, 0x400, 0x9, 0x80000000, 0x7fffffff, 0xd, 0x7, 0x36, 0x6, 0xe4f, 0x6, 0x0, 0x1, 0x506, 0x4, 0x1, 0x7, 0xffff, 0x3, 0x3, 0xff, 0x8b9, 0x8000, 0x9, 0x8, 0xa2, 0x2, 0x49f, 0x81, 0x4, 0x4, 0xfffffff8, 0x60fe, 0xfffffffc, 0x3, 0x7, 0x0, 0x2, 0x1, 0xc9, 0xb, 0x1, 0x8ed, 0xfffffffd, 0x100, 0x7, 0x1, 0x1, 0x7, 0xb, 0x7, 0x3, 0x4, 0xf, 0x81, 0x6, 0x8b, 0x1, 0x80000000, 0xffff, 0x5, 0x40, 0x4, 0xa, 0xfc, 0x9, 0xc65, 0x800, 0xffffffff, 0xdab4, 0x0, 0x7fff, 0xbf6, 0x401, 0x1000, 0x3, 0x3, 0x9, 0x2, 0x1, 0x9, 0x8, 0x2, 0x7b, 0x7, 0x5, 0x9, 0x5, 0x8, 0x38, 0x1000, 0x6d, 0x2, 0x81, 0x68000000, 0x2, 0x2c, 0x6, 0x7664, 0x5, 0x2, 0xffffffff, 0x0, 0x3, 0x8, 0x7, 0x5, 0x6, 0x9, 0x1400000, 0x7, 0x401, 0x2a1, 0x8, 0x7, 0x3, 0x100, 0x4, 0x7, 0xc, 0x0, 0x1, 0x101, 0x2, 0x0, 0x8, 0x8, 0x8, 0x80000001, 0x5, 0x463, 0x20000, 0xde, 0x200, 0x7, 0x1, 0x5, 0x4, 0x8, 0x2, 0x4, 0x8, 0xcd2, 0x0, 0x4, 0x1, 0x9, 0x5, 0x9, 0xf, 0xb, 0x5, 0xfffeffff, 0x6, 0xeeb, 0x5, 0x800, 0x7511, 0x3, 0xf0, 0x4, 0x9, 0x8, 0x4167e05d, 0x2, 0x6, 0x2, 0x2, 0x0, 0xdd, 0x74, 0xd, 0x100, 0x2, 0x6a3f, 0x5, 0x5, 0x3, 0x7, 0x9, 0xeba4, 0x4, 0x8, 0x8, 0x3]}]}, @TCA_CGROUP_EMATCHES={0x10c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x104, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x9}, "c76f7f4220567276032f0b7eaa0a87a0b5fc38fa5731dd923a12e0e88146e50f2068f4c6d7553427bb393828730e07d6230a226dca59d1fb750b54f90ca86e0d486239c92ca3af1814174f3f5a1b229b8c6471d217a9f7aa08953364b5e0f285127bf216d49039866d914859106c6e78bd9ce49cb6e7e7948d524de2f71dba3ff94dde2315c46dbe4483c20fedc7214ad3966b34b74e33403beef9f5dd00c1e7ae86b0a7861c65ea44b65e4fb56ec4bda3549f71fd7c35bc8dbe361ff6ad03014dbda159716d85cd3b27dffa21391bb5135a59dd983e55a99a4457804de1a521223e9e4ce73e972d1a919cdde055fc3f80f93f58fc"}}]}]}, @TCA_CGROUP_EMATCHES={0x208, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfc00}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x164, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0xfffd}, {0x1, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7f, 0x1, 0x4}, {0x9, 0xc26, 0x9, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0x10c, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7ff}, "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"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9dd8, 0x7, 0x9}, {{0x1, 0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x4}, {0x5, 0x5, 0x5, 0x0, 0x6, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xa771, 0x1, 0x401}, {0x4, 0x4, 0x0, 0x2, 0x9, 0x2}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x7f, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x35, 0x3, [@TCF_META_TYPE_VAR="cbdbc3e824", @TCF_META_TYPE_VAR="1c8c", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="560db768", @TCF_META_TYPE_VAR="8ee98f04da5418e3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="449804f82d6bf436", @TCF_META_TYPE_VAR="caf216cc6f04", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x73c, 0x2, 0xfff7}, {0x5, 0x2, 0x2, "e7c7"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x9}, {0x0, 0x5, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_ACT={0x58, 0x1, [@m_simple={0x54, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'bridge0\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'bridge0\x00'}]}, {0xd, 0x6, "31b5c5bcf815efcd11"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_ACT={0x1a88, 0x1, [@m_ife={0x124, 0x11, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x2, 0xfb4c, 0x401}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xfe88}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0xb9, 0x6, "0f63e81c5b88345858c91e226eaee4e7958921051ad9a74f34bbabb1f184b6af8598e869ea3ea2a8bbfaa20f625ff2d3ea6752787c677ca6f4e05b8eb3bb62d138671779bb5899a9cdccb0e980fe6057f2ffa47a27401ac4b1c071c6f10c93a861d49712551a7ffe66045231f9c644c0feba73a9d94db46c4bd16d133a226f70dc96a360240e8f77281eb30fde2b36fbadce00614d14881c19d4e646e787d0ce58969ddd87c2ddd012a34686f22b76a71a90986470"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xe8, 0x11, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x1, 0x8, 0x759}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x67a, 0x3, 0x8, 0x6, 0x9}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x2, 0xffffffff, 0xc6}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x41d, 0x6, 0x0, 0x9, 0x3}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfffffffc, 0x3, 0xfffffffd, 0x5}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2092, 0x6, 0x2, 0x800, 0x1000}, 0x1d}}]}, {0x12, 0x6, "1a7a5477fd82a05624ff60b5068c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x130, 0x1, 0x0, 0x0, {{0xf}, {0x88, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3ff, 0x9, 0x5, 0x1, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}]}, {0x7b, 0x6, "312a2aa011706eb2e0cea6144b3214b0cd4fe4592f8f60a646794d7a6129b9d9295873c513e08acaaeb72b28a7a9efa2238b47cd527aded5d6bb7a186df0b18cdab7bb76cd07113c10aed760e54f466ec3f97b40dd5e184174b91f4114a544a3ecf201b98e72b34c1a21559dc4e8d91944b7490eef2c2f"}, {0xc, 0x7, {0x0, 0x1c2aac2cf83011f6}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_xt={0x150, 0x17, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xfa, 0x6, "d134d0f016d22a07e9c32f85afbc383dd25cf20238734e46c92a5896feeb3bfba6ed857d96abfea56d5933e142a895595c637dd48a64be82338fe7fd9b013ef09b055a0b728a27951b9fa18d17d9f014e93db8d4fa18ac9df9d057b338aca52fdba74827121e50f11075365c6e42021c8d4ebec7c53d2d5388c37f7ba4461370b08081a3b9f1c331e8f3356d1a3e0c3cf5b72d8a529e2a695424b5c1185b00d59ca221dcb0c43c2df1a1445aeffc342c67de8662e58a03832c8e29760f867c259a4a893b4e78c5dcc387672d5400f5eaa5b96f1a1ff85200a3ade6ac68a38a695a9ea16b280fd19f0b4a00eea7fdd2cc2274a232fc1f"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0xc8, 0x1e, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x933}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80, 0x4, 0x8, 0x3ff, 0x4}, 0x2}}]}, {0x5f, 0x6, "97ac5008a92453be9f590f51ebed2da56915cf3c7482956dde4d0867d57f2e742e31641d3957a4a3d204262fb4f916422093efaed33200c742324d1f771cfb98b5908c03ad027b4c38b5f2463049fd7a088a9fc960a67d0e0f9d1b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1a4, 0x9, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbff, 0x10000, 0x2, 0xf8b, 0x80}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6d, 0xffffffffffffffff, 0x1, 0x7}, 0x5b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10, 0xfffffff8, 0x3, 0x200, 0x3ff}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x10000000, 0x3, 0x2}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x20000000, 0xdf1, 0x7}, 0x6e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x9, 0x6, 0x3, 0x466}, 0x71}}]}, {0xcd, 0x6, "4de28099d0a377d961c066224e71dfdfaf9defcc0741f2c534ae673d83923d99e27219d4744c019b0a94998ef3e8f2c404f19bba233ed07369504eadb2732a34dc7e28d5f5eb7fff7c0526f0f3b5fa775e689bc62c57ac790b0df6bbc264dc6d1da9d58460894b73f4426bbac512534b875f7c1979a622713a471c907310220c22d952b02da11e665dc1589be3ea07e6f20a8e70b6109bafab8f77feb8680ae5913558d857ef8dcc5c84e02c0d09437ef563a05b6002a2e98525062d60f49fc3a2a1e5f58e2d2cb2a8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_nat={0xc8, 0x6, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x100, 0x6, 0xff, 0x6}, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x596, 0x5, 0x20000000, 0x7, 0x7}, @broadcast, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xd, 0xc, 0x0, 0x6, 0xffff}, @multicast1, @local, 0xffffff00, 0x1}}]}, {0x27, 0x6, "1509dc8956a72b367990c8c1a73731ad9d97ade42372288d53ecac4a5315ce140d25d1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x128, 0x11, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x200, 0x9, 0x10000008, 0x4, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x800}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x1, 0x1, 0x100, 0x400}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}]}, {0xb3, 0x6, "45646c31a938829fc4dcf6335e95cb5df558bdcac6cf34a9f4137af3eb12ffa84445c675be197afc6aca57d62baaf92bcfe3f818684239540fd6626d7c53ed98b934815ad6fdce07facd1a9573d6dc072c8d745fb3e724b0137122e49a14283d94b95d615b707e1000fd32d1259cb888c82a72280aba940ca2d6b39bfadce36b034eb326c59a5d8018e4fc17cb3fc8eca68ac27781c93c42b8229e749c9d06719c15b594ea898985d91f37fec812d2"}, {0xc, 0x7, {0x1, 0x145dec33f6fc21e1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_nat={0x150, 0x19, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x2f62, 0x20000000, 0x8, 0x3}, @broadcast, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1, 0x1, 0x3bf1, 0x2}, @loopback, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x0, 0x4, 0x3ff, 0x2}, @broadcast, @private=0xa010102, 0xff000000, 0x1}}]}, {0xae, 0x6, "b3e67afc911d6f0207617c3470d441b63889e34730c95e9a96d218cb0fc9caaa152dce32444de74287203669fc92608c1cfe7e61766e72fc37b87df0f104968dbe8ab72d5a812cdc5464d8f3a69bfd24f0f1156ba60cbe4a1256dbf9c14bfcb0d58660d77406af4ff5dcbe900dccf8fe677ffb165448ab9ae1d326bf07789842d343e38df802fe5015ec7d4a8a83c54d329dbcef37f5ab3d41cceed4b228197f378ba53c18f147744fd1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x104c, 0x5, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xa2}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8}]}, {0x1004, 0x6, "edbe66b3ed9cf9602b5424da78806b5b81e9974ca0ae7decf36cd10e5b494f0548189240b570bc907c45be47e68aeef364ded352c28890a5a857c09820339cceb8fd44a4c6a9d49e792c91435b54a38cfe7370298e05e08047c73ad57dbdf0bd663decdd979f2e1d8d8886540ffd9835e799b74623758c08f039d87ab6dec80c950ad17ea255ba3c723f464519232eab447c14e83ecc75235056510337116cc2f52e81b050a86e91393d3808d46246b1d88b2ad6843b0801d2845ac4712c3f692c289719f99a52b5c3233e94171bbed3c9e29e4cdd138716d73b1babce780e56808ed2f76aa62a62b6cfa8b4a1bc9bfdf17f8649945f0a92487f3d0b01b04b4e939c70b2d1557a2762d2f7dbb8855e45f9af6221c643bb17b6363efc389c114b2e6d425473ddb2eeda14dddefc02e2cd71f41138e47173c710dc2ed6d934d9a6e1fa668d1dbbd908d036a32af5ccf4b03b3f1bfda50e6be589fe953b4c48593a36b259eb261f224f834e28b709ed9132749fc7d024c8688cb7245a9f201ec762e0fdc6867967c2744b785a0ee4b2702998b1084fdf19c42c39a9f8c4350b28c4380307cb15994ea2ffa5ba29f7deac6ae7e61f961cf7b42cdb4b93130295ad4262ad118aadf941b850c86119557ef9386893a793304de3fe4fa4f764541f9457169c2681d9d5158567ed2799f558fcd4a4b22b8fe6a19bd5a0f79b978953e4b57c280b2c85ac5051079850f2541c7ff56be778c04b7b35b37b4ceb82fb13ab06e0124e09f1f142a8b9c1b3ec456a8325165b20df75064b60984bd513c8e0dcd9e0a9ff003647f73ca1c4e50c02e5751472cf39328dae2ae89875c1595faa4ee26fa2f2099a9e6f963aadd90dbcb7a4db23cefffa99a40c16bc545d840058f3d94a06df7c40e158e5d2766b41290e112c41b350890e0a0d6bcb0c117a4280812926dc56cff8b3b83d58caed5319d9972637a92d95d1f51995693a7a38e6e79c13a7d4c3b7364a1442b462a0a2119bca95db19f334003a0232f1294217f71d8b8e4239124ae8ea8a553d96ea108883cbd9d42a85644e4ff865dbb8f05faa621bf20325637c375433d513d8006ff9d005bd40a6fe8f678eae23d6615cc11f9385ac1e0301715b9e30f8d7bae1029ebae774e97f5e2b1c790819e3d46c816554c103b3e8538a86a069012f410076cf64ddcd5866f2945f41d940bbded0e7bd4d3408b1e3820a8808d58cba8f517adfbeef4891d1c3b94c55b625cd78a911a9cd02d348662372d74c92e62a9a335986e32665ce5c3fc4eeb4a869c1014d447503b5f326a8416d44e812dda16f3707473731bc6841dafbde6499413bed06399c7213ced9919453b5f3459de492f18425781a10b26ea4e8809ed7cc660f01c0c1d9feaa93a29f6d9cc3ae4daa4b3827ca684623404b89f163ac17c3fe355b1f1bb04703dcdbf59afd9df1f80b96e1e73e57cc02d823bc7f73eb810e21a6ec0305a712676a5231ac88a846ffeb377ab14018cbed40c69631bf3e9c809dce1e35223311fd110f01370132fe70060b6d62da612965b6df77392c22750af9cbd88acab4195af663937841af93e1d80bd124033d43a0f02aa3cd85bdbb51d9a5124c8d8ac5d05adfdbb5aa8efe6fe78165ef7c2cf2182e6946997922ac2a32ffadfb3a63bc060ecd5c760be5f0492ea70e4f2aea1828c360dbcf1c6fd1aa5363c897b19619a15f5b4a749a4dfbd3ef15fac2f0404e379dd88c2ef7c10a01f14116f2dd1852641792ebe4c9d883aa43d2502bcfd306405ee32bae77a92e7a59bcc67ba84b916c00961b81a51ce96f8eec8974f8b3d77fad0970c69017335a3386cfc8cfda6a74d69bdaf2c9882e3671c149fe9fd03cee805e8631e68bdb38282e4f72cfcba60e2752107f1c4993da1787dfa7b8ed0ce52796744f86fa98da28f66b17c4f6532c8a195cae8e5ff789e2fa3ad25acf715a01f5f3fa07efd2694235ccf0b889ea61a3f19cff6bb6b6930bbba8b00774feae4fb90bf82eb3a8e2445402ca433d30a60181f4cc39e324db6b33767c601831146d0161bbb7e526ab28fe8ecc9d5ef3c90b456a63d7f2fc8b3aa4dda755a1deaa73221497c95173c84c9927a48ff313979dc04b637a8aa8349b249b9dd5037d20c05656da98724245ab9016c52e84c62ce89f5170968987d0e991c30db2da08faaeda92f9e63f5d255d942525e70c82b011415d25bad5b417ec240af440e9ea1de37a835a91a155954572820ad89d7bcf9020cc23f595d88683615519da15efe659b043742b330d921073a7fb5700f1e9c11d3071ed78f2a3710adea96f91f82b504798cf9a106e1830cffe40796c37dcac32a17ca34eeebea1bde60c0884762a273a235c3e083754612af1cbe3197210be50f10c2b2d23afeeb1b6dd2b6ca2e68678bb20eeafed1da644bd40317a732877007aa36a4ac6feb6f9239209e0ffe4f4af12f0219343d6314df16b311a71398a4ed8bf26c7c15a49b188a3d1810c4200e35ac58627b4db344920d500920a8cee1dcc61c089bc70ecbae041b046ac898cc36e6de06834db33b22874a4cb7b6755f94e2c47e1134d3b5856166635431f889e7055e7c4d7a6580217e80d924d02afce5f4d33154b9867969d51dddeddd9b3bcce43cc231032424adcfd646c82ef7d7432e99015a39b7e99e7a0ae2e809ef331e4c18920d2252940d2ad84d905cfc72b396257c846dfda79ce9d10b65bb83a336488077e8617ecf12fb5d8af929d7c37ba40a6d2e24edc40d1aab8f0ff9aa632a07806c3074ca559c97bd37f992d00e2274a80e538d018e1161710a2d4741d6afb81923db4083383eadc1bf341a2d591ae7ea7d8264e91dafdf9e030c9c0f296470673ceaa05ae4c7bcce001280dc4f4b093a8aa02200eabc680ee32a6778e50d88447e634e56f7b867da0a410b8cef727465fdcf36f80115a7d158376ee896a90187ebaaa5fe662fce50a7acce1e0d402ebdf8ff973cbf4a0edec8bb30e5806a9f8c0755af7297e5cccd6a40bc579042c65cd54f4fac305588ed76d6630ca0f6e1828ee3b002fa4bfcfac31df92e050579e973e38be4a343513966ff7e84a4b86ca04ac5e8c525c84a63a8b86ecd80756591ee0050978410a0acbc796eb4ec0ace573b364f2c1833b29aaaad9c0b7d7a48df0f96679578403380cccaaea7498b1c25beffe68a016219084477e80a7bfe79ecf80fb56c61a90f360921e68ddf9edec87de2c877882a5e11252408811e3a37233977d98b76529a63983e8ae8680159e4396c8a964cbecf7fa615a1e7808f343ce0de5ebdf930e905d9f880567e1e848d9a3b325bc727c8c9887bc013d6129b6e03f15f4116f05ce6716bdcdc53b998812946a2ebceccaa17ff618a12b256769817de647b109c00d12832e9889e8720ccd022f27adeb7afc5a53d4bc2a183cb5fa3c3b765985ba2504f051683150a63e636ee491c1621c43a6e471a7b7aa99bae04f45c523f0ad6285176439a8a74a237d2e124754543f6f774db6146080aa3dfb174ee38ba923ea572b48ccf19b982eaec21f90ba2a318812119c7215aefb098ba2cfd8e26eb33146dfffb9b40b48ee1d5598e847f5d068a3f2309aa0973993be692d09c84a2d5ed111ece7bab15caa353be323f280e0fd26d3b0e891aecb96847b67e18a7be3fd9acfd67889738985808316186fc96f2a849e425e9616608f20fff14500ba6b5cbc6247af9884689c858a45c3408c3be5cf902482c275ce423315b478d9836db8d3256ea6f203a9af50b66255c2388760b1233bfd8fb02ed2e9c171b03907698f7fd1415e26ba31bb70a49b22d8566bc4a0d1d2323c333b85cd5de2b085624f09ce59f2caad60a259303a476e447fbc840790ddde3ed40d18777129d64dace317dcdd7e8023cf99d32b36187e874b79d01c37be281d493a2f6ce6816ac4ef3dc7f70afae6be9b79ffb6e92f21346714eebdcccbd8c00a6566ce235f102951009b3039de7f5b4c7dad47235bef8d0473d809abd1a4be5f3f4ca39cb43aa7f6b9eccad1bd25814270268583e407f7ac0b674418507d37701258067cd9dc33ffbdcfbda2071f578303e76e4d876ac8a59b7daffdea59933bf69c330322fc296a337468b83faa03d71411d8fcbe1944c67a671a2e44e7aee54678bc35a141e8d1c8e4ff3a28a3de78f908759de72e22b69302163cd37ec04f7111fb8599ad91dd24d3db5e9e976dd5bb4e19388c9f9c4f03cf00e7fa1eef15ca24d71681f978048cce07352867c6b0e1db1aa799d6c2c7a83e6ab09aa8996084930f67ac710442717dc16d9fef79c3879e9e517743cce132e3ab68b1b1905756594ffbaf5211e2c99a06210674800b2de395e16ab36569c177e9e64d3eff058a78c49607e799b1efcb035178c33f578ded0fc32d6e65d97eccfe6643d2d37d4cfbc9545bc675abde514744d204897f5e30ae9f6420d1036860c1ed3da8b79117c2509c5750b4f5046d8f9be4a50befe52cd71727147d0968594719a1d059ce6d998d3fdd499428c31437f0a6cd5b376bc7fbd24e100b57fb4c834298beb93f07190867e2e7e88d1250645eec6b0228ecf79b4049da39ccc3f463ffe0600d3c17ef63ceb166220908d7f56f8dec2299c41ada396b4431ff643ef24232b817f583cb9d8b57d3de2b57280fac0ec063ca1cf438ab8984c87007114f939fdc22b54955fc8102fda51ceb013c9e325f1233b18693976af3d2cd66d12ae4ff44498d23a555beb7b85f48819e546767710e99d8b6afdc148f3212810b02c27a950c7a87fad4902df25ea2a175d6f84c026e4c7d03e5f876902d8a999b1e131d930eefe62d530daf8e72d19f989aa06c98f5343e5ee6ac8be45427cd0d19603fa3044a3c89c98c52ce0b37f6322a053e2313c9f5f21c7146d5f5a090082d876edd3d6e907243d5af8210c827b8ef8b61f041bd2676678fd1ab8d840bc24e4eb87fa7f9c41ffabe3d72446d412bada3aae338224df0eb22e7f62c9d71230539563cd2691181507c7b5415fae464781ae6113010fdf86884b97a89712d6e64e32ace10d4db177ad2581b62ec43e270ee2b0db2de03628d88209e4ca9ebebe837bd2275dc57899c1590e3f75e9c6e06524bc6f52a693d4cef95797f0886eb4eef1001d2922ce71d5c4e19d1a4904279a2b2f3599319254b4bd4fad390864ddd88aadd5ac5a5ccff944b8773f724a0bd24879d9f3cd27b0ebec114f73448887fe7df6c9e7fad03f4ed94249543f3d15f91247ffa92384b4cf7fbb7a88904f4986ed812a05fc5be477837bc80d3f2d74d008bf75d9c9f3e11a7f580857829e9a62c331881587f7712bedf85a092f29a5d33f4c36f8c269c3621d3bb7badc689454e7303b2a5bcdb30c96b7c1eefb1a813ac06b2733e300d549f8d87ab114768a611d8a051382a055f4b6ca2079cc292cd514e2df7fccc7757c3ac91e825e1a7e1504f3949cacd67303fee43a85581e15a7624dfbb3af731c2085ac2e25c9d8eb0390a62bb78f606c9a4c273a5d63096975daf73cbee876592a7e01689d9b5dfd6187ed4a8a2e915a64d487a17bf92c3eb10e8bc100b4b396469871d55dac84e84bd68d02bc2e1283ac576205d78d29df0e659ed0577355de0087cc737174ff694da2730fa818c0cdb7ae9595a49fedaede570475f1d62aab7bd0965461a6f10eb6a9399e643c9f24cc13568522511c38913c5284dc0b665249da334ad6ea00bfa9dd6f90dab16f02888f0def272dff18e847186cda798d84c769e601caef8df2f828a44"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x40, 0x7, 0xffff, 0x6, 0x386b10b1, 0xe0c6, 0x7, 0x8001, 0x6, 0x7f, 0x7, 0x3, 0x75816ec3, 0x3, 0x0, 0x3, 0x21d, 0xffffff12, 0x2, 0x4, 0x7, 0x4, 0x483, 0xfffff8da, 0x6, 0x4b, 0x7, 0x400, 0x1, 0x7ff, 0xff, 0x0, 0x72, 0x101, 0x9, 0x6, 0x4, 0x1, 0xff, 0x0, 0x0, 0x6, 0x8, 0x40, 0x2, 0x8, 0x0, 0x160d, 0x62, 0xf, 0xd7ed, 0x6, 0x8, 0x9a96, 0x5, 0x0, 0xcd, 0x5, 0xf, 0x4, 0x4d5, 0x5, 0x1, 0x853b, 0x10, 0x4, 0xfffffffb, 0x5, 0xfff, 0x0, 0x40000000, 0x7, 0x7ff, 0xfffffffd, 0x0, 0xec, 0x9, 0x0, 0x2, 0x6, 0x7, 0x2, 0x80000000, 0x2dbd9300, 0x942, 0x400, 0x0, 0x4168dabf, 0x7, 0xfffffff9, 0x4, 0x3, 0x81, 0x8, 0xa, 0x80, 0x9bf, 0x80000001, 0x9, 0x2, 0x3, 0x8, 0x9, 0x93ae, 0xf2, 0x7, 0x400, 0xa, 0x3, 0x100, 0xc, 0x0, 0x6, 0x400, 0x2, 0x80000000, 0x2, 0x1ff, 0x9, 0x4, 0x3, 0x3ec000, 0x10000000, 0x8ae3, 0x101, 0xf8, 0x3, 0x522d727f, 0x7, 0x1, 0x7fffffff, 0x8, 0x4, 0x8, 0x2, 0x2, 0x9, 0x7, 0x9, 0x2, 0xfffffc00, 0x2, 0xc, 0x8, 0x40, 0x85, 0x3, 0x1, 0x1000, 0x0, 0x5e32, 0x5, 0x5a31, 0x0, 0x9, 0x9, 0xc0, 0xd1, 0x200, 0x7, 0xb69, 0x0, 0x5, 0x4, 0x200, 0x2, 0x3ff, 0x8, 0x7, 0x8000, 0x1, 0x6, 0x4, 0xd39, 0x6, 0x7, 0x1, 0x8, 0x6, 0xa4, 0x9, 0x5, 0xf, 0x0, 0x2, 0x8001, 0x1, 0xd, 0x7, 0x9, 0x7cf, 0x3, 0x7, 0x9, 0x9c, 0x5, 0x768, 0x7, 0x6, 0x3, 0x3, 0x2, 0xffffffff, 0x6, 0x9, 0xdea, 0x8, 0xffff, 0x7, 0xffffffff, 0x9, 0x2, 0x0, 0xf, 0x3, 0x401, 0x800, 0x1, 0x9, 0x8, 0x9, 0x6a30, 0x1, 0x9, 0x3, 0x4, 0x40, 0x8, 0x4, 0x800, 0xfffffff5, 0x40, 0x9c, 0x40, 0x1, 0xfffffffd, 0x0, 0x0, 0x7f, 0xf50, 0x1, 0x8001, 0x6, 0x4, 0x1, 0x4, 0xb, 0x81, 0x2, 0x5, 0x800, 0xffff8001, 0x9, 0x4, 0x80]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}]}}]}, 0x2abc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 444.511403ms ago: executing program 1 (id=4203): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"10fa9742846dea296c9d16d6e1249908", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) 384.744009ms ago: executing program 3 (id=4204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b00000002000000"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x318, 0x400001, 0x14}, 0x9c) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x100) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x200, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) pread64(0xffffffffffffffff, &(0x7f0000002180)=""/4091, 0xffb, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004004}, 0x40080) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x5) sendmmsg(r0, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001, 0x4}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000004c0)="95d5bb7a2f2526d075805cf27b58d77d1d706f221a13b23c5e7595802bd082ffdd2d92eadddf84e39374ff8222874ff81a44ebb53f54b4c953cf1122801530847b56662191416b9b19ffe298766117e503a43860001bf49b7e7d717173b3731a6ee2c83e73f79625f7f29524e3352cae391d40cf9b65b2e06d3ef7f34c49b58265cfccd9e7438e001161830dea62191fb6ce33e14a559ed7f916465665328ac8d645384ea35ced2f882bcfa1956d111a40ea06068d403b988316b71b29d6fa", 0xbf}, {&(0x7f0000000580)="717ea549561ffcea262244a65ee8aba2550e0c27fb61f129fef5f97e24bdc234447eb33ef6c4bfbca544c89a13e35e210d25f62e5e3f08d80bd4b60d9456d2574e12f34b69c7c5de90b1875c1d96d063d440f8ae59f4f15a39dec2b55fb63fd72467b3f43774cc6e14835a29e9d0a39e025dbb", 0x73}, {&(0x7f0000000600)="45938ff588de0ca6c9fefa5e4c51ab1a1ee85d5cb07a53a6d460a2225f12408392c3dd79c21b47db22cff8515acb374a476cfb936ab36c34462aca7af6309a203428bf013777fdd71887fafb7af79f965c9c4155875e4dc25fc719bed88bd613606eb914da0b0c67a1f3a7255a8442b4eea8d01740a4447d63a1014d586bf897289dfccf9c3190d51554bde401b819db4eaee34f8636fc4b406922bf29cfd986abe9ec50b263de9d974d6b606350fe5870ea713869e6c69704af58c6d2f7d2d8d71e45c930", 0xc5}, {&(0x7f0000000700)="8f340b852b1167d57c3193f5ee41103fa8e9a0d36ad307033028f766b239892a25a4f53c261f5e42b2d9e4028bdcdbf31e220805818c1626ac61984c5eac77fbafbc95b14f7b7103397ffc4711b60685f1efc2e9f00a1866a4e1e614b0d839e87c8fdbd14885e3b504efb658d29998654c92f113650d0896c0dded2763ecb34a61d914a75a7a132d9433abe188876f171c043d394f2fc1f3656dbfc16bb7e3c919c6e9aa004327f01243072f75f2", 0xae}, {&(0x7f00000007c0)="602cdf7445ee90ef89bdc1e004c9e0caf35623584ab398871946a230983bb9611a0c420a02b8cfebe72ff7d7b3cc83946cca2fb5b60228f76fb641d76bf4ae9ddc3cfdfb23bf275a04a7bfdb3641230f99963b98c667aaebec344dbccce95da3b21968451cc0f203ed564b3c0d102235cd7bb301632280506bb1cedd81af999e2762a0bc447750d6e252a661e77190d51cbde28cdfaeba7adc4554b354a50dd8dc4002b53559d2dd4435926e70ce6f0a4b50d0", 0xb3}, {&(0x7f0000000880)="7ad4103dcd790e314fd73c70f9a5089c82d504d56147504dbd57e86336d0223a4059c1242933c0952d381616628a8bfb49e0dcc3ca6f3bbe5db72abbe948bd40c7bab4efbdc94bbcce14df042aae73789a672e2ef385f737e805dd2ba7d6a4df0fc51849bff95701a1f852ed519e50ea49f4235a9b298ee5fe182934ca1a95d9cb305aa143d2e3c033248713ef8a39f8b7179f3fce817bb072123edd8a56661c57", 0xa1}, {0x0}, {0x0}], 0x8, &(0x7f0000000a80)=[{0xd0, 0x132, 0x7, "8338dc1652617af03adde938c347469d4d802973b3165028f4281bd66ab6201f0a28430e9d478337ac6f3b43f464e5b6c27c146c893c5c02063c9b45a7faf894ae418cf6f2dde42caef43f5955ea246dfa45767b321fc32f369d21bff4c8496d137d14864b943e7ad8be6b3aeac71a1f28d8005395a361eec1c2d77a4875a7d946058d31cea0f6cba96b488f63e4211aa6d11890bc7c0e5b441b555771ab8149def2d30251b80da4f9c32a4781c719bdfd8f27a1cd12ddae62"}, {0xd0, 0x114, 0xd3a, "cade7361d0b8c5d4d03ffddbba30da59bae977b98399363a63d33e1e52cf45f70ce00db9e07a25ed91098f87afc5efe9665b3f3c001b0fab2a4faa4fdfdb4ae4e12ecde5b15bcb24801a83b3ee92197a59eaa77bb5552d72e423da4b7b4d33da7154d0b40352178ec5b9b645c009754833706bfa2b072c520897d02ac2302d7b404a595279a956ca2fc6106142f018732e4fdd7dd2c108ef884cd09b01baf282f5a581dcfe0831849d662af509f434060e1abf2d72c0e0f7a0f65f2b8e"}], 0x1a0}}, {{&(0x7f0000000c40)=@generic={0x29, "b880f32a17d80cd34875060877e457c1b2bc5e8ba077202d3e511330a562a6a52f0269ad15c2f53c9111cfc822f7ebddae002fd46019b29c17f2ba722c5357c53e29d9d3c85b9c0b25777ece312a1c7593e8b044288a2ea875c0e8176b3f7bd01e3f40ffe5f4f7af54bc2429cdb3387cc6e6e3f7e12600b038de8ab6db65"}, 0x80, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=[{0xd8, 0x11, 0x4, "09d929ca32f151a4bd0e2c3496ef64af5b96db0c54c70bf0b6cf149795cc18fff43dd853ee2d53960b5f15d6a52908ae90ef544d604287b76dcd72b108f998cd6e8140bcf53a2ff97de585fbcb02a9661268e028bb1533f5c724d7c18cc1d8e040f1e3ffc558438dd21f0b0548596ec029a8842a8af96cc2fe4ceeaafec2b9c8bc3f10529d836f6d164b8d412dd174f127e052aba972a9354be43b969a9406d66e3dfde48f2f38d8c0a7a9dadac95d6fd10bec8f4e3411cfc13a1cd04571f9ca6a"}, {0xb8, 0x10f, 0x4, "c32bb0ccbaacebc2afe208f9bfad1b8b6f616031323c699783d4d3ffaa43ca26480ccc39ade178c32976fef526240649090bfabaa181331a56621228b5a0ffeb5f598e51d71e648c171919e77fb4e3350f98f28752521ec78966190386b561a1ebad7e687f5d88e8a287d230a17c94f995825884e7d403426907b0676173993c4ba2bcd6f3837c540ebd81567d3ea2d7ce03509fe3ab19f535c1f3e9b128cd2df73b281d11b9"}, {0xc10, 0x193, 0xea3, "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"}, {0x58, 0x3a, 0x5a, "4a7f664aca6a095d1e8cb0f57fd848ff04e49c77a6729dfcd62554ebc0ec16ab6ce8dcad36175c617c22a92bf174162140f12238e7a3013aefd861de3d5f4674e5100dfd"}], 0xdf8}}, {{&(0x7f0000003180)=@l2tp6={0xa, 0x0, 0x9, @empty, 0x400, 0x1}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003200)="8bb4be041d892706071548e2935cabcba3b9a1608498a32431aa816b4ee1122d6e30c8837e1d50c92eef838a3f037aa5f5cfc33e8e7232821b76ea3efa518fdc113a049a4ef311b59c053bf469a6a79ab492ad6977396bf8c1f8ce90ebbe93cc19318e0ded995748b5b5173f8ff9319ccbfdc2b231e77dd907976dac27419c15c50ddd53281f67ba28e6cca1aa45660cd6f76cc7761df35979799da669f7893c57cd8efd0a07a627d52eff0b4d2bc84a229e84298e7ee2c5b94c0e35d795111f702d4aeb7831f1131f", 0xc9}, {&(0x7f0000002140)}, {&(0x7f0000003300)="e25480cbb0d87819de0d2a704b2c8d431fa81ac186a499903b73110b8037a9dd2382e53c962d795a4787bea0265035fd2095e4cb9b060332700c2b1a8ada0a30e45df72d94d15b4e39238239ce3ac4a3e7f483b53fc43a5f43d08abfcf54972107db658d40341adbabe8db978651dc09abf95b74f92556b88fdc02d9229f303bf3ab79b46eb5b79d2d", 0x89}, {&(0x7f00000033c0)="c6581496c892f9b4ce920eeaeea80e38f30e28f21b71ee3fcd21124281f906f2089fcb54d4a7956680219096fb434ad2e842ff4e06ebbb075fc5841b6c5d7828b0f6161afa78be0a1da5e4464b94eaab305ce3ccbc77f074580bf3a4415d553f63a8bff147b14e9858a54545413f6ddd879936876f996c763e52d7c078d7118cf291b8bf544d5edde93d896d99b6552a752fc904e992461798acf984502889bc78681357143bde46b9b8d7a54cbc9edfe0", 0xb1}], 0x4, &(0x7f00000034c0)=[{0xe0, 0x104, 0x0, "53a0ff9be808951e148923117a6c8b144bc6a08ae4e9419433d063cc98562a135b3e7ed37220490ee37bd623c87687768c9438e7d674accf2a06f6647337cbbd4b33a1a61d4d8bbcda6937f8f5bb17d26cc77504e786c84aad6f9f0d8c6079cab9493d8d5d1b03d10df47ac18ab9e91bad999f721704bfcd698d35110d4f29c85c7c61f63098a54fa0711f9e547d4c082876eb6328fe97d37f5678cacc25e2615af8888485033477a0d741f9b6380a4e344cab2a1fdde4a02bc836ff0e3dce7d963b6b84a43e2d966e9b75499f0289"}, {0xf8, 0x119, 0xa, "1f141e7fb827837561a8faf5fdb29aa8949851c43cfbaa167a16ea1e817d39fba30fecf32d2017385e211572aa9fb37492aa9044b87765f27425cb5c16eac5629c2b5879b68596f32dcd04915b56ba74fd5cd3ca3b1edb7527b195a32f4a79a84f7e10fe4517b2e46ee4f60a919bc50cfa96e444f6d8d60eacd601ab83e96f3a93472fdf9a0c3b023aa7ce7b4cffec34d96cd030048a899dd4af64f6695f4e28949d36a2c5b334ea7b7bc2fe1b4262b28bc99d2c2ca17f1b913123441f030e27d73c81f445baeecffff9f09090884ee886b5bbcef1994d06b076a17422b66df9543b3731"}], 0x1d8}}], 0x3, 0x40010) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x7) 336.641948ms ago: executing program 1 (id=4205): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"10fa9742846dea296c9d16d6e1249908", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) (fail_nth: 2) 228.278009ms ago: executing program 0 (id=4206): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000005e43bb387ffa6532000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="5f4095965ed2f72f5ee5b25eac53e310ea47cac378cf5090cbfc40021ae3ef13ed9207854c7f1edbf4f496e459c399d99d81f8b632f2b775272fff3ac54e86fd24828fb321ed5b55c2fa6de7a1231e48e90b77cda9954627717b3af0a08fc71e765dd0f9238b7df50893f5e793b2ea1c17", @ANYRES16, @ANYRESDEC, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYRES32, @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='xen_mmu_alloc_ptpage\x00', r5}, 0x18) io_setup(0x23, &(0x7f0000000280)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x437, 0x1, 0x25dfdbf4, {0x0, 0x0, 0x0, r7, 0x40c89}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040880) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 5 (id=4207): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f00000002c0)=""/212, 0xd4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000180)={0x81, 0x5, 0x1, 'queue1\x00', 0xfffffffe}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) kernel console output (not intermixed with test programs): 8124][T21040] walk_component+0x353/0x5b0 [ 1438.868144][T21040] link_path_walk+0x627/0xe20 [ 1438.868172][T21040] path_openat+0x1b0/0x2cb0 [ 1438.868190][T21040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.868218][T21040] ? __pfx_path_openat+0x10/0x10 [ 1438.868244][T21040] do_filp_open+0x20b/0x470 [ 1438.868265][T21040] ? __pfx_do_filp_open+0x10/0x10 [ 1438.868294][T21040] ? __pfx_kfree_link+0x10/0x10 [ 1438.868329][T21040] ? alloc_fd+0x471/0x7d0 [ 1438.868355][T21040] do_sys_openat2+0x11b/0x1d0 [ 1438.868379][T21040] ? __pfx_do_sys_openat2+0x10/0x10 [ 1438.868406][T21040] ? __fget_files+0x20e/0x3c0 [ 1438.868443][T21040] __x64_sys_openat+0x174/0x210 [ 1438.868468][T21040] ? __pfx___x64_sys_openat+0x10/0x10 [ 1438.868491][T21040] ? ksys_write+0x1ac/0x250 [ 1438.868519][T21040] do_syscall_64+0xcd/0x4e0 [ 1438.868545][T21040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.868566][T21040] RIP: 0033:0x7f336838d590 [ 1438.868586][T21040] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1438.868604][T21040] RSP: 002b:00007f336925af70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1438.868622][T21040] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f336838d590 [ 1438.868633][T21040] RDX: 0000000000000000 RSI: 00007f3368411f2e RDI: 00000000ffffff9c [ 1438.868644][T21040] RBP: 00007f3368411f2e R08: 0000000000000000 R09: 0000000000000000 [ 1438.868655][T21040] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1438.868666][T21040] R13: 00007f33685d6038 R14: 00007f33685d5fa0 R15: 00007ffef3e5c5c8 [ 1438.868691][T21040] [ 1439.172776][T18842] asix 1-1:0.251: probe with driver asix failed with error -32 [ 1439.242453][T21041] CIFS: Unable to determine destination address [ 1439.502482][T18829] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1439.712561][T18829] usb 5-1: Using ep0 maxpacket: 8 [ 1439.722954][T18829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1439.732844][T18829] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1440.237131][T18829] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1440.246655][T18829] usb 5-1: New USB device strings: Mfr=6, Product=255, SerialNumber=230 [ 1440.257147][T18829] usb 5-1: Product: syz [ 1440.261395][T18829] usb 5-1: Manufacturer: syz [ 1440.266358][T18829] usb 5-1: SerialNumber: syz [ 1440.272876][T18829] usb 5-1: config 0 descriptor?? [ 1440.545666][T18842] usb 1-1: USB disconnect, device number 98 [ 1440.742272][T21057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3700'. [ 1440.908912][T21058] geneve2: entered promiscuous mode [ 1440.921301][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.930545][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.941557][T19447] usb 5-1: USB disconnect, device number 119 [ 1440.961433][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.096741][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1442.722562][ T30] audit: type=1400 audit(1758418111.146:595): avc: denied { bind } for pid=21083 comm="syz.4.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1442.927047][ T30] audit: type=1400 audit(1758418111.516:596): avc: denied { map } for pid=21092 comm="syz.1.3711" path="socket:[73560]" dev="sockfs" ino=73560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1442.959245][T21101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3710'. [ 1442.991429][T21080] ISOFS: Unable to identify CD-ROM format. [ 1443.085953][T21101] input: syz0 as /devices/virtual/input/input39 [ 1443.104954][ T30] audit: type=1400 audit(1758418111.516:597): avc: denied { read } for pid=21092 comm="syz.1.3711" path="socket:[73560]" dev="sockfs" ino=73560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1443.128067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.236451][T21107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 1444.011827][T21119] hub 9-0:1.0: USB hub found [ 1444.017846][T21119] hub 9-0:1.0: 1 port detected [ 1444.285938][T21122] genirq: Flags mismatch irq 5. 00200000 (pcl812) vs. 00200000 (at-a2150c) [ 1445.111193][T18842] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1445.202493][T19447] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1445.333037][T18842] usb 2-1: device descriptor read/64, error -71 [ 1445.622459][T18842] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1446.126647][T21140] block nbd0: shutting down sockets [ 1446.147919][T21146] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 1446.154521][T21146] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1446.162198][T21146] vhci_hcd vhci_hcd.0: Device attached [ 1446.167981][T21148] vhci_hcd: connection closed [ 1446.172660][ T6969] vhci_hcd: stop threads [ 1446.205954][T19447] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.221771][ T6969] vhci_hcd: release socket [ 1446.233009][T19447] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1446.256059][ T6969] vhci_hcd: disconnect device [ 1446.282709][T18842] usb 2-1: device descriptor read/64, error -71 [ 1446.290156][T19447] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1446.329589][T19447] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1446.358057][T19447] usb 4-1: SerialNumber: syz [ 1446.397825][T18842] usb usb2-port1: attempt power cycle [ 1446.603953][T19447] usb 4-1: 0:2 : does not exist [ 1446.724835][T19447] usb 4-1: USB disconnect, device number 10 [ 1446.803326][T18842] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1446.823059][T18842] usb 2-1: device descriptor read/8, error -71 [ 1447.111616][T18842] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1447.155849][T18842] usb 2-1: device descriptor read/8, error -71 [ 1447.472613][T18842] usb usb2-port1: unable to enumerate USB device [ 1447.832540][T18842] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1448.025863][T18842] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1448.039986][T18842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1448.066230][T21181] No buffer was provided with the request [ 1448.153516][T18842] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1448.341617][T18842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.353192][T18842] usb 2-1: config 0 descriptor?? [ 1448.363330][T21171] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1448.399191][T18842] hub 2-1:0.0: USB hub found [ 1448.673839][T18842] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1448.690318][T18842] usbhid 2-1:0.0: can't add hid device: -71 [ 1448.827046][T18842] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1448.958406][T18842] usb 2-1: USB disconnect, device number 94 [ 1450.510278][T21218] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1451.153827][T21218] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1451.424718][T21229] FAULT_INJECTION: forcing a failure. [ 1451.424718][T21229] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.683415][T21229] CPU: 0 UID: 0 PID: 21229 Comm: syz.0.3737 Not tainted syzkaller #0 PREEMPT(full) [ 1451.683432][T21229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1451.683439][T21229] Call Trace: [ 1451.683444][T21229] [ 1451.683448][T21229] dump_stack_lvl+0x16c/0x1f0 [ 1451.683467][T21229] should_fail_ex+0x512/0x640 [ 1451.683482][T21229] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1451.683499][T21229] should_failslab+0xc2/0x120 [ 1451.683516][T21229] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1451.683532][T21229] ? __alloc_skb+0x2b2/0x380 [ 1451.683548][T21229] __alloc_skb+0x2b2/0x380 [ 1451.683560][T21229] ? __pfx___alloc_skb+0x10/0x10 [ 1451.683574][T21229] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1451.683592][T21229] netlink_alloc_large_skb+0x69/0x130 [ 1451.683608][T21229] netlink_sendmsg+0x6a1/0xdd0 [ 1451.683625][T21229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1451.683645][T21229] ____sys_sendmsg+0xa95/0xc70 [ 1451.683663][T21229] ? copy_msghdr_from_user+0x10a/0x160 [ 1451.683678][T21229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1451.683701][T21229] ___sys_sendmsg+0x134/0x1d0 [ 1451.683716][T21229] ? __pfx____sys_sendmsg+0x10/0x10 [ 1451.683751][T21229] __sys_sendmsg+0x16d/0x220 [ 1451.683766][T21229] ? __pfx___sys_sendmsg+0x10/0x10 [ 1451.683788][T21229] do_syscall_64+0xcd/0x4e0 [ 1451.683804][T21229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.683816][T21229] RIP: 0033:0x7fecd418ec29 [ 1451.683825][T21229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.683836][T21229] RSP: 002b:00007fecd5026038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.683847][T21229] RAX: ffffffffffffffda RBX: 00007fecd43d5fa0 RCX: 00007fecd418ec29 [ 1451.683855][T21229] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1451.683862][T21229] RBP: 00007fecd5026090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.683868][T21229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.683875][T21229] R13: 00007fecd43d6038 R14: 00007fecd43d5fa0 R15: 00007fff4dbb8448 [ 1451.683888][T21229] [ 1452.402648][T14804] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1452.622953][T14804] usb 2-1: Using ep0 maxpacket: 16 [ 1452.665595][T14804] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1452.690213][T14804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.735475][T14804] usb 2-1: config 0 descriptor?? [ 1453.070164][ T30] audit: type=1400 audit(1758418121.656:598): avc: denied { write } for pid=21246 comm="syz.4.3743" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1453.072542][T18829] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1453.127456][T21247] FAULT_INJECTION: forcing a failure. [ 1453.127456][T21247] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.142629][ T30] audit: type=1400 audit(1758418121.686:599): avc: denied { open } for pid=21246 comm="syz.4.3743" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1453.168502][T21231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.180188][T21247] CPU: 0 UID: 0 PID: 21247 Comm: syz.4.3743 Not tainted syzkaller #0 PREEMPT(full) [ 1453.180211][T21247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1453.180221][T21247] Call Trace: [ 1453.180227][T21247] [ 1453.180233][T21247] dump_stack_lvl+0x16c/0x1f0 [ 1453.180259][T21247] should_fail_ex+0x512/0x640 [ 1453.180280][T21247] ? fs_reclaim_acquire+0xae/0x150 [ 1453.180302][T21247] should_failslab+0xc2/0x120 [ 1453.180319][T21247] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1453.180340][T21247] ? netfs_alloc_request+0x8f0/0xce0 [ 1453.180358][T21247] ? netfs_folioq_alloc+0x9e/0x3b0 [ 1453.180381][T21247] ? do_raw_spin_unlock+0x172/0x230 [ 1453.180400][T21247] netfs_folioq_alloc+0x9e/0x3b0 [ 1453.180422][T21247] rolling_buffer_init+0x26/0xb0 [ 1453.180442][T21247] netfs_create_write_req+0x110/0x890 [ 1453.180458][T21247] netfs_unbuffered_write_iter_locked+0x12a/0xa00 [ 1453.180484][T21247] netfs_unbuffered_write_iter+0x414/0x6d0 [ 1453.180505][T21247] v9fs_file_write_iter+0xbf/0x100 [ 1453.180529][T21247] vfs_write+0x7d3/0x11d0 [ 1453.180547][T21247] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 1453.180567][T21247] ? __pfx___mutex_lock+0x10/0x10 [ 1453.180591][T21247] ? __pfx_vfs_write+0x10/0x10 [ 1453.180621][T21247] ksys_write+0x12a/0x250 [ 1453.180634][T21247] ? __pfx_ksys_write+0x10/0x10 [ 1453.180654][T21247] do_syscall_64+0xcd/0x4e0 [ 1453.180676][T21247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.180694][T21247] RIP: 0033:0x7f1d25d8ec29 [ 1453.180708][T21247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.180722][T21247] RSP: 002b:00007f1d26c0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1453.180741][T21247] RAX: ffffffffffffffda RBX: 00007f1d25fd5fa0 RCX: 00007f1d25d8ec29 [ 1453.180751][T21247] RDX: 0000000000000013 RSI: 0000200000000080 RDI: 0000000000000007 [ 1453.180759][T21247] RBP: 00007f1d26c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.180766][T21247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.180774][T21247] R13: 00007f1d25fd6038 R14: 00007f1d25fd5fa0 R15: 00007ffd74845768 [ 1453.180793][T21247] [ 1453.395227][T21231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.404275][ T30] audit: type=1400 audit(1758418121.706:600): avc: denied { read } for pid=21246 comm="syz.4.3743" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1453.426827][T21231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.429085][T21247] futex_wake_op: syz.4.3743 tries to shift op by -1; fix this program [ 1453.435573][T21231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.604414][T18829] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 1453.612787][T18829] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 1453.620956][T18829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.631631][T18829] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1453.644447][T18829] usb 4-1: config 0 has no interface number 0 [ 1453.650558][T18829] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1453.661267][T18829] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1453.674417][T18829] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1453.685040][T18829] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1453.703453][T18829] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1453.712922][T18829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.799660][T18829] usb 4-1: config 0 descriptor?? [ 1453.807560][T18829] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1453.820902][T14804] usbhid 2-1:0.0: can't add hid device: -71 [ 1453.828445][T21253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1453.837455][T14804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1453.843340][T14804] usb 2-1: USB disconnect, device number 95 [ 1454.113710][T18829] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 1454.153273][T18829] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1454.355058][T18829] usb 4-1: MIDIStreaming interface descriptor not found [ 1454.569106][T18829] usb 4-1: USB disconnect, device number 11 [ 1454.625319][ T30] audit: type=1400 audit(1758418123.196:601): avc: denied { create } for pid=21267 comm="syz.1.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1455.079637][ T30] audit: type=1400 audit(1758418123.196:602): avc: denied { listen } for pid=21267 comm="syz.1.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1455.109862][ T30] audit: type=1400 audit(1758418123.206:603): avc: denied { ioctl } for pid=21267 comm="syz.1.3748" path="socket:[74961]" dev="sockfs" ino=74961 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1457.232583][T18829] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1457.338100][T21296] siw: device registration error -23 [ 1457.409666][T18829] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1457.440678][T18829] usb 4-1: config 0 has no interface number 0 [ 1457.470556][T21299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1457.622457][T18829] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1457.632520][T18829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.640649][T18829] usb 4-1: Product: syz [ 1457.646533][T18829] usb 4-1: Manufacturer: syz [ 1457.651463][T18829] usb 4-1: SerialNumber: syz [ 1457.746981][T18829] usb 4-1: config 0 descriptor?? [ 1458.362972][T21304] loop6: detected capacity change from 0 to 2560 [ 1458.369886][T21304] buffer_io_error: 11 callbacks suppressed [ 1458.369920][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.383803][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.391815][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.401358][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.409260][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.417184][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.425123][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.433060][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.440878][T21304] ldm_validate_partition_table(): Disk read failed. [ 1458.447561][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.455424][T21304] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.463398][T21304] Dev loop6: unable to read RDB block 0 [ 1458.469115][T21304] loop6: unable to read partition table [ 1458.474845][T21304] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1458.746126][T18829] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1458.756313][T18829] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1458.785273][T18829] asix 4-1:0.251: probe with driver asix failed with error -32 [ 1458.880692][T21313] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1459.004832][T21317] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1459.704002][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3762'. [ 1459.997004][T21333] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1460.065278][T21334] loop6: detected capacity change from 0 to 2560 [ 1460.082441][T21334] ldm_validate_partition_table(): Disk read failed. [ 1460.092037][T21334] Dev loop6: unable to read RDB block 0 [ 1460.101306][T21334] loop6: unable to read partition table [ 1460.108726][T21334] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1460.376753][T21333] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1460.385794][T21333] netlink: 'syz.0.3765': attribute type 6 has an invalid length. [ 1460.394324][T21333] netlink: 'syz.0.3765': attribute type 5 has an invalid length. [ 1460.402068][T21333] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1460.444408][T21333] No buffer was provided with the request [ 1460.794590][T14804] usb 4-1: USB disconnect, device number 12 [ 1461.160765][T21343] tmpfs: Bad value for 'mpol' [ 1461.717153][ T30] audit: type=1400 audit(1758418130.116:604): avc: denied { watch } for pid=21332 comm="syz.0.3765" path="/105/file1" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1461.752447][ T30] audit: type=1400 audit(1758418130.116:605): avc: denied { watch_sb watch_reads } for pid=21332 comm="syz.0.3765" path="/105/file1" dev="tmpfs" ino=586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1461.792494][T18842] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1461.845008][T14804] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1461.993053][T18842] usb 2-1: no configurations [ 1461.997644][T18842] usb 2-1: can't read configurations, error -22 [ 1462.013802][T14804] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1462.021974][T14804] usb 4-1: config 0 has no interface number 1 [ 1462.029463][T14804] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1462.040152][T14804] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1462.056902][T14804] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1462.066428][T14804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1462.075583][T14804] usb 4-1: SerialNumber: syz [ 1462.081701][T14804] usb 4-1: config 0 descriptor?? [ 1462.142629][T18842] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1462.291392][T14804] usb 4-1: Found UVC 0.00 device (0002:0000) [ 1462.293173][T18842] usb 2-1: no configurations [ 1462.307674][T14804] usb 4-1: No valid video chain found. [ 1462.308849][T18842] usb 2-1: can't read configurations, error -22 [ 1462.319922][T18842] usb usb2-port1: attempt power cycle [ 1462.324098][T14804] usb 4-1: USB disconnect, device number 13 [ 1462.683315][T18842] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1462.703693][T18842] usb 2-1: no configurations [ 1462.708315][T18842] usb 2-1: can't read configurations, error -22 [ 1462.953127][T18842] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1463.045357][T18842] usb 2-1: no configurations [ 1463.080834][T18842] usb 2-1: can't read configurations, error -22 [ 1463.367093][T18842] usb usb2-port1: unable to enumerate USB device [ 1464.101761][ T30] audit: type=1400 audit(1758418132.416:606): avc: denied { read } for pid=21357 comm="syz.2.3773" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1465.092642][T21377] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1465.107419][T21379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3777'. [ 1465.142867][T21377] netlink: 'syz.1.3776': attribute type 12 has an invalid length. [ 1465.180933][ T64] Bluetooth: hci1: Frame reassembly failed (-84) [ 1465.792756][ T30] audit: type=1400 audit(1758418134.376:607): avc: denied { rename } for pid=21376 comm="syz.1.3776" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1465.807809][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 1466.148641][T21397] geneve3: entered promiscuous mode [ 1466.182768][T21397] geneve3: entered allmulticast mode [ 1466.630268][T21407] ptrace attach of "./syz-executor exec"[18165] was attempted by "./syz-executor exec"[21407] [ 1466.646430][ T30] audit: type=1400 audit(1758418135.236:608): avc: denied { getopt } for pid=21406 comm="syz.2.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1466.666082][ C0] vkms_vblank_simulate: vblank timer overrun [ 1466.742593][T21409] befs: (nbd2): No write support. Marking filesystem read-only [ 1466.753689][T21409] nbd_handle_cmd: 2 callbacks suppressed [ 1466.753720][T21409] block nbd2: Attempted send on invalid socket [ 1466.765880][T21409] blk_print_req_error: 25 callbacks suppressed [ 1466.765901][T21409] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1466.782947][T21409] befs: (nbd2): unable to read superblock [ 1467.526121][T14220] Bluetooth: hci1: command 0x1003 tx timeout [ 1467.526558][ T5854] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1470.486561][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1470.501136][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1470.510114][T21447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3793'. [ 1470.849160][T20023] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1470.860481][T20023] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1470.869770][T20023] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1470.877477][T20023] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1470.889274][T20023] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1471.454556][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1471.891000][T21449] chnl_net:caif_netlink_parms(): no params data found [ 1472.781175][T21479] siw: device registration error -23 [ 1472.973697][T20023] Bluetooth: hci1: command tx timeout [ 1472.995040][T21449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.003637][T21449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.012605][T21449] bridge_slave_0: entered allmulticast mode [ 1473.033166][T21449] bridge_slave_0: entered promiscuous mode [ 1473.041335][T21449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.055522][T21449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.072154][T21449] bridge_slave_1: entered allmulticast mode [ 1473.092722][T21449] bridge_slave_1: entered promiscuous mode [ 1473.152862][T21449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.292924][T21449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.135816][ T30] audit: type=1400 audit(1758418142.726:609): avc: denied { setopt } for pid=21486 comm="syz.0.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1474.308001][T21449] team0: Port device team_slave_0 added [ 1474.319661][T21449] team0: Port device team_slave_1 added [ 1474.382429][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1474.396640][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1474.405684][T21498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3805'. [ 1474.812496][T14804] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1475.022574][T20023] Bluetooth: hci1: command tx timeout [ 1475.634937][T21449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.641898][T21449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.698520][T21449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.741010][T21449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.770194][T21449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.775292][T14804] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1475.815857][T14804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1475.893652][T21510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.092133][T14804] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1476.117315][T21449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.158953][T14804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.209703][T21449] hsr_slave_0: entered promiscuous mode [ 1476.221601][T21449] hsr_slave_1: entered promiscuous mode [ 1476.256323][T14804] usb 2-1: config 0 descriptor?? [ 1476.400240][T21496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1476.434144][T14804] hub 2-1:0.0: USB hub found [ 1477.102730][T14804] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1477.130507][T21518] syz.3.3809 (21518): drop_caches: 2 [ 1477.131320][T20023] Bluetooth: hci1: command tx timeout [ 1477.150821][T14804] usbhid 2-1:0.0: can't add hid device: -71 [ 1477.181397][T14804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1477.254909][T14804] usb 2-1: USB disconnect, device number 100 [ 1477.426168][T21449] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1477.436583][T21449] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1477.488048][T21449] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1477.531082][T21449] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1477.580636][T21531] fuse: Unknown parameter '017777777777777777777770x00000000000000050x000000000000000500000000000000000000' [ 1477.641685][T21449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.670047][T21449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.690096][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.697278][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.715609][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.722794][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.073797][T21449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.173336][T20023] Bluetooth: hci1: command tx timeout [ 1479.572580][T14804] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1479.631454][T21567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3820'. [ 1479.703950][T21449] veth0_vlan: entered promiscuous mode [ 1479.724205][T21449] veth1_vlan: entered promiscuous mode [ 1479.729679][T14804] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1479.739441][T14804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.751335][T14804] usb 4-1: Product: syz [ 1479.762538][T19445] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1479.775457][T14804] usb 4-1: Manufacturer: syz [ 1479.787751][T21449] veth0_macvtap: entered promiscuous mode [ 1479.791447][T14804] usb 4-1: SerialNumber: syz [ 1479.813905][T21449] veth1_macvtap: entered promiscuous mode [ 1479.856866][T21449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.871429][T21449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.891660][ T2959] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.972837][T19445] usb 3-1: Using ep0 maxpacket: 32 [ 1479.974404][T19445] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1479.974434][T19445] usb 3-1: config 0 has no interface number 0 [ 1479.981627][T19445] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1479.981656][T19445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.981674][T19445] usb 3-1: Product: syz [ 1479.981689][T19445] usb 3-1: Manufacturer: syz [ 1479.981703][T19445] usb 3-1: SerialNumber: syz [ 1479.984667][T19445] usb 3-1: config 0 descriptor?? [ 1479.986497][ T2959] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.986536][ T2959] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.986567][ T2959] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.987413][T19445] smsc95xx v2.0.0 [ 1480.205278][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.214125][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.297150][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.305562][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.423828][T19445] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1480.435133][T19445] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1480.921030][ T30] audit: type=1400 audit(1758418149.506:610): avc: denied { mount } for pid=21563 comm="syz.2.3819" name="/" dev="autofs" ino=76771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1481.027587][ T30] audit: type=1400 audit(1758418149.536:611): avc: denied { read write } for pid=21563 comm="syz.2.3819" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1481.168569][T14804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1481.189223][T14804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1481.210339][T14804] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1481.219399][ T30] audit: type=1400 audit(1758418149.536:612): avc: denied { open } for pid=21563 comm="syz.2.3819" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1481.844973][T14804] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 1481.857040][ T30] audit: type=1400 audit(1758418149.536:613): avc: denied { ioctl } for pid=21563 comm="syz.2.3819" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1481.986167][T14804] usb 4-1: USB disconnect, device number 14 [ 1482.015944][ T30] audit: type=1400 audit(1758418149.886:614): avc: denied { shutdown } for pid=21559 comm="syz.3.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1482.170654][T19445] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1482.184275][T19445] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1482.261996][T19445] usb 3-1: USB disconnect, device number 115 [ 1482.618119][T21596] hub 9-0:1.0: USB hub found [ 1482.624183][T21596] hub 9-0:1.0: 1 port detected [ 1483.993830][ T30] audit: type=1400 audit(1758418152.586:615): avc: denied { unmount } for pid=18165 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1484.156568][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.450235][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3831'. [ 1484.471249][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3830'. [ 1485.248071][T21617] geneve2: entered promiscuous mode [ 1485.253554][ T30] audit: type=1400 audit(1758418153.486:616): avc: denied { mounton } for pid=21621 comm="syz.2.3832" path="/file0" dev="ramfs" ino=76975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1491.167236][T21633] ISOFS: Unable to identify CD-ROM format. [ 1491.376332][ T30] audit: type=1326 audit(1758418159.916:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21634 comm="syz.1.3835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f0cf8ec29 code=0x0 [ 1491.918733][T21644] siw: device registration error -23 [ 1492.841792][T21646] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 1492.888274][T21646] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1494.231987][ T30] audit: type=1400 audit(1758418162.816:618): avc: denied { read write } for pid=21673 comm="syz.0.3844" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1494.326436][ T30] audit: type=1400 audit(1758418162.846:619): avc: denied { open } for pid=21673 comm="syz.0.3844" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1495.347158][T21683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1495.437164][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1495.971392][T21694] o2cb: This node has not been configured. [ 1495.977677][T21694] o2cb: Cluster check failed. Fix errors before retrying. [ 1495.985028][T21694] (syz.0.3849,21694,0):user_dlm_register:674 ERROR: status = -22 [ 1495.992868][T21694] (syz.0.3849,21694,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 1497.703968][T21709] loop6: detected capacity change from 0 to 2560 [ 1497.710993][T21709] buffer_io_error: 32 callbacks suppressed [ 1497.711003][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.724805][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.732746][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.740615][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.748595][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.756555][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.764434][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.772254][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.780235][T21709] ldm_validate_partition_table(): Disk read failed. [ 1497.786859][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.794718][T21709] Buffer I/O error on dev loop6, logical block 0, async page read [ 1497.802643][T21709] Dev loop6: unable to read RDB block 0 [ 1497.808400][T21709] loop6: unable to read partition table [ 1497.814125][T21709] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1498.753445][T18872] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.974635][T21705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.982663][T21705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.383886][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1500.969996][T21739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1501.089292][T21705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.108952][T21705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.123677][ T30] audit: type=1400 audit(1758418169.716:620): avc: denied { execute } for pid=21741 comm="syz.3.3862" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1501.255382][ T30] audit: type=1400 audit(1758418169.746:621): avc: denied { ioctl } for pid=21741 comm="syz.3.3862" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1501.445984][ T64] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.476051][T21721] : entered promiscuous mode [ 1501.553113][ T64] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.577731][ T64] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.588686][ T64] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.605245][ T64] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.617559][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.748120][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.899092][T21761] loop6: detected capacity change from 0 to 2560 [ 1501.920717][T21761] ldm_validate_partition_table(): Disk read failed. [ 1501.930633][T21761] Dev loop6: unable to read RDB block 0 [ 1501.957453][T21761] loop6: unable to read partition table [ 1501.964969][T21761] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1502.213260][T21760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1503.197360][T19561] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1504.461175][T19561] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1504.576795][T21781] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1504.608801][T19561] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1504.630915][T19561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 57250, setting to 1024 [ 1504.648960][T19561] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1504.966485][T21792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'. [ 1505.296189][T21794] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3873'. [ 1505.752652][T21800] ISOFS: Unable to identify CD-ROM format. [ 1506.036666][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3878'. [ 1506.379148][T15689] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1506.431242][T19561] usb 3-1: string descriptor 0 read error: -71 [ 1506.540359][T19561] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1506.561479][T19561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.575171][T15689] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 1506.576684][T19561] usb 3-1: config 0 descriptor?? [ 1506.601026][T15689] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1506.609784][T19561] usb 3-1: can't set config #0, error -71 [ 1506.648278][T19561] usb 3-1: USB disconnect, device number 116 [ 1506.734095][T15689] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1506.740004][T21817] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1506.749630][T21817] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1506.848998][T21817] vhci_hcd vhci_hcd.0: Device attached [ 1507.314846][T21817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3882'. [ 1507.362456][T18842] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1507.424926][T15689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.435477][T18840] usb 34-1: SetAddress Request (2) to port 0 [ 1507.455129][T15689] usb 2-1: Product: syz [ 1507.459567][T15689] usb 2-1: Manufacturer: syz [ 1507.464687][T15689] usb 2-1: SerialNumber: syz [ 1507.475359][T15689] rndis_host 2-1:7.0: skipping garbage [ 1507.482850][T15689] usb 2-1: bad CDC descriptors [ 1507.490617][T15689] option 2-1:7.0: GSM modem (1-port) converter detected [ 1507.514272][T21818] vhci_hcd: connection closed [ 1507.582722][ T64] vhci_hcd: stop threads [ 1507.591609][ T64] vhci_hcd: release socket [ 1507.602923][T18840] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1507.610523][ T64] vhci_hcd: disconnect device [ 1507.753888][T18842] usb 4-1: Using ep0 maxpacket: 8 [ 1507.762438][T21826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1507.930790][T18840] usb 34-1: enqueue for inactive port 0 [ 1507.963491][T18842] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1507.973347][T18842] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1507.982603][T18842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.990838][T18842] usb 4-1: Product: syz [ 1507.995301][T18842] usb 4-1: Manufacturer: syz [ 1507.999999][T18842] usb 4-1: SerialNumber: syz [ 1508.035987][T18842] usb 4-1: config 0 descriptor?? [ 1508.062742][T18842] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1508.116346][T15689] usb 2-1: USB disconnect, device number 101 [ 1508.190966][T15689] option 2-1:7.0: device disconnected [ 1508.353148][T18840] usb usb34-port1: attempt power cycle [ 1509.093972][T18842] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1509.117990][T18842] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1509.673231][T21842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 1509.750128][T21845] FAULT_INJECTION: forcing a failure. [ 1509.750128][T21845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.896358][T21845] CPU: 1 UID: 0 PID: 21845 Comm: syz.1.3888 Not tainted syzkaller #0 PREEMPT(full) [ 1509.896384][T21845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1509.896396][T21845] Call Trace: [ 1509.896402][T21845] [ 1509.896409][T21845] dump_stack_lvl+0x16c/0x1f0 [ 1509.896438][T21845] should_fail_ex+0x512/0x640 [ 1509.896467][T21845] _copy_from_user+0x2e/0xd0 [ 1509.896499][T21845] vmemdup_user+0x66/0xe0 [ 1509.896521][T21845] __sys_bpf+0x3cad/0x4de0 [ 1509.896550][T21845] ? __pfx___sys_bpf+0x10/0x10 [ 1509.896575][T21845] ? ksys_write+0x190/0x250 [ 1509.896599][T21845] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1509.896637][T21845] ? fput+0x9b/0xd0 [ 1509.896662][T21845] ? ksys_write+0x1ac/0x250 [ 1509.896681][T21845] ? __pfx_ksys_write+0x10/0x10 [ 1509.896704][T21845] __x64_sys_bpf+0x78/0xc0 [ 1509.896728][T21845] ? lockdep_hardirqs_on+0x7c/0x110 [ 1509.896752][T21845] do_syscall_64+0xcd/0x4e0 [ 1509.896777][T21845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.896796][T21845] RIP: 0033:0x7f0f0cf8ec29 [ 1509.896812][T21845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.896828][T21845] RSP: 002b:00007f0f0dd5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1509.896847][T21845] RAX: ffffffffffffffda RBX: 00007f0f0d1d5fa0 RCX: 00007f0f0cf8ec29 [ 1509.896859][T21845] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1509.896871][T21845] RBP: 00007f0f0dd5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.896882][T21845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.896893][T21845] R13: 00007f0f0d1d6038 R14: 00007f0f0d1d5fa0 R15: 00007ffce65439f8 [ 1509.896917][T21845] [ 1510.271779][T18840] usb usb34-port1: unable to enumerate USB device [ 1511.422234][T21857] hub 9-0:1.0: USB hub found [ 1511.430742][T21857] hub 9-0:1.0: 1 port detected [ 1512.281021][ T30] audit: type=1400 audit(1758418180.866:622): avc: denied { map } for pid=21864 comm="syz.0.3894" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1512.428551][T15689] usb 4-1: USB disconnect, device number 15 [ 1512.502468][T18840] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1513.162402][T18840] usb 2-1: Using ep0 maxpacket: 8 [ 1513.168922][T18840] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.182606][T18840] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1513.195211][T18840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.684892][T21878] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1513.693931][T21878] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1513.703745][T21878] netlink: 'syz.0.3898': attribute type 6 has an invalid length. [ 1513.711463][T21878] netlink: 'syz.0.3898': attribute type 5 has an invalid length. [ 1513.719225][T21878] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1513.731431][T21878] No buffer was provided with the request [ 1514.673738][T21896] loop6: detected capacity change from 0 to 2560 [ 1514.685371][T21896] buffer_io_error: 32 callbacks suppressed [ 1514.691242][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.700575][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.709304][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.718047][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.727080][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.736176][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.745591][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.754439][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.762419][T21896] ldm_validate_partition_table(): Disk read failed. [ 1514.769410][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.778651][T21896] Buffer I/O error on dev loop6, logical block 0, async page read [ 1514.789274][T21896] Dev loop6: unable to read RDB block 0 [ 1514.798523][T21896] loop6: unable to read partition table [ 1514.806000][T21896] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1515.284904][T14804] usb 2-1: USB disconnect, device number 102 [ 1515.456833][T21906] siw: device registration error -23 [ 1516.116814][T21911] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1516.125801][T21911] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1516.134858][T21911] netlink: 'syz.1.3906': attribute type 6 has an invalid length. [ 1516.142650][T21911] netlink: 'syz.1.3906': attribute type 5 has an invalid length. [ 1516.150338][T21911] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3906'. [ 1516.164733][T21911] No buffer was provided with the request [ 1517.392680][T14804] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1517.972523][T14804] usb 4-1: Using ep0 maxpacket: 32 [ 1517.980943][T14804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.084579][T14804] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1518.094015][T14804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.102039][T14804] usb 4-1: Product: syz [ 1518.109842][T14804] usb 4-1: Manufacturer: syz [ 1518.147838][T14804] usb 4-1: SerialNumber: syz [ 1519.086823][T14804] usb 4-1: config 0 descriptor?? [ 1519.092120][T14804] usb 4-1: can't set config #0, error -71 [ 1519.099920][T14804] usb 4-1: USB disconnect, device number 16 [ 1520.173431][T21943] siw: device registration error -23 [ 1520.902369][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 1523.980397][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1523.995824][T21990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1524.004770][T21990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1524.952515][T18842] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1525.204014][T18842] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1525.222406][T18842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1525.289640][T18842] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1525.674391][T18842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.895356][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1526.303896][T18842] usb 6-1: config 0 descriptor?? [ 1526.335892][T21988] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1526.488407][T18842] hub 6-1:0.0: USB hub found [ 1526.555313][T18842] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1526.655385][T18842] usbhid 6-1:0.0: can't add hid device: -71 [ 1526.661346][T18842] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1526.746306][T18842] usb 6-1: USB disconnect, device number 2 [ 1527.762717][T19561] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1527.785104][T22022] loop6: detected capacity change from 0 to 2560 [ 1527.796918][T22022] buffer_io_error: 11 callbacks suppressed [ 1527.803021][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.811892][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.820695][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.829602][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.854757][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.863987][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.873176][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.882100][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.890528][T22022] ldm_validate_partition_table(): Disk read failed. [ 1527.897646][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.906573][T22022] Buffer I/O error on dev loop6, logical block 0, async page read [ 1527.916718][T22022] Dev loop6: unable to read RDB block 0 [ 1527.926307][T22022] loop6: unable to read partition table [ 1527.933817][T22022] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1528.415219][T19561] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1528.426959][T19561] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1528.449848][T19561] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1528.489921][T19561] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.596566][T19561] usb 1-1: config 0 descriptor?? [ 1528.622089][T22016] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1528.631978][T19561] hub 1-1:0.0: USB hub found [ 1528.826744][ T30] audit: type=1400 audit(1758418197.366:623): avc: denied { write } for pid=22032 comm="syz.3.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1528.888690][T19561] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1528.914966][T22037] ubi31: attaching mtd0 [ 1528.923860][T22037] ubi31: scanning is finished [ 1528.943805][T22038] siw: device registration error -23 [ 1529.125146][T22037] ubi31: empty MTD device detected [ 1529.160646][T19561] usbhid 1-1:0.0: can't add hid device: -71 [ 1529.186746][T19561] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1529.344102][T19561] usb 1-1: USB disconnect, device number 99 [ 1529.448622][T22037] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1529.456379][T22037] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1529.465260][T22037] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1529.472617][T22037] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1529.480246][T22037] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1529.487248][T22037] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1529.495457][T22037] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2424972601 [ 1529.505736][T22037] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1529.531041][T22043] ubi31: background thread "ubi_bgt31d" started, PID 22043 [ 1530.181543][T22054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3939'. [ 1531.786924][T22064] loop6: detected capacity change from 0 to 2560 [ 1531.794123][T22064] ldm_validate_partition_table(): Disk read failed. [ 1531.800852][T22064] Dev loop6: unable to read RDB block 0 [ 1531.807237][T22064] loop6: unable to read partition table [ 1531.813050][T22064] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1531.851998][T22066] fuse: Unknown parameter '2user00000000000000000000' [ 1531.946494][T22066] overlay: ./file0 is not a directory [ 1532.432273][T22082] siw: device registration error -23 [ 1532.708247][T19561] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1532.800543][T18840] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1533.053060][T19561] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1533.053089][T19561] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1533.054996][T19561] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1533.055020][T19561] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1533.055033][T19561] usb 6-1: Product: syz [ 1533.055042][T19561] usb 6-1: Manufacturer: syz [ 1533.055051][T19561] usb 6-1: SerialNumber: syz [ 1533.056496][T19561] usb 6-1: config 0 descriptor?? [ 1533.116552][T19561] usb 6-1: selecting invalid altsetting 0 [ 1533.173739][T18840] usb 2-1: Using ep0 maxpacket: 32 [ 1533.176595][T18840] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1533.176620][T18840] usb 2-1: config 0 has no interface number 0 [ 1533.176646][T18840] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1533.183865][T18840] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1533.183883][T18840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.183896][T18840] usb 2-1: Product: syz [ 1533.183904][T18840] usb 2-1: Manufacturer: syz [ 1533.183913][T18840] usb 2-1: SerialNumber: syz [ 1533.185118][T18840] usb 2-1: config 0 descriptor?? [ 1533.189323][T18840] smsc75xx v1.0.0 [ 1533.189332][T18840] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1533.189437][T18840] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22 [ 1533.378719][T22075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.378889][T22075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.388633][T22075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1533.388909][T22075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1533.389832][T19561] usb 6-1: USB disconnect, device number 3 [ 1533.495234][T21821] udevd[21821]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1533.523998][T22079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1533.524031][T22079] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1533.733448][T22079] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1533.733466][T22079] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1533.735246][T22079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1533.735261][T22079] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1533.736691][T22079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1533.736704][T22079] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1533.738229][T22079] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1533.738242][T22079] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1533.739578][T22079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1533.739591][T22079] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1533.787019][T14804] usb 2-1: USB disconnect, device number 103 [ 1535.278443][T22105] hub 9-0:1.0: USB hub found [ 1535.279868][T22105] hub 9-0:1.0: 1 port detected [ 1535.901399][T14804] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1536.187903][T14804] usb 1-1: device descriptor read/64, error -71 [ 1536.450698][T22117] binder: 22114:22117 ioctl c00c620f 2000000003c0 returned -22 [ 1536.459588][T22117] netlink: 'syz.2.3958': attribute type 1 has an invalid length. [ 1536.542746][T14804] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1536.544732][T22117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1536.581934][T22124] bond1: (slave geneve3): making interface the new active one [ 1536.593748][T22124] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1536.594180][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.594215][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.594235][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.594254][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.703623][T14804] usb 1-1: device descriptor read/64, error -71 [ 1536.812722][T14804] usb usb1-port1: attempt power cycle [ 1537.078212][T19445] IPVS: starting estimator thread 0... [ 1537.206690][T18842] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1537.215958][T22140] IPVS: using max 74 ests per chain, 177600 per kthread [ 1537.457081][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3962'. [ 1537.833587][T14804] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1537.835266][T18842] usb 3-1: Using ep0 maxpacket: 8 [ 1537.881920][T18842] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 1537.893349][T18842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.901954][T14804] usb 1-1: device descriptor read/8, error -71 [ 1537.919993][T18842] usb 3-1: config 0 descriptor?? [ 1537.934814][T18842] usblcd 3-1:0.0: USBLCD model not supported. [ 1538.152587][T14804] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1538.816389][T14804] usb 1-1: device descriptor read/8, error -71 [ 1538.836645][T22153] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 1538.843238][T22153] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1538.850944][T22153] vhci_hcd vhci_hcd.0: Device attached [ 1539.005163][T22149] block nbd3: shutting down sockets [ 1539.029905][T22154] vhci_hcd: connection closed [ 1539.032496][ T6969] vhci_hcd: stop threads [ 1539.092372][T19445] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 1539.595775][ T6969] vhci_hcd: release socket [ 1539.600394][ T6969] vhci_hcd: disconnect device [ 1539.667715][T14804] usb usb1-port1: unable to enumerate USB device [ 1539.763170][T22162] ISOFS: Unable to identify CD-ROM format. [ 1540.023818][T15689] usb 3-1: USB disconnect, device number 117 [ 1540.355230][T22169] FAULT_INJECTION: forcing a failure. [ 1540.355230][T22169] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.370797][T22169] CPU: 0 UID: 0 PID: 22169 Comm: syz.5.3967 Not tainted syzkaller #0 PREEMPT(full) [ 1540.370823][T22169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1540.370832][T22169] Call Trace: [ 1540.370837][T22169] [ 1540.370843][T22169] dump_stack_lvl+0x16c/0x1f0 [ 1540.370862][T22169] should_fail_ex+0x512/0x640 [ 1540.370880][T22169] should_failslab+0xc2/0x120 [ 1540.370894][T22169] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1540.370913][T22169] ? proc_self_get_link+0x1a9/0x230 [ 1540.370930][T22169] proc_self_get_link+0x1a9/0x230 [ 1540.370946][T22169] ? __pfx_proc_self_get_link+0x10/0x10 [ 1540.370960][T22169] step_into+0x195b/0x2270 [ 1540.370975][T22169] ? __pfx_step_into+0x10/0x10 [ 1540.370988][T22169] ? lookup_fast+0x156/0x610 [ 1540.371001][T22169] walk_component+0xfc/0x5b0 [ 1540.371013][T22169] link_path_walk+0x627/0xe20 [ 1540.371029][T22169] path_openat+0x1b0/0x2cb0 [ 1540.371041][T22169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.371058][T22169] ? __pfx_path_openat+0x10/0x10 [ 1540.371076][T22169] do_filp_open+0x20b/0x470 [ 1540.371089][T22169] ? __pfx_do_filp_open+0x10/0x10 [ 1540.371112][T22169] ? alloc_fd+0x471/0x7d0 [ 1540.371129][T22169] do_sys_openat2+0x11b/0x1d0 [ 1540.371145][T22169] ? __pfx_do_sys_openat2+0x10/0x10 [ 1540.371162][T22169] ? __fget_files+0x20e/0x3c0 [ 1540.371177][T22169] __x64_sys_openat+0x174/0x210 [ 1540.371193][T22169] ? __pfx___x64_sys_openat+0x10/0x10 [ 1540.371209][T22169] ? ksys_write+0x1ac/0x250 [ 1540.371225][T22169] do_syscall_64+0xcd/0x4e0 [ 1540.371241][T22169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.371253][T22169] RIP: 0033:0x7f08dbb8d590 [ 1540.371262][T22169] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1540.371273][T22169] RSP: 002b:00007f08dcaeef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1540.371284][T22169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f08dbb8d590 [ 1540.371292][T22169] RDX: 0000000000000000 RSI: 00007f08dbc11f2e RDI: 00000000ffffff9c [ 1540.371299][T22169] RBP: 00007f08dbc11f2e R08: 0000000000000000 R09: 0000000000000000 [ 1540.371305][T22169] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1540.371317][T22169] R13: 00007f08dbdd6038 R14: 00007f08dbdd5fa0 R15: 00007ffe131c7d18 [ 1540.371331][T22169] [ 1542.017205][T22194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3973'. [ 1543.146682][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.164059][T22199] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 1543.170655][T22199] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1543.178325][T22199] vhci_hcd vhci_hcd.0: Device attached [ 1543.185938][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.208241][T22188] block nbd1: shutting down sockets [ 1543.213561][T22200] vhci_hcd: connection closed [ 1543.213892][T15110] vhci_hcd: stop threads [ 1543.223150][T15110] vhci_hcd: release socket [ 1543.228641][T15110] vhci_hcd: disconnect device [ 1543.284801][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.294395][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.898324][T22212] loop6: detected capacity change from 0 to 2560 [ 1543.905555][T22212] buffer_io_error: 32 callbacks suppressed [ 1543.905569][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.919370][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.927374][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.935308][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.943236][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.951108][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.958983][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.966836][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.974663][T22212] ldm_validate_partition_table(): Disk read failed. [ 1543.981244][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.989153][T22212] Buffer I/O error on dev loop6, logical block 0, async page read [ 1543.997091][T22212] Dev loop6: unable to read RDB block 0 [ 1544.002847][T22212] loop6: unable to read partition table [ 1544.008541][T22212] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1544.233869][ T30] audit: type=1400 audit(1758418212.766:624): avc: denied { ioctl } for pid=22208 comm="syz.0.3978" path="socket:[81186]" dev="sockfs" ino=81186 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1544.732437][T19445] vhci_hcd: vhci_device speed not set [ 1544.832493][ T30] audit: type=1326 audit(1758418213.366:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22220 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cf8ec29 code=0x7ffc0000 [ 1544.899393][T22230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.911947][T22230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.982531][ T30] audit: type=1326 audit(1758418213.366:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22220 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cf8ec29 code=0x7ffc0000 [ 1545.270592][T22239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1545.365190][T19560] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 1545.443633][ T30] audit: type=1326 audit(1758418213.366:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22220 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f0f0cf8ec29 code=0x7ffc0000 [ 1545.511151][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.533350][T22226] FAULT_INJECTION: forcing a failure. [ 1545.533350][T22226] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.606660][T19560] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x1 is Bulk; changing to Interrupt [ 1545.616665][T19560] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1545.629650][T19560] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1545.666158][T19560] usb 3-1: string descriptor 0 read error: -22 [ 1545.672469][T19560] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1545.681947][T19560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.700306][T22231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1545.732664][T22226] CPU: 1 UID: 0 PID: 22226 Comm: syz.1.3980 Not tainted syzkaller #0 PREEMPT(full) [ 1545.732688][T22226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1545.732699][T22226] Call Trace: [ 1545.732705][T22226] [ 1545.732711][T22226] dump_stack_lvl+0x16c/0x1f0 [ 1545.732738][T22226] should_fail_ex+0x512/0x640 [ 1545.732759][T22226] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1545.732780][T22226] should_failslab+0xc2/0x120 [ 1545.732801][T22226] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1545.732818][T22226] ? audit_log_start+0x2c5/0x7f0 [ 1545.732838][T22226] audit_log_start+0x2c5/0x7f0 [ 1545.732855][T22226] ? __pfx_audit_log_start+0x10/0x10 [ 1545.732886][T22226] ? migrate_enable+0x1ed/0x260 [ 1545.732906][T22226] ? __pfx_migrate_enable+0x10/0x10 [ 1545.732930][T22226] audit_seccomp+0x60/0x290 [ 1545.732956][T22226] __seccomp_filter+0x7b6/0xea0 [ 1545.732981][T22226] ? __pfx___seccomp_filter+0x10/0x10 [ 1545.733002][T22226] ? fput+0x9b/0xd0 [ 1545.733020][T22226] ? ksys_write+0x1ac/0x250 [ 1545.733033][T22226] __secure_computing+0x287/0x3b0 [ 1545.733050][T22226] syscall_trace_enter+0x89/0x240 [ 1545.733064][T22226] do_syscall_64+0x36d/0x4e0 [ 1545.733080][T22226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.733092][T22226] RIP: 0033:0x7f0f0cf8ec29 [ 1545.733101][T22226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1545.733113][T22226] RSP: 002b:00007f0f0dd3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.733124][T22226] RAX: ffffffffffffffda RBX: 00007f0f0d1d6090 RCX: 00007f0f0cf8ec29 [ 1545.733132][T22226] RDX: 00002000000000c0 RSI: 000000004004af61 RDI: 0000000000000004 [ 1545.733138][T22226] RBP: 00007f0f0dd3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.733145][T22226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.733152][T22226] R13: 00007f0f0d1d6128 R14: 00007f0f0d1d6090 R15: 00007ffce65439f8 [ 1545.733166][T22226] [ 1545.733207][T22226] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1545.752458][ T30] audit: type=1326 audit(1758418213.366:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22220 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cf8ec29 code=0x7ffc0000 [ 1545.959657][T22226] audit: out of memory in audit_log_start [ 1546.123368][ T30] audit: type=1326 audit(1758418213.366:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22220 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cf8ec29 code=0x7ffc0000 [ 1546.320276][ T30] audit: type=1326 audit(1758418213.366:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22220 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f0cf8ec29 code=0x7ffc0000 [ 1546.383890][ T30] audit: type=1326 audit(1758418213.376:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22220 comm="syz.1.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f0cf8ec29 code=0x7ffc0000 [ 1546.556237][T19560] usb 3-1: USB disconnect, device number 118 [ 1546.936922][T22253] /dev/nullb0: Can't open blockdev [ 1547.685253][T22265] ISOFS: Unable to identify CD-ROM format. [ 1549.732592][T22290] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1550.331951][T22287] ISOFS: Unable to identify CD-ROM format. [ 1550.882382][T19445] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1551.044201][T19445] usb 1-1: Using ep0 maxpacket: 8 [ 1551.051796][T19445] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1551.061780][T19445] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1551.073828][T19445] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1551.242690][T19445] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1551.334402][T22311] FAULT_INJECTION: forcing a failure. [ 1551.334402][T22311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.362432][T19445] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1551.432489][T19445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.432496][T22311] CPU: 0 UID: 0 PID: 22311 Comm: syz.5.4002 Not tainted syzkaller #0 PREEMPT(full) [ 1551.432518][T22311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1551.432529][T22311] Call Trace: [ 1551.432534][T22311] [ 1551.432540][T22311] dump_stack_lvl+0x16c/0x1f0 [ 1551.432564][T22311] should_fail_ex+0x512/0x640 [ 1551.432588][T22311] _copy_from_user+0x2e/0xd0 [ 1551.432612][T22311] __x64_sys_epoll_ctl+0x131/0x1e0 [ 1551.432632][T22311] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1551.432657][T22311] do_syscall_64+0xcd/0x4e0 [ 1551.432679][T22311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.432695][T22311] RIP: 0033:0x7f08dbb8ec29 [ 1551.432708][T22311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1551.432724][T22311] RSP: 002b:00007f08dcace038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1551.432739][T22311] RAX: ffffffffffffffda RBX: 00007f08dbdd6090 RCX: 00007f08dbb8ec29 [ 1551.432750][T22311] RDX: ffffffffffffffff RSI: 0000000000000001 RDI: 0000000000000003 [ 1551.432759][T22311] RBP: 00007f08dcace090 R08: 0000000000000000 R09: 0000000000000000 [ 1551.432768][T22311] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 1551.432778][T22311] R13: 00007f08dbdd6128 R14: 00007f08dbdd6090 R15: 00007ffe131c7d18 [ 1551.432800][T22311] [ 1551.653336][T22313] siw: device registration error -23 [ 1551.841240][T22319] hub 9-0:1.0: USB hub found [ 1551.981284][T22319] hub 9-0:1.0: 1 port detected [ 1552.415148][ T5963] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1552.516989][T19445] usb 1-1: GET_CAPABILITIES returned 0 [ 1552.522854][T19445] usbtmc 1-1:16.0: can't read capabilities [ 1552.613780][ T5963] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1552.639196][ T5963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1552.659387][T15689] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1552.689725][ T5963] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1552.714924][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.754098][ T5963] usb 6-1: config 0 descriptor?? [ 1552.760022][T22315] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1552.769037][ T5963] hub 6-1:0.0: USB hub found [ 1552.770190][T19560] usb 1-1: USB disconnect, device number 104 [ 1552.801858][T22330] FAULT_INJECTION: forcing a failure. [ 1552.801858][T22330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1552.815382][T22330] CPU: 0 UID: 0 PID: 22330 Comm: syz.2.4008 Not tainted syzkaller #0 PREEMPT(full) [ 1552.815408][T22330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1552.815419][T22330] Call Trace: [ 1552.815425][T22330] [ 1552.815432][T22330] dump_stack_lvl+0x16c/0x1f0 [ 1552.815459][T22330] should_fail_ex+0x512/0x640 [ 1552.815485][T22330] _copy_from_user+0x2e/0xd0 [ 1552.815513][T22330] ucma_write+0x128/0x330 [ 1552.815536][T22330] ? __pfx_ucma_write+0x10/0x10 [ 1552.815558][T22330] ? bpf_lsm_file_permission+0x9/0x10 [ 1552.815580][T22330] ? security_file_permission+0x71/0x210 [ 1552.815607][T22330] ? rw_verify_area+0xcf/0x6c0 [ 1552.815635][T22330] ? __pfx_ucma_write+0x10/0x10 [ 1552.815657][T22330] vfs_write+0x2a0/0x11d0 [ 1552.815680][T22330] ? __pfx_vfs_write+0x10/0x10 [ 1552.815698][T22330] ? find_held_lock+0x2b/0x80 [ 1552.815721][T22330] ? __fget_files+0x204/0x3c0 [ 1552.815745][T22330] ? __fget_files+0x20e/0x3c0 [ 1552.815772][T22330] ksys_write+0x1f8/0x250 [ 1552.815797][T22330] ? __pfx_ksys_write+0x10/0x10 [ 1552.815827][T22330] do_syscall_64+0xcd/0x4e0 [ 1552.815851][T22330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.815869][T22330] RIP: 0033:0x7f336838ec29 [ 1552.815883][T22330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.815900][T22330] RSP: 002b:00007f336925b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1552.815917][T22330] RAX: ffffffffffffffda RBX: 00007f33685d5fa0 RCX: 00007f336838ec29 [ 1552.815928][T22330] RDX: 0000000000000018 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1552.815939][T22330] RBP: 00007f336925b090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.815950][T22330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.815960][T22330] R13: 00007f33685d6038 R14: 00007f33685d5fa0 R15: 00007ffef3e5c5c8 [ 1552.815983][T22330] [ 1552.816720][T15689] usb 4-1: device descriptor read/64, error -71 [ 1553.088962][ T5963] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1553.122375][T22333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1553.366476][T22336] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1553.432163][ T5963] usbhid 6-1:0.0: can't add hid device: -71 [ 1553.488688][ T5963] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1553.555162][ T5963] usb 6-1: USB disconnect, device number 4 [ 1553.792962][T22349] loop6: detected capacity change from 0 to 2560 [ 1553.800177][T22349] buffer_io_error: 11 callbacks suppressed [ 1553.800191][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.813963][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.821838][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.829821][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.837717][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.845751][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.853660][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.861547][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.869464][T22349] ldm_validate_partition_table(): Disk read failed. [ 1553.876085][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.889002][T22349] Buffer I/O error on dev loop6, logical block 0, async page read [ 1553.897051][T22349] Dev loop6: unable to read RDB block 0 [ 1553.902987][T22349] loop6: unable to read partition table [ 1553.908768][T22349] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1554.002876][T15689] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1554.142437][T15689] usb 4-1: device descriptor read/64, error -71 [ 1554.282438][T15689] usb usb4-port1: attempt power cycle [ 1554.772817][T15689] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1554.793095][T15689] usb 4-1: device descriptor read/8, error -71 [ 1554.962817][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4018'. [ 1555.036593][T19560] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1555.627314][T19560] usb 2-1: Using ep0 maxpacket: 32 [ 1555.634243][T19560] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1555.642909][T19560] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1555.651818][T19560] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1555.671387][T19560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1555.705732][T19560] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1555.752886][T19560] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1555.799097][T19560] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1555.808533][T19560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.035641][T19560] usb 2-1: config 0 descriptor?? [ 1556.285138][T22382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1556.434455][T19560] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1556.461984][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1556.462000][ T30] audit: type=1400 audit(1758418225.046:654): avc: denied { read write } for pid=22367 comm="syz.1.4019" name="lp0" dev="devtmpfs" ino=4214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1556.492227][T15689] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1556.610444][ T30] audit: type=1400 audit(1758418225.046:655): avc: denied { open } for pid=22367 comm="syz.1.4019" path="/dev/usb/lp0" dev="devtmpfs" ino=4214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1556.668020][T15689] usb 4-1: Using ep0 maxpacket: 8 [ 1556.677205][T15689] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1556.690299][T15689] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1556.756666][T15689] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1556.772205][T15689] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1556.802293][T15689] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1556.824762][T15689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.219430][T15689] usb 4-1: GET_CAPABILITIES returned 0 [ 1557.227330][T15689] usbtmc 4-1:16.0: can't read capabilities [ 1557.359519][T22392] sg_write: data in/out 49020/1 bytes for SCSI command 0x1c-- guessing data in; [ 1557.359519][T22392] program syz.5.4025 not setting count and/or reply_len properly [ 1557.380903][T22399] input: syz1 as /devices/virtual/input/input41 [ 1557.399641][T22399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1557.444520][T19560] usb 4-1: USB disconnect, device number 20 [ 1557.476962][T22400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1557.776515][T19445] usb 2-1: USB disconnect, device number 104 [ 1557.793724][T19445] usblp0: removed [ 1557.930410][T22407] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D [ 1559.379503][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1559.394431][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1559.403388][T22424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1560.700368][T22437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4036'. [ 1563.427181][T22469] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D [ 1563.600262][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1563.668206][T22474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1563.677164][T22474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4046'. [ 1564.340198][T22467] block nbd2: shutting down sockets [ 1564.667941][T22477] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1564.674564][T22477] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1564.682169][T22477] vhci_hcd vhci_hcd.0: Device attached [ 1564.688127][T22478] vhci_hcd: connection closed [ 1565.017417][T19560] usb 37-1: new high-speed USB device number 9 using vhci_hcd [ 1565.180188][ T49] vhci_hcd: stop threads [ 1565.305898][T22481] hub 9-0:1.0: USB hub found [ 1565.360450][ T49] vhci_hcd: release socket [ 1565.376606][ T49] vhci_hcd: disconnect device [ 1565.389027][T22481] hub 9-0:1.0: 1 port detected [ 1565.400082][T22487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'. [ 1565.448253][T22487] FAULT_INJECTION: forcing a failure. [ 1565.448253][T22487] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.495994][T22487] CPU: 1 UID: 0 PID: 22487 Comm: syz.2.4048 Not tainted syzkaller #0 PREEMPT(full) [ 1565.496013][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1565.496020][T22487] Call Trace: [ 1565.496024][T22487] [ 1565.496029][T22487] dump_stack_lvl+0x16c/0x1f0 [ 1565.496048][T22487] should_fail_ex+0x512/0x640 [ 1565.496063][T22487] ? __kmalloc_noprof+0xbf/0x510 [ 1565.496077][T22487] ? unregister_netdevice_many_notify+0x626/0x24c0 [ 1565.496093][T22487] should_failslab+0xc2/0x120 [ 1565.496106][T22487] __kmalloc_noprof+0xd2/0x510 [ 1565.496120][T22487] unregister_netdevice_many_notify+0x626/0x24c0 [ 1565.496145][T22487] ? __pfx___mutex_lock+0x10/0x10 [ 1565.496162][T22487] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1565.496180][T22487] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1565.496201][T22487] rtnl_dellink+0x3cb/0xa80 [ 1565.496216][T22487] ? __pfx_veth_dellink+0x10/0x10 [ 1565.496239][T22487] ? __pfx_rtnl_dellink+0x10/0x10 [ 1565.496293][T22487] ? __lock_acquire+0x62e/0x1ce0 [ 1565.496319][T22487] ? find_held_lock+0x2b/0x80 [ 1565.496333][T22487] ? __pfx_rtnl_dellink+0x10/0x10 [ 1565.496346][T22487] ? __pfx_rtnl_dellink+0x10/0x10 [ 1565.496359][T22487] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1565.496374][T22487] ? __pfx_rtnl_dellink+0x10/0x10 [ 1565.496389][T22487] rtnetlink_rcv_msg+0x95e/0xe90 [ 1565.496405][T22487] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1565.496423][T22487] ? __lock_acquire+0x62e/0x1ce0 [ 1565.496443][T22487] netlink_rcv_skb+0x158/0x420 [ 1565.496459][T22487] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1565.496475][T22487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1565.496495][T22487] ? netlink_deliver_tap+0x1ae/0xd30 [ 1565.496508][T22487] ? selinux_netlink_send+0x578/0x830 [ 1565.496523][T22487] ? is_vmalloc_addr+0x86/0xa0 [ 1565.496537][T22487] netlink_unicast+0x5a7/0x870 [ 1565.496554][T22487] ? __pfx_netlink_unicast+0x10/0x10 [ 1565.496569][T22487] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1565.496588][T22487] netlink_sendmsg+0x8d1/0xdd0 [ 1565.496605][T22487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1565.496626][T22487] ____sys_sendmsg+0xa95/0xc70 [ 1565.496644][T22487] ? copy_msghdr_from_user+0x10a/0x160 [ 1565.496658][T22487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1565.496682][T22487] ___sys_sendmsg+0x134/0x1d0 [ 1565.496696][T22487] ? __pfx____sys_sendmsg+0x10/0x10 [ 1565.496727][T22487] __sys_sendmsg+0x16d/0x220 [ 1565.496741][T22487] ? __pfx___sys_sendmsg+0x10/0x10 [ 1565.496764][T22487] do_syscall_64+0xcd/0x4e0 [ 1565.496780][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.496793][T22487] RIP: 0033:0x7f336838ec29 [ 1565.496803][T22487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.496814][T22487] RSP: 002b:00007f336925b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1565.496825][T22487] RAX: ffffffffffffffda RBX: 00007f33685d5fa0 RCX: 00007f336838ec29 [ 1565.496833][T22487] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1565.496840][T22487] RBP: 00007f336925b090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.496846][T22487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1565.496853][T22487] R13: 00007f33685d6038 R14: 00007f33685d5fa0 R15: 00007ffef3e5c5c8 [ 1565.496867][T22487] [ 1565.818043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1566.128996][T22496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1566.295734][T22500] ISOFS: Unable to identify CD-ROM format. [ 1566.386544][T22491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1566.632534][T18842] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1566.702572][T15682] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1566.816927][T18842] usb 6-1: Using ep0 maxpacket: 32 [ 1566.841626][T18842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1566.853716][T18842] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1566.870293][T22511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1567.017888][T18842] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1567.242603][T18842] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1567.687413][T18842] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1567.696065][T18842] usb 6-1: Product: syz [ 1567.700356][T15682] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1567.711996][T18842] usb 6-1: Manufacturer: syz [ 1567.716720][T18842] usb 6-1: SerialNumber: syz [ 1567.721312][T15682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1567.775038][T15682] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1567.786477][T18842] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input42 [ 1567.795975][T15682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1567.816006][T15682] usb 3-1: config 0 descriptor?? [ 1567.822711][T22503] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1567.837298][T15682] hub 3-1:0.0: USB hub found [ 1568.052397][T15682] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1568.088336][ T30] audit: type=1400 audit(1758418236.666:656): avc: denied { bind } for pid=22517 comm="syz.1.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1568.120202][T15682] usbhid 3-1:0.0: can't add hid device: -71 [ 1568.120254][T15682] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1568.143234][T15682] usb 3-1: USB disconnect, device number 119 [ 1568.160085][ T30] audit: type=1400 audit(1758418236.666:657): avc: denied { name_bind } for pid=22517 comm="syz.1.4057" src=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1568.160125][ T30] audit: type=1400 audit(1758418236.666:658): avc: denied { node_bind } for pid=22517 comm="syz.1.4057" src=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1568.338134][T22524] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1568.338165][T22524] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1568.338174][T22524] netlink: 'syz.1.4059': attribute type 6 has an invalid length. [ 1568.338185][T22524] netlink: 'syz.1.4059': attribute type 5 has an invalid length. [ 1568.338191][T22524] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4059'. [ 1568.338452][T22524] No buffer was provided with the request [ 1569.013904][ T30] audit: type=1326 audit(1758418237.606:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22497 comm="syz.5.4053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08dbb8ec29 code=0x0 [ 1569.293041][T19445] usb 6-1: USB disconnect, device number 5 [ 1569.345033][T19445] appletouch 6-1:1.0: input: appletouch disconnected [ 1569.568519][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1569.583632][T22532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1569.592654][T22532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4060'. [ 1570.288506][T19560] vhci_hcd: vhci_device speed not set [ 1570.482466][ T30] audit: type=1400 audit(1758418239.056:660): avc: denied { read } for pid=22537 comm="syz.3.4062" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1570.649689][T22545] hub 9-0:1.0: USB hub found [ 1570.655390][T22545] hub 9-0:1.0: 1 port detected [ 1571.138770][T22542] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1571.192566][ T30] audit: type=1400 audit(1758418239.066:661): avc: denied { open } for pid=22537 comm="syz.3.4062" path="/183/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1571.236436][T22542] block device autoloading is deprecated and will be removed. [ 1571.322232][ T30] audit: type=1400 audit(1758418239.906:662): avc: denied { listen } for pid=22546 comm="syz.0.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1571.711960][T22553] bridge_slave_1: left allmulticast mode [ 1571.778958][T22553] bridge_slave_1: left promiscuous mode [ 1572.048235][T22553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.079199][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1572.784315][T22553] bridge_slave_0: left allmulticast mode [ 1572.793190][T22553] bridge_slave_0: left promiscuous mode [ 1572.799070][T22553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.089999][T22576] loop9: detected capacity change from 0 to 7 [ 1574.100103][T22576] buffer_io_error: 11 callbacks suppressed [ 1574.100134][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.114479][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.123155][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.131401][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.139763][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.148101][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.156387][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.172649][T22576] ldm_validate_partition_table(): Disk read failed. [ 1574.179523][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.187887][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.196219][T22576] Buffer I/O error on dev loop9, logical block 0, async page read [ 1574.204707][T22576] Dev loop9: unable to read RDB block 0 [ 1574.211330][T22576] loop9: unable to read partition table [ 1574.217826][T22576] loop9: partition table beyond EOD, truncated [ 1574.224049][T22576] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1574.224049][T22576] ) failed (rc=-5) [ 1574.974483][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4072'. [ 1575.155963][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4073'. [ 1575.995390][T22605] mkiss: ax0: crc mode is auto. [ 1578.279330][T22636] siw: device registration error -23 [ 1578.551254][T19445] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1578.804128][T19445] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1578.836461][T19445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.897966][T19445] usb 6-1: config 0 descriptor?? [ 1578.927652][T19445] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1579.197584][T19445] gp8psk: usb in 128 operation failed. [ 1579.268829][T19445] gp8psk: usb in 137 operation failed. [ 1579.574301][T19445] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1579.612400][T19445] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1579.627571][T19445] usb 6-1: USB disconnect, device number 6 [ 1579.869851][T22677] loop6: detected capacity change from 0 to 2560 [ 1579.876540][T22677] buffer_io_error: 4 callbacks suppressed [ 1579.876550][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.890215][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.898070][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.905950][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.913892][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.921888][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.930228][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.938351][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.946305][T22677] ldm_validate_partition_table(): Disk read failed. [ 1579.952998][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.960836][T22677] Buffer I/O error on dev loop6, logical block 0, async page read [ 1579.968775][T22677] Dev loop6: unable to read RDB block 0 [ 1579.975871][T22677] loop6: unable to read partition table [ 1579.981590][T22677] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1581.126046][T22696] ISOFS: Unable to identify CD-ROM format. [ 1581.316355][ T30] audit: type=1400 audit(1758418249.906:663): avc: denied { accept } for pid=22698 comm="syz.0.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1581.459644][T22704] ISOFS: Unable to identify CD-ROM format. [ 1581.594849][T22706] ISOFS: Unable to identify CD-ROM format. [ 1584.807230][T19445] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1584.819714][T22745] overlayfs: overlapping lowerdir path [ 1584.825575][T22746] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1584.834311][T22746] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1585.014051][T19445] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1585.075200][T19445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1585.088689][T19445] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1585.102705][T19445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.136815][T19445] usb 4-1: config 0 descriptor?? [ 1585.167792][T22735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1585.203605][T19445] hub 4-1:0.0: USB hub found [ 1585.554716][T19445] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1585.580594][T22761] ISOFS: Unable to identify CD-ROM format. [ 1585.604153][T19445] usbhid 4-1:0.0: can't add hid device: -71 [ 1585.611545][T19445] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1585.710769][T19445] usb 4-1: USB disconnect, device number 21 [ 1586.215082][T22768] hub 9-0:1.0: USB hub found [ 1586.220477][T22768] hub 9-0:1.0: 1 port detected [ 1587.705587][ T30] audit: type=1400 audit(1758418256.286:664): avc: denied { append } for pid=22780 comm="syz.3.4109" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1587.955982][T22785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1587.965312][T22785] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4109'. [ 1588.249324][ T30] audit: type=1400 audit(1758418256.566:665): avc: denied { map } for pid=22780 comm="syz.3.4109" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1588.249371][ T30] audit: type=1400 audit(1758418256.566:666): avc: denied { execute } for pid=22780 comm="syz.3.4109" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1589.263461][T22798] siw: device registration error -23 [ 1589.376407][T15682] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1589.553768][T15682] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1589.575444][T15682] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.615484][T15682] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1589.626710][T22805] /dev/nullb0: Can't open blockdev [ 1589.737082][T15682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.748276][T15682] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.844003][T15682] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1589.853129][T15682] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1589.861480][T15682] usb 3-1: Product: syz [ 1589.865685][T15682] usb 3-1: Manufacturer: syz [ 1589.892871][T15682] cdc_wdm 3-1:1.0: skipping garbage [ 1589.902523][T15682] cdc_wdm 3-1:1.0: skipping garbage [ 1589.914370][T15682] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1589.967663][T15682] cdc_wdm 3-1:1.0: Unknown control protocol [ 1590.087785][T22794] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 1590.096789][ T30] audit: type=1400 audit(1758418258.676:667): avc: denied { read write } for pid=22792 comm="syz.2.4111" name="cdc-wdm0" dev="devtmpfs" ino=4250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1590.098508][T19445] usb 3-1: USB disconnect, device number 120 [ 1590.120741][ C0] vkms_vblank_simulate: vblank timer overrun [ 1590.190194][ T30] audit: type=1400 audit(1758418258.676:668): avc: denied { read write open } for pid=22792 comm="syz.2.4111" path="/dev/cdc-wdm0" dev="devtmpfs" ino=4250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 1590.214974][ C0] vkms_vblank_simulate: vblank timer overrun [ 1591.162697][T19560] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1591.340661][ T30] audit: type=1400 audit(1758418259.786:669): avc: denied { firmware_load } for pid=22818 comm="syz.2.4118" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1591.392548][T19560] usb 6-1: Using ep0 maxpacket: 8 [ 1591.401023][T19560] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1591.410972][T19560] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1591.476840][T19560] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1591.673135][T22827] syz.2.4118 (22827) used greatest stack depth: 17768 bytes left [ 1591.681048][T19560] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1591.694069][T19560] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1591.704127][T19560] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.011178][T19560] usb 6-1: GET_CAPABILITIES returned 0 [ 1592.030228][T19560] usbtmc 6-1:16.0: can't read capabilities [ 1592.518345][T19560] usb 6-1: USB disconnect, device number 7 [ 1593.112418][T19445] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1593.159645][T22844] loop6: detected capacity change from 0 to 2560 [ 1593.166823][T22844] buffer_io_error: 11 callbacks suppressed [ 1593.166837][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.180563][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.188496][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.196392][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.204284][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.224411][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.232447][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.240367][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.248286][T22844] ldm_validate_partition_table(): Disk read failed. [ 1593.254988][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.262948][T22844] Buffer I/O error on dev loop6, logical block 0, async page read [ 1593.271036][T22844] Dev loop6: unable to read RDB block 0 [ 1593.276999][T22844] loop6: unable to read partition table [ 1593.282854][T22844] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1593.382369][T19445] usb 3-1: Using ep0 maxpacket: 32 [ 1593.390571][T19445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.402194][T19445] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1593.427204][T19445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.657413][T19445] usb 3-1: config 0 descriptor?? [ 1593.722950][T22852] /dev/nullb0: Can't open blockdev [ 1593.886517][T19445] hub 3-1:0.0: USB hub found [ 1593.930203][T19445] hub 3-1:0.0: 1 port detected [ 1594.123410][T22857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1594.735646][T22861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1594.875366][T19445] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1594.875642][T19560] usb 3-1: USB disconnect, device number 121 [ 1595.333817][T22865] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D [ 1597.482914][T19560] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1597.646264][T19560] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 1597.654814][T19560] usb 3-1: config 0 has no interface number 1 [ 1597.660929][T19560] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1597.671307][T19560] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1597.698746][T22912] ISOFS: Unable to identify CD-ROM format. [ 1597.708207][T19560] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1597.810084][T19560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1597.819726][T19560] usb 3-1: SerialNumber: syz [ 1597.835911][T19560] usb 3-1: config 0 descriptor?? [ 1598.352038][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.361906][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.655023][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.665981][T22919] ALSA: mixer_oss: invalid OSS volume '' [ 1598.673866][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.696516][T19560] usb 3-1: Found UVC 0.00 device (0002:0000) [ 1598.747539][T19560] usb 3-1: No valid video chain found. [ 1598.768472][T19560] usb 3-1: USB disconnect, device number 122 [ 1598.866111][ T30] audit: type=1400 audit(1758418267.446:670): avc: denied { listen } for pid=22921 comm="syz.0.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1598.909045][ T30] audit: type=1400 audit(1758418267.446:671): avc: denied { accept } for pid=22921 comm="syz.0.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1599.022044][T22932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4145'. [ 1599.440633][ T30] audit: type=1400 audit(1758418267.986:672): avc: denied { getopt } for pid=22935 comm="syz.5.4146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1601.152404][ T30] audit: type=1400 audit(1758418269.736:673): avc: denied { getopt } for pid=22964 comm="syz.1.4154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1602.228871][T22991] block nbd0: Attempted send on invalid socket [ 1602.244029][T22991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1602.412406][ T30] audit: type=1400 audit(1758418270.986:674): avc: denied { map } for pid=22986 comm="syz.1.4158" path="socket:[85079]" dev="sockfs" ino=85079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1602.528925][T22996] netlink: 'syz.3.4161': attribute type 4 has an invalid length. [ 1602.552390][T22996] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4161'. [ 1602.675823][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4163'. [ 1602.932437][T19560] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1603.112367][T19560] usb 4-1: Using ep0 maxpacket: 8 [ 1603.175221][T19560] usb 4-1: config 0 has an invalid interface number: 211 but max is 0 [ 1603.217697][T19560] usb 4-1: config 0 has no interface number 0 [ 1603.241488][T19560] usb 4-1: config 0 interface 211 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1603.252666][T19560] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=19.db [ 1603.266984][T19560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.306184][T19560] usb 4-1: config 0 descriptor?? [ 1603.519575][T22996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.528892][T22996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.543130][T19445] usb 4-1: USB disconnect, device number 22 [ 1603.732010][T23016] syz_tun: entered allmulticast mode [ 1604.053059][T23020] dvmrp8: entered allmulticast mode [ 1604.425207][T23022] FAULT_INJECTION: forcing a failure. [ 1604.425207][T23022] name failslab, interval 1, probability 0, space 0, times 0 [ 1604.455283][T23022] CPU: 1 UID: 0 PID: 23022 Comm: syz.3.4168 Not tainted syzkaller #0 PREEMPT(full) [ 1604.455299][T23022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1604.455306][T23022] Call Trace: [ 1604.455311][T23022] [ 1604.455315][T23022] dump_stack_lvl+0x16c/0x1f0 [ 1604.455335][T23022] should_fail_ex+0x512/0x640 [ 1604.455349][T23022] ? fs_reclaim_acquire+0xae/0x150 [ 1604.455366][T23022] ? tomoyo_encode2+0x100/0x3e0 [ 1604.455383][T23022] should_failslab+0xc2/0x120 [ 1604.455399][T23022] __kmalloc_noprof+0xd2/0x510 [ 1604.455414][T23022] tomoyo_encode2+0x100/0x3e0 [ 1604.455433][T23022] tomoyo_encode+0x29/0x50 [ 1604.455449][T23022] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1604.455467][T23022] ? tomoyo_profile+0x47/0x60 [ 1604.455480][T23022] tomoyo_path_number_perm+0x245/0x580 [ 1604.455494][T23022] ? tomoyo_path_number_perm+0x237/0x580 [ 1604.455510][T23022] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1604.455526][T23022] ? find_held_lock+0x2b/0x80 [ 1604.455552][T23022] ? find_held_lock+0x2b/0x80 [ 1604.455566][T23022] ? hook_file_ioctl_common+0x145/0x410 [ 1604.455581][T23022] ? __fget_files+0x20e/0x3c0 [ 1604.455596][T23022] security_file_ioctl+0x9b/0x240 [ 1604.455616][T23022] __x64_sys_ioctl+0xb7/0x210 [ 1604.455634][T23022] do_syscall_64+0xcd/0x4e0 [ 1604.455650][T23022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.455662][T23022] RIP: 0033:0x7f43b6d8ec29 [ 1604.455672][T23022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1604.455683][T23022] RSP: 002b:00007f43b7c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.455694][T23022] RAX: ffffffffffffffda RBX: 00007f43b6fd5fa0 RCX: 00007f43b6d8ec29 [ 1604.455702][T23022] RDX: 0000200000000280 RSI: 000000004008ae90 RDI: 0000000000000005 [ 1604.455712][T23022] RBP: 00007f43b7c1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1604.455721][T23022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1604.455732][T23022] R13: 00007f43b6fd6038 R14: 00007f43b6fd5fa0 R15: 00007fff831d6378 [ 1604.455761][T23022] [ 1604.455774][T23022] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1604.712202][T15689] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1604.883982][T15689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1604.893849][T15689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1604.963757][T23038] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1604.982403][T23038] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1605.025286][T15689] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1605.034802][T15689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.042848][T15689] usb 3-1: Product: syz [ 1605.052646][T15689] usb 3-1: Manufacturer: syz [ 1605.058110][T15689] usb 3-1: SerialNumber: syz [ 1605.059943][T23038] netlink: 'syz.5.4174': attribute type 6 has an invalid length. [ 1605.062915][T23034] No buffer was provided with the request [ 1605.072646][T15689] usb 3-1: config 0 descriptor?? [ 1605.788696][T23038] netlink: 'syz.5.4174': attribute type 5 has an invalid length. [ 1605.796728][T23038] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4174'. [ 1605.942465][T23019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.964329][T23019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.152190][T23036] hub 9-0:1.0: USB hub found [ 1606.157054][T23036] hub 9-0:1.0: 1 port detected [ 1606.195827][ T30] audit: type=1400 audit(1758418274.786:675): avc: denied { write } for pid=23045 comm="syz.3.4176" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1606.219912][T15689] usb 3-1: USB disconnect, device number 123 [ 1606.369614][T23050] FAULT_INJECTION: forcing a failure. [ 1606.369614][T23050] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.395212][T23052] geneve3: entered promiscuous mode [ 1606.404164][T23052] geneve3: entered allmulticast mode [ 1606.412499][T23050] CPU: 0 UID: 0 PID: 23050 Comm: syz.0.4179 Not tainted syzkaller #0 PREEMPT(full) [ 1606.412524][T23050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1606.412536][T23050] Call Trace: [ 1606.412543][T23050] [ 1606.412550][T23050] dump_stack_lvl+0x16c/0x1f0 [ 1606.412577][T23050] should_fail_ex+0x512/0x640 [ 1606.412599][T23050] ? fs_reclaim_acquire+0xae/0x150 [ 1606.412623][T23050] ? tomoyo_encode2+0x100/0x3e0 [ 1606.412647][T23050] should_failslab+0xc2/0x120 [ 1606.412667][T23050] __kmalloc_noprof+0xd2/0x510 [ 1606.412685][T23050] ? d_absolute_path+0x136/0x1a0 [ 1606.412715][T23050] tomoyo_encode2+0x100/0x3e0 [ 1606.412774][T23050] tomoyo_encode+0x29/0x50 [ 1606.412799][T23050] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1606.412833][T23050] tomoyo_path_number_perm+0x245/0x580 [ 1606.412854][T23050] ? tomoyo_path_number_perm+0x237/0x580 [ 1606.412882][T23050] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1606.412906][T23050] ? find_held_lock+0x2b/0x80 [ 1606.412951][T23050] ? find_held_lock+0x2b/0x80 [ 1606.412971][T23050] ? hook_file_ioctl_common+0x145/0x410 [ 1606.412994][T23050] ? __fget_files+0x20e/0x3c0 [ 1606.413018][T23050] security_file_ioctl+0x9b/0x240 [ 1606.413046][T23050] __x64_sys_ioctl+0xb7/0x210 [ 1606.413074][T23050] do_syscall_64+0xcd/0x4e0 [ 1606.413099][T23050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.413117][T23050] RIP: 0033:0x7fecd418ec29 [ 1606.413132][T23050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1606.413148][T23050] RSP: 002b:00007fecd5026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1606.413166][T23050] RAX: ffffffffffffffda RBX: 00007fecd43d5fa0 RCX: 00007fecd418ec29 [ 1606.413177][T23050] RDX: 0000200000002680 RSI: 00000000c008561c RDI: 0000000000000003 [ 1606.413189][T23050] RBP: 00007fecd5026090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.413200][T23050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.413210][T23050] R13: 00007fecd43d6038 R14: 00007fecd43d5fa0 R15: 00007fff4dbb8448 [ 1606.413235][T23050] [ 1606.413316][T23050] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1606.680461][T23055] ISOFS: Unable to identify CD-ROM format. [ 1606.893389][T23060] FAULT_INJECTION: forcing a failure. [ 1606.893389][T23060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.924332][T23060] CPU: 0 UID: 0 PID: 23060 Comm: syz.0.4180 Not tainted syzkaller #0 PREEMPT(full) [ 1606.924359][T23060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1606.924370][T23060] Call Trace: [ 1606.924378][T23060] [ 1606.924385][T23060] dump_stack_lvl+0x16c/0x1f0 [ 1606.924413][T23060] should_fail_ex+0x512/0x640 [ 1606.924439][T23060] _copy_from_user+0x2e/0xd0 [ 1606.924465][T23060] kstrtouint_from_user+0xd6/0x1d0 [ 1606.924486][T23060] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1606.924505][T23060] ? __lock_acquire+0xb97/0x1ce0 [ 1606.924545][T23060] proc_fail_nth_write+0x83/0x220 [ 1606.924567][T23060] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1606.924594][T23060] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1606.924614][T23060] vfs_write+0x2a0/0x11d0 [ 1606.924637][T23060] ? __pfx___mutex_lock+0x10/0x10 [ 1606.924662][T23060] ? __pfx_vfs_write+0x10/0x10 [ 1606.924688][T23060] ? __fget_files+0x20e/0x3c0 [ 1606.924716][T23060] ksys_write+0x12a/0x250 [ 1606.924733][T23060] ? __pfx_ksys_write+0x10/0x10 [ 1606.924765][T23060] do_syscall_64+0xcd/0x4e0 [ 1606.924790][T23060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.924809][T23060] RIP: 0033:0x7fecd418d6df [ 1606.924824][T23060] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1606.924841][T23060] RSP: 002b:00007fecd5005030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1606.924858][T23060] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fecd418d6df [ 1606.924870][T23060] RDX: 0000000000000001 RSI: 00007fecd50050a0 RDI: 0000000000000004 [ 1606.924881][T23060] RBP: 00007fecd5005090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.924891][T23060] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1606.924902][T23060] R13: 00007fecd43d6128 R14: 00007fecd43d6090 R15: 00007fff4dbb8448 [ 1606.924927][T23060] [ 1606.925853][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.203267][T23076] bridge_slave_1: left allmulticast mode [ 1608.210038][T23076] bridge_slave_1: left promiscuous mode [ 1608.228236][T23076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.772977][T23076] bridge_slave_0: left allmulticast mode [ 1608.779747][T23076] bridge_slave_0: left promiscuous mode [ 1608.792246][T23076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.182442][T23085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1609.198081][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1609.207619][T23085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4187'. [ 1609.552465][T15682] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1609.705928][T15682] usb 6-1: config 8 has an invalid interface number: 177 but max is 0 [ 1609.721516][T15682] usb 6-1: config 8 has no interface number 0 [ 1609.732363][T15682] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1609.747474][T15682] usb 6-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1609.778528][T15682] usb 6-1: config 8 interface 177 has no altsetting 0 [ 1609.787592][T15682] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1609.982943][T15682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.166123][T23072] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1610.204185][T15682] usb 6-1: can't set config #8, error -71 [ 1610.214762][T15682] usb 6-1: USB disconnect, device number 8 [ 1610.352360][T18842] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1610.502818][T18842] usb 3-1: Using ep0 maxpacket: 16 [ 1610.532399][T19560] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1610.613403][T18842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.650465][T18842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.665239][T18842] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1610.674534][T18842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.879224][T23117] bridge0: entered allmulticast mode [ 1610.898616][T23117] bridge_slave_1: left allmulticast mode [ 1610.923950][T23117] bridge_slave_1: left promiscuous mode [ 1610.930801][T23117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1610.939880][T18842] usb 3-1: config 0 descriptor?? [ 1610.959189][T23117] bridge_slave_0: left allmulticast mode [ 1610.974558][T23117] bridge_slave_0: left promiscuous mode [ 1610.974955][T19560] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1610.985372][T23117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.432001][T19560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1611.486655][T19560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1611.542432][T19560] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1611.679279][T19560] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1611.745061][T19560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.772588][T19560] usb 4-1: config 0 descriptor?? [ 1612.347499][T19560] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1612.651077][T23103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.714815][T23130] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1612.755849][T23103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.916084][T19560] usb 4-1: USB disconnect, device number 23 [ 1613.278355][T23136] fido_id[23136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1613.548052][T23146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1613.563532][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1613.573163][T23146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1613.950713][T18842] hid (null): unknown global tag 0xd [ 1613.967836][T18842] hid (null): unknown global tag 0xc [ 1614.378681][T23157] FAULT_INJECTION: forcing a failure. [ 1614.378681][T23157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.428426][T23157] CPU: 1 UID: 0 PID: 23157 Comm: syz.1.4205 Not tainted syzkaller #0 PREEMPT(full) [ 1614.428452][T23157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1614.428462][T23157] Call Trace: [ 1614.428467][T23157] [ 1614.428471][T23157] dump_stack_lvl+0x16c/0x1f0 [ 1614.428490][T23157] should_fail_ex+0x512/0x640 [ 1614.428508][T23157] _copy_from_iter+0x29f/0x1720 [ 1614.428536][T23157] ? __pfx__copy_from_iter+0x10/0x10 [ 1614.428560][T23157] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1614.428589][T23157] copy_page_from_iter+0xde/0x180 [ 1614.428610][T23157] tun_build_skb.constprop.0+0x2e8/0x1500 [ 1614.428634][T23157] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1614.428651][T23157] ? unwind_get_return_address+0x59/0xa0 [ 1614.428667][T23157] ? arch_stack_walk+0xa6/0x100 [ 1614.428702][T23157] ? _kstrtoull+0x145/0x200 [ 1614.428719][T23157] ? __pfx__kstrtoull+0x10/0x10 [ 1614.428739][T23157] tun_get_user+0x14ae/0x3ce0 [ 1614.428763][T23157] ? __pfx_tun_get_user+0x10/0x10 [ 1614.428783][T23157] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1614.428802][T23157] ? find_held_lock+0x2b/0x80 [ 1614.428825][T23157] ? tun_get+0x191/0x370 [ 1614.428853][T23157] tun_chr_write_iter+0xdc/0x210 [ 1614.428879][T23157] vfs_write+0x7d3/0x11d0 [ 1614.428894][T23157] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1614.428913][T23157] ? __pfx_vfs_write+0x10/0x10 [ 1614.428923][T23157] ? find_held_lock+0x2b/0x80 [ 1614.428944][T23157] ksys_write+0x12a/0x250 [ 1614.428960][T23157] ? __pfx_ksys_write+0x10/0x10 [ 1614.428986][T23157] do_syscall_64+0xcd/0x4e0 [ 1614.429009][T23157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.429030][T23157] RIP: 0033:0x7f0f0cf8d6df [ 1614.429039][T23157] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1614.429050][T23157] RSP: 002b:00007f0f0dd5f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1614.429061][T23157] RAX: ffffffffffffffda RBX: 00007f0f0d1d5fa0 RCX: 00007f0f0cf8d6df [ 1614.429069][T23157] RDX: 000000000000009a RSI: 00002000000004c0 RDI: 00000000000000c8 [ 1614.429075][T23157] RBP: 00007f0f0dd5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.429082][T23157] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000001 [ 1614.429089][T23157] R13: 00007f0f0d1d6038 R14: 00007f0f0d1d5fa0 R15: 00007ffce65439f8 [ 1614.429111][T23157] [ 1614.642537][ T31] INFO: task syz-executor:17861 blocked for more than 143 seconds. [ 1615.070063][T18842] usb 3-1: string descriptor 0 read error: -71 [ 1615.077539][ T31] Not tainted syzkaller #0 [ 1615.085180][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1615.097391][ T31] task:syz-executor state:D stack:24024 pid:17861 tgid:17861 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1615.115647][ T31] Call Trace: [ 1615.119068][ T31] [ 1615.122174][ T31] __schedule+0x1190/0x5de0 [ 1615.125891][T18842] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 1615.138290][T18842] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -32 [ 1615.150076][ T31] ? __pfx___schedule+0x10/0x10 [ 1615.156159][ T31] ? find_held_lock+0x2b/0x80 [ 1615.173582][T18842] usb 3-1: USB disconnect, device number 124 [ 1615.179645][ T31] ? schedule+0x2d7/0x3a0 [ 1615.188371][ T31] schedule+0xe7/0x3a0 [ 1615.217073][ T31] v9fs_evict_inode+0x26f/0x300 [ 1615.236268][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1615.299948][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1615.378256][ T31] ? evict+0x3a2/0x920 [ 1615.383153][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 1615.388562][ T31] evict+0x3e3/0x920 [ 1615.392925][ T31] ? __pfx_evict+0x10/0x10 [ 1615.397347][ T31] ? iput+0x519/0x880 [ 1615.401313][ T31] iput+0x521/0x880 [ 1615.405664][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 1615.410970][ T31] dentry_unlink_inode+0x29c/0x480 [ 1615.416390][ T31] __dentry_kill+0x1d0/0x600 [ 1615.420986][ T31] dput.part.0+0x4b1/0x9b0 [ 1615.425464][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 1615.431037][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1615.436434][ T31] generic_shutdown_super+0x6c/0x390 [ 1615.441721][ T31] kill_anon_super+0x3a/0x60 [ 1615.446378][ T31] v9fs_kill_super+0x3d/0xa0 [ 1615.450963][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1615.456354][ T31] deactivate_super+0xde/0x100 [ 1615.461111][ T31] cleanup_mnt+0x225/0x450 [ 1615.465585][ T31] task_work_run+0x150/0x240 [ 1615.470176][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1615.475343][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1615.480722][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1615.486158][ T31] do_syscall_64+0x41c/0x4e0 [ 1615.490754][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1615.496663][ T31] RIP: 0033:0x7f1d25d8ff57 [ 1615.501069][ T31] RSP: 002b:00007ffd748449f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1615.509522][ T31] RAX: 0000000000000000 RBX: 00007f1d25e11c2d RCX: 00007f1d25d8ff57 [ 1615.517535][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd74844ab0 [ 1615.525687][ T31] RBP: 00007ffd74844ab0 R08: 0000000000000000 R09: 0000000000000000 [ 1615.533695][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd74845b40 [ 1615.541682][ T31] R13: 00007f1d25e11c2d R14: 0000000000162eca R15: 00007ffd74845b80 [ 1615.549769][ T31] [ 1615.552887][ T31] [ 1615.552887][ T31] Showing all locks held in the system: [ 1615.560595][ T31] 1 lock held by khungtaskd/31: [ 1615.566481][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1615.578447][ T31] 3 locks held by kworker/u8:6/2959: [ 1615.584182][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1615.594737][ T31] #1: ffffc9000bd17d10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1615.607802][ T31] #2: ffff8880b8425b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 1615.617533][ T31] 2 locks held by getty/5607: [ 1615.622187][ T31] #0: ffff8880363230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1615.632022][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1615.642252][ T31] 1 lock held by syz-executor/17861: [ 1615.647614][ T31] #0: ffff8880233b40e0 (&type->s_umount_key#88){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1615.658441][ T31] [ 1615.660757][ T31] ============================================= [ 1615.660757][ T31] [ 1615.672253][ T31] NMI backtrace for cpu 0 [ 1615.672272][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1615.672291][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1615.672302][ T31] Call Trace: [ 1615.672308][ T31] [ 1615.672316][ T31] dump_stack_lvl+0x116/0x1f0 [ 1615.672343][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1615.672361][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1615.672390][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1615.672411][ T31] watchdog+0xf0e/0x1260 [ 1615.672437][ T31] ? __pfx_watchdog+0x10/0x10 [ 1615.672455][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1615.672478][ T31] ? __kthread_parkme+0x19e/0x250 [ 1615.672505][ T31] ? __pfx_watchdog+0x10/0x10 [ 1615.672524][ T31] kthread+0x3c2/0x780 [ 1615.672542][ T31] ? __pfx_kthread+0x10/0x10 [ 1615.672561][ T31] ? rcu_is_watching+0x12/0xc0 [ 1615.672583][ T31] ? __pfx_kthread+0x10/0x10 [ 1615.672602][ T31] ret_from_fork+0x56a/0x730 [ 1615.672618][ T31] ? __pfx_kthread+0x10/0x10 [ 1615.672636][ T31] ret_from_fork_asm+0x1a/0x30 [ 1615.672669][ T31] [ 1615.782494][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1615.787705][ C1] NMI backtrace for cpu 1 [ 1615.787718][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1615.787733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1615.787742][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1615.787762][ C1] Code: 6d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 46 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1615.787775][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 1615.787787][ C1] RAX: 0000000008bd2f65 RBX: 0000000000000001 RCX: ffffffff8b94cb49 [ 1615.787796][ C1] RDX: 0000000000000000 RSI: ffffffff8de52d29 RDI: ffffffff8c163380 [ 1615.787804][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6655 [ 1615.787812][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1615.787820][ C1] R13: ffff88801e2b2440 R14: ffffffff90ab7590 R15: 0000000000000000 [ 1615.787828][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 1615.787842][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1615.787850][ C1] CR2: 00007fff831d4e58 CR3: 00000000256fb000 CR4: 00000000003526f0 [ 1615.787859][ C1] Call Trace: [ 1615.787864][ C1] [ 1615.787868][ C1] default_idle+0x13/0x20 [ 1615.787886][ C1] default_idle_call+0x6d/0xb0 [ 1615.787903][ C1] do_idle+0x391/0x510 [ 1615.787920][ C1] ? __pfx_do_idle+0x10/0x10 [ 1615.787935][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1615.787951][ C1] cpu_startup_entry+0x4f/0x60 [ 1615.787965][ C1] start_secondary+0x21d/0x2b0 [ 1615.787984][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1615.788003][ C1] common_startup_64+0x13e/0x148 [ 1615.788023][ C1] [ 1615.790100][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1615.966004][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1615.975093][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1615.985318][ T31] Call Trace: [ 1615.988578][ T31] [ 1615.991493][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1615.996131][ T31] vpanic+0x6e8/0x7a0 [ 1616.000106][ T31] ? __pfx_vpanic+0x10/0x10 [ 1616.004601][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1616.010481][ T31] panic+0xca/0xd0 [ 1616.014181][ T31] ? __pfx_panic+0x10/0x10 [ 1616.018584][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1616.023950][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1616.030084][ T31] ? watchdog+0xd78/0x1260 [ 1616.034485][ T31] ? watchdog+0xd6b/0x1260 [ 1616.038887][ T31] watchdog+0xd89/0x1260 [ 1616.043112][ T31] ? __pfx_watchdog+0x10/0x10 [ 1616.047768][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1616.052954][ T31] ? __kthread_parkme+0x19e/0x250 [ 1616.057967][ T31] ? __pfx_watchdog+0x10/0x10 [ 1616.062624][ T31] kthread+0x3c2/0x780 [ 1616.066674][ T31] ? __pfx_kthread+0x10/0x10 [ 1616.071245][ T31] ? rcu_is_watching+0x12/0xc0 [ 1616.075991][ T31] ? __pfx_kthread+0x10/0x10 [ 1616.080560][ T31] ret_from_fork+0x56a/0x730 [ 1616.085128][ T31] ? __pfx_kthread+0x10/0x10 [ 1616.089699][ T31] ret_from_fork_asm+0x1a/0x30 [ 1616.094456][ T31] [ 1616.097648][ T31] Kernel Offset: disabled [ 1616.101950][ T31] Rebooting in 86400 seconds..