last executing test programs: 2m44.972443393s ago: executing program 4 (id=617): syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = socket(0x10, 0x40000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000240)=0x8) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000001c0)) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) (async) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="53594e544820274d6963272030303030303030303030303030303030303030b00a494741494e20274361707475726520566fc5d9b542b2fe49b63030303030303030303030303030303030300a564f4c554d450a4c494e910a4d4f4e49544f520a4344202743442043617074757265272038"], 0x86) (async) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="53594e544820274d6963272030303030303030303030303030303030303030b00a494741494e20274361707475726520566fc5d9b542b2fe49b63030303030303030303030303030303030300a564f4c554d450a4c494e910a4d4f4e49544f520a4344202743442043617074757265272038"], 0x86) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) (async) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r7, 0x29, 0x46, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2m43.849604486s ago: executing program 4 (id=621): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000f80)=ANY=[@ANYRESDEC=r0], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x94, 0x2, 0xa, 0xf01, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x30, 0x6, "99a5808f817385517b49da48e8d3232644c730ae2a78035a1f943bb41cf1cfe1c64bdf0cb85c2b6f6f9fde1b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x828, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x808, 0x3, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x71}, @NFTA_SET_ELEM_KEY={0x124, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "5b6920bda500332e5fc955"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "3ce4e5b296d8b4902f4a9965fd32aaa8902f33ed4175f4738c5e062d1a8102ee583af6967c71fd6b0afba47df9e09ef83884fa433599dfc6f769651cfc36cef2517d03878c76d98df9689bdf98590722c2084d176c924ddf7cbabdb641d9205fe394a5279be11758a57c7bfc0739732e145f6149a944a58bd1982a87ef26a401fd9ab71a65ca366984a52104531e8b6bbda9cea28a3dae9a9eaf8ba8e4e8557809d60b89a12067edc769e814043ac9cc8ef00ba9b024fd150f1d1961aa52356e3498f695b04c70e490695494"}]}]}, {0x15c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x158, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe0, 0x1, "f28cf03535a98058b5762c733f0835a2f36558c4e34bdfa69001bd20b04f86c3b85d3cd2854adb9a8be6ff0454e5a7e5dab0119cc5c2e2e3061ada9df5a64bb537d0803ff1cf6ec92619ac0d9c9dd02b376ad3460466f74d3ec49077b15b4eaa5afa3d97e1ba462692ffc8ec938a0bc2b6f8189effa8df65013e5e5662273f58c46bdf436aa8d394d4d063dbea76601fa14a2fdd629ca3ce5662a389b8727e0f66f011cef4a83d2e0fe5513635e77d012e54ff53d2dde9d97e421f704c1c5effc4866f2e6cde151d6f1324e32f29202211f9603230c0f2a92eb0e6e7"}, @NFTA_DATA_VALUE={0x72, 0x1, "23cf0481abe2db8a776fdd22c87a44d01af2138a4c3bccc876b67c2c32aa93a75e3640907d4669b177011365a8a0f21c6d913013eba99f75afcc75372a9cbe496e11c32b407b0533ca8e3e84d4e1221fed1b1df3fa3914763c85ae7b3812e9355699a7202b03a1ab1b0ecc556fa1"}]}]}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6f, 0x1, "e2dee449161da86d62f057e1581b4510ffb0bfecf54b74216a5f22c8a4d757e61fa2c4d9e5dbe48e92fcdaf2ee86acc0a555f71688d499dbc0d549c5d767487d8d3a234d1d359c92394ac7600e93b416fc09478f090778a28064a8c4172e9f4c99fd6422f2a54fe07165f4"}, @NFTA_DATA_VALUE={0x41, 0x1, "981e8e91f0742b2c8a0260035fe9e7d764ea1abf15c56619440fc73e8c1416eee925e252e364e2f48b1f300241764c506a6b751cf0ae4166a096fedf3a"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}, {0x474, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1b8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "61743774b4f80d6a52842dead0fdda3f116ae15e71f646df70c44d9f35802c9458a13a6203921603219a85b5e1afc44b7ed4a90c7da97761f83ac40900fdeddd4b79bf09882194c87c5bb893bc7ce79980b10b247ddefb"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x5c, 0x1, "6018634e48c26374f46ec9061e76ba5f50f541e9c1f3247e9a535453faee36fa32eca477b48461a7b5486c58a27855312e3cb6177c842be94908af653a5f23228ee4d598c29026f7264d09bfd3c06840c9e5443d057234e6"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xcd}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}]}}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x68}]}}}, {0x58, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x94, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8e, 0x1, "426e86844aeff389a071dafd60443efbc4547b50f3920a5d7e665beaed4929b9290ba49cccbdc588338a48a28c8cc337abc85778f5185f61a1243a7c08ac455117c1362b03bef0b9c3ee600f933afe74a4ddca49eed222242ff795bf6739eb8be1e8f6e94cbbfbb1ff4342190c337f31934438951cd43480b0df73a981abb8dfb5e101dcfcc923dbf76e"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x124, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xb0, 0x1, "34b6a0ff4819731041ea98b9b70aa68bf4550623a99d6dfe42b0cc041bcd49a20bafcbe1ea51ae37be8a93e63a4a5f13432e14a606619293427466e617d2afc628fc9f2122c6578857818b2d880374b9b6b017b5984153fe1e7b13404f0632cb775c35fd8f6d77c74d14c0734472a70f7ec84bd63b65aa871a965b4586769fbc27bbdfe6cfec1e46dbf0a26be1b0cec2af01ec296bf59aa71d196c015888c0ed1f02fe779d65d06ed7676ea8"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}]}, @NFT_MSG_DELSET={0xf0, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xd1, 0xd, 0x1, 0x0, "e9eff19bc170e2abdb30fd0949f72da14ce6b311d00294d7ba39ba86b3670a7ed5e2162a3499c2a108bbcf55b4a11f8430a16a3e09912d6c2e5bd90880f99cbe483b4167ada272bfebf36bdcf9f6916bdc6a0f36b4b4b77f04bce7ed2a9cc1c356f29b8c59f8e588f5fc230717ae688641c71ca6202f9d30362c1eb5420b4aa8d25184956642252b642c5cbaddc787aa27ad73fb642ba653078941cc667a5dbf1c80717c163b176fe9c8defeaebe9411ef323336224450359f766ba381932a59b088cd77ffe0fe8909fe5ba951"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x9d4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000380)={r5, 0x6}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x2, 0x3}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r11, 0x1, 0x0, 0x10, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x4c}}, 0x40804) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m43.225208732s ago: executing program 4 (id=626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x164e, 0x0, 0xffffffff}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) timer_create(0x1, 0x0, &(0x7f0000003240)=0x0) timer_gettime(r2, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x82100) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="01f521", @ANYRES16=r5, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4004055}, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000180)={0x9, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x1470}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000240)={0xd40, 0x0, &(0x7f0000000200)=[r0, r1, r1, r4, r0, r0, r1]}, 0x7) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x1f7ef4b9b79ecbfe, 0x1, 0x8}}, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r14, {0xc, 0x2}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x448, 0x2, [@TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xc, 0x3, 0x80000, {0x6, 0x1, 0x2, 0x0, 0x5, 0x5f}, {0x7, 0x1, 0x33db, 0x1, 0x7fff}, 0x3, 0x3da, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xfffffff8, 0x0, 0x0, 0x3, 0x9, 0x8, 0x9, 0x401, 0x7, 0x1, 0x2, 0x7, 0x7fffffff, 0x4000, 0x4, 0xfffff801, 0x7, 0x80000000, 0x8000, 0x80000001, 0x5, 0x2, 0xe2b9, 0x2, 0x11d, 0x10001, 0x0, 0x9, 0x9, 0x2, 0x5, 0x1, 0x6b, 0x4, 0x9, 0x1, 0x2, 0x3, 0x9, 0xa6, 0x8, 0x625, 0x5f00, 0x3, 0x7, 0x2310, 0x80000000, 0x1, 0x1, 0x1ff, 0xc, 0x0, 0xffffff98, 0x2122c0, 0x3, 0x7fffffff, 0x6, 0x8, 0x2, 0x3e946db0, 0x8001, 0x7ff, 0x4, 0x4982d9f5, 0xc27, 0x8a, 0x9, 0x5, 0x5, 0xff, 0xe365, 0x4, 0xf104, 0x4cd, 0xff, 0x3, 0x5, 0x9, 0x7, 0xfd, 0x401, 0x6, 0x7fff, 0x1, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x27c, 0xed5c, 0xffffffff, 0x4, 0x1000, 0x1, 0x52d, 0x7, 0x7, 0x0, 0x4, 0x1, 0xffff0001, 0x800, 0x7, 0x3, 0x6, 0x1, 0x7, 0x4, 0x4, 0xffffffff, 0x207, 0xe, 0x9, 0x2, 0x3, 0x40, 0x1000, 0xc3, 0x2, 0x8, 0x9, 0x7, 0x8, 0x2, 0x7, 0x3, 0x7fffffff, 0xae, 0x7, 0x9, 0x8, 0x401, 0x2, 0x40, 0x0, 0xfff, 0x3, 0xb, 0x2, 0x9, 0xf8000000, 0xc, 0x1, 0x7, 0x0, 0x8, 0x6, 0xc, 0x1, 0x0, 0x5, 0x2, 0x0, 0x19, 0x7, 0x80000000, 0x9, 0x6, 0x5, 0x3, 0xfffffff7, 0x5, 0x3000000, 0x9e3a, 0x401, 0x0, 0x2, 0x0, 0x7, 0x1fc2, 0xe, 0x0, 0xdf, 0xffffffff, 0x1ff, 0x6ba7b42c, 0x4, 0x0, 0x57fb3de3, 0x6e88, 0xfffffe00, 0x8, 0x1ff, 0x0, 0x30001, 0x7, 0x100, 0x0, 0x9, 0x9, 0xb, 0x1, 0x4, 0x1c0, 0x7, 0x1, 0x1000, 0xea7, 0x5, 0xe7c, 0x6, 0x2000, 0x1000, 0x6, 0x3, 0x10000, 0x2, 0x81, 0x2, 0x1, 0x8, 0x101, 0x6, 0x3c83, 0xa2c, 0x9, 0x49f, 0x200, 0x56, 0x7f, 0x200, 0x9736, 0x401, 0x62, 0xb, 0x7fff, 0x6, 0x3, 0x100, 0xffffff48, 0x1, 0x4, 0x0, 0x7, 0xa, 0x0, 0x8, 0x65b6ceae, 0xfffffffa, 0x6, 0x1, 0x2, 0x583, 0x7, 0x400, 0x80000001, 0x49c, 0x10000, 0x3, 0x8, 0xfffffff3, 0x8, 0x6, 0x7, 0x7]}]}]}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}]}, 0x480}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m40.75785588s ago: executing program 4 (id=634): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000003c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xb, 0x8, 0x0, 0x3}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8000, 0x8000, 0x2, 0x3, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0xd, 0x29, 0x0, @multicast2, @private=0xa010102, {[@timestamp={0x44, 0x4, 0xca, 0x0, 0x8}, @timestamp_addr={0x44, 0x24, 0xb1, 0x1, 0x8, [{@broadcast, 0x7}, {@local, 0x6}, {@local, 0x9}, {@loopback, 0x4}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3b, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) unshare(0x42000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000240)={0x4, 0x8000, 0x0, 0x0, 0x1d}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800b5a9878372c273b7df1664208a03276a4500000c0065000000119078000004c0e000000100004e2000089078"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002000000000001190787f000003e000000100004e200001000000000000"], 0x0) 2m38.745352591s ago: executing program 4 (id=640): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmmsg$inet(r1, &(0x7f00000029c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000300)="02", 0x1}], 0x1}}], 0x1, 0x20004041) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 2m38.555652752s ago: executing program 4 (id=641): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x700, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3e, 0x4000, 0x0, 0x0}], 0x1}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000480)={&(0x7f0000000440)=[{0x8, 0x1010, 0x0, 0x0}, {0x6, 0x3800, 0x0, 0x0}], 0x2}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 2m23.312807298s ago: executing program 32 (id=641): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x700, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3e, 0x4000, 0x0, 0x0}], 0x1}) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000480)={&(0x7f0000000440)=[{0x8, 0x1010, 0x0, 0x0}, {0x6, 0x3800, 0x0, 0x0}], 0x2}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 8.906653022s ago: executing program 2 (id=1222): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @mcast2, 0xe}, 0x1c, 0x0}}, {{&(0x7f0000002980)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x73}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x87, 0x0, 0x1, 0x7f}}}], 0x48}}], 0x2, 0x4001c00) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @mcast2, 0xe}, 0x1c, 0x0}}, {{&(0x7f0000002980)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x73}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x87, 0x0, 0x1, 0x7f}}}], 0x48}}], 0x2, 0x4001c00) (async) 8.518079602s ago: executing program 2 (id=1223): syz_usb_connect(0x0, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d5b6c108701801007fe60102030109022d00010000000009040000030a00000009058d0000000000000905f3ff000000000009050b"], 0x0) syz_usb_connect(0x0, 0x110c, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0xfd, 0xa4, 0x33, 0x40, 0xbfd, 0x23, 0x11ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10fa, 0x4, 0x9f, 0x9, 0xe0, 0xe5, [{{0x9, 0x4, 0xff, 0x80, 0xf, 0x97, 0xe2, 0x1e, 0x6, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "55c45bf9d285"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x5, 0x5, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0x4}, [@obex={0x5, 0x24, 0x15, 0x1}, @acm={0x4, 0x24, 0x2, 0x1}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "021b832e9d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x3, 0x5, 0xfa}, [@mdlm_detail={0xf0, 0x24, 0x13, 0x5, "45dfa324993b253359695f139cc6ec8ab06239b47b384f06496addd0df4f986e3be44194a38c0b58126185b1b809667114a5b33b03b5a78e5fa39f66c85490d54546db8568c57ddd9ff114c0b44620712361fa64fa20aef7e9df35a0fabe153dd5e7a39134568a665668e42b12dc76b70651c19115c71b0eabf6317cc73db26f52699684a18c6497cc7efe400d9e7fa68c15c6f5d895825d306250355d8da89babeb7c4b7b786fcfdc3ba3fe3d8460e2e24e9ed27599c9033c1fb6339f3fb07c5ea09c06fcc8c2bd4a9c722acd171317e85e8aad13eb34f6e1262e098d2931755b77226a3fc9925ada6971aa"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xfe}, @acm={0x4, 0x24, 0x2, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @acm={0x4, 0x24, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0x2}]}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x81, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x7, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}]}}, {{0x9, 0x5, 0xb, 0xc, 0x40, 0x8, 0xfc, 0xaf}}, {{0x9, 0x5, 0xb, 0x1, 0x40, 0x8, 0x52, 0x10, [@generic={0xa, 0x3, "87c5e810ce56bc99"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x4, 0x2, 0x80, [@generic={0xf6, 0x2a, "dd0f17b7343f17d93bf5c671af2c777e97087b09a5e8f9e9612928056595f6bdd7e7c3e81233b109d093a775ec4b4bb7873fb180b1beb7df6c515808d5dd596776cb1fe6483fa4c831c263ec2f023bea3bd93b910f87ac28fa826fe1d746488bd4e351d42abdbdd60d0361929bf432eddd8346753bf8dd22443b2d859c0d85df12e7e73b32897c2c411b376f298822d68c8814b9e0e38e28b7b63744acc8416519b88e90ed4205974ed20eb4bd9dd1bad8a08c376b9e5062d106185889130505c79aeb9f1460509d3b1ce7dc6a125a113c52c44b9a8132cc6f4fa7e55391ab794139e5bc5711721853062f6c51046dda93178c85"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x8, 0xad, 0x4, [@generic={0xaf, 0xb, "0df573dd37922f3169fce81d03ceb9c22bd0b3d260a3238aa7407405796dad4910cb10225a15d4174ee464d63a4e28d153af066fa8987996199bebfacedd3b1e16593e0063b5c41ebe9db8d4efbea4adda60f502aca151df7d91844c206361c15da25f4c5fbe7334c7b93ee61efcb8e3234a5740f5b0ee834628649d7597d6a1c44a26dd852e3fec298e4d950822df11679b07f63ea1b05714f6004f8d1c3ce8c2fc12f9e2d959b363b83e5be9"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x3, 0x0, 0x0, [@generic={0x51, 0x5e37f74129ec0446, "3f75356a872fe86468375d6c3799155d0f4ea604829f786b71a1500031b8883c6a7d814639b20b1fd39b6fd809d92e8a837c3d9a032616658cc696d24388e712777d5f806eb22431f0ec45518bd5b5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0x2, 0x8, [@generic={0x98, 0x30, "1b95317017a68eb248261b79fa463e41516a83a2e07db44f5c4e9c9b99346fd30be76db7379a162c67888dc6741e81feb386fb86a7bbff91a785b3240ac062d6625184275713eaa28d02f2f94fd73980bbcef2734b652ad7aff3c970d7b5f2dd710211699bfcea232a49dd78052dbde1622e45310ba9a5f457be63eb62ec27ae17820f09633fbdff9d598d2f8d8d12bf021a76a52431"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x5}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0xcf, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x5, 0x7, 0x93, [@generic={0x3f, 0x23, "a9ec4d2853091658622644772ee8a628905ff149789d7dcb0724d995a2b8d0a61282ed4cff2d5934a95c6b0b51ec2dcda7e165db12c316e6f722fca55e"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x80, 0x3, 0x6, [@generic={0xc7, 0x7, "24189a810f21e02b02a9473bdc52ee5283dbd19b4b84f798858e3871516bd02315b151a5cacaa8811ae7dc0d6c27cf46226ed0e5746e95a81f3dcaf882ae123f7256ee04ab9d57f848e0deafc1293684cbb4705a2e6ca573bfd3765d9aa051fff8e097e56f9cc36e56663ccf591566f050881d2f2497948a74f5072322ea239d7d422b6e65ba9ebcd3a53845b177e59bb503e67c57560c54852fbfb23ee66a4b6e6ac57dda04f96726b53c31301a99d8a4b83bf32dd6a98fc3d4c894785fa12f64fbdc738f"}, @generic={0x2b, 0x8, "ac91fe3095ff2be70254709a352301dd957415df1e5ec45c80753b18e80e42f6ea3d60c6e385de64ad"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x7, 0x8, 0x6, [@generic={0xe1, 0x10, "6ede4bcf62b4d7992c93d445543d2c02ace7e1dcd40ceaa03ff72099bf5c0265bfad826f69d4e1465144d5f5cb6c1c299539c6c27e1c8d6e7416d5a8722b03b1429bd6e3d0a811006f04878262cd79d1d04b6fc73fce725644dd69e3a84f0a99ae9180b01a485f4223d2b3b763612f413a7ecbb46b0f84d64b4b95c53b78c9fa5cbc71fec6753f04f85bb71d5c217b88c38dfa0764f044fc7188a176a903ed717ce03697b5c8830e8aff74e0dea060c5990b9b20fcfd0515c31bd015b0dc60eda2fb9beb492faaae18ab24af00eb156cbdc8603340ff6c049f65278ddb8edb"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x0, 0xf7, 0x10, 0x38, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x8, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x14, 0x9}]}}]}}, {{0x9, 0x4, 0xb1, 0x5, 0xf, 0xff, 0xff, 0xff, 0x40, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xf, 0xf, 0xe3}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x6, 0xe, 0xa2}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0xc, 0x2, 0xd5, [@generic={0xeb, 0x21, "f4521f86e546c65bc8e31d05f0ca2e735f131da3057534ea398f13bf43e721a39206473e7b6a7a1dc14833e19dc01446631b91a00757f769f2ec881271276ab7730a2aa568e087436a777c1ddc0cdb93d69e890739ae900ac973d353f4ffddc6806222ecfae8b079168b2c08a9c0daf23a8fd6e373ae4dbcf5a6ee4b34b6c3f7845e6dbe0cd88e8f2be1dd257d2579186d134a7da77d4d5c8a409656ac3e7c874c2f297e92f50c28a458e597afc372d461d3397c49df5c7a0dffba45c697bcc4f759902a60fae971f8393b58ec034bde8d8c90ed6aafd8b6393606d762fe886aea3b866d0548fb8c12"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x3, 0x80, 0x1}}, {{0x9, 0x5, 0xb, 0x8, 0x270, 0x8, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x1}, @generic={0x22, 0xf, "0f31e55f1b66924a7f67a79a742a166594d050fa15a1e25077d2c95bd65374b2"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0xab, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x3}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x9, 0x8, 0x7}}, {{0x9, 0x5, 0x80, 0x8, 0x8, 0x1, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0x8, 0x2, [@generic={0x3f, 0x23, "a23efd3f2adf8d603473659d7afd15a4d7f2f6be9777eec5aac87d506be33bcd7c930b5bd6b07966f572e4e8abf653fc0d18e6b3c97a99f18b070e29c1"}, @generic={0x59, 0x21, "07e9019f94b96c2e85b789732851fb4597f246fa172e5f9b661b6fb11ae641a600fb14d37b79b0ee85dddc85aeba2924d7b7719da7a72a8ff33d4378989ba89314354c9ad30e2eff462ec5f20df70c684b57b5592e6d87"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x76, 0x40, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x9, 0xe, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x3, 0xfa}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x0, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x62, 0x0, 0x9, [@generic={0xd2, 0xc, "4b5221ade0b03e6bac4ecd1c7564277156fae49e627a78f44f0967198e4331f3bb944beeb3fda9f49e75de8cd072ac4637a21a52cbe2a2eaf1fa593bef471dc1ca0e80eafaecf86c027a929943ed5cfaaa7cd74f26d77d1bcaf7aa5d787e562ff3452043b1f30bebac4b12ee2abcc27bef1ee172eac038a49029ac31683b58ca5bafcfd5874f64ed2d4cbafc6c4889fbfedc23145252ed6a75f36e2198af10109a5f37a69310a825e2e9de59d660600371349aa20f9ade90052a32e1d74f407e541c6c920695921899b246f71bd6dd0b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x40, 0x1, [@generic={0xc4, 0x9, "f3b9ce0b9b3ea9f09c5b1759532496a2ea136d7d0d4b820466e5b1b22344186c77272d3157164a6ce148633fd38ef0f9382bf25a457b4b01393a84efc9ac31a17c7842e62a7cecb692af08cd3d4a2ec61fe98bec918e13a81dccd54b3d37d1e63f84eab2fc92c1f8de5377695c96be90ccd7792f9d72240d6604330b78f3db6cd6cbc25d49f3ba18bab000bf68b77d1a7ed46ef12afdba60678286904ebcc7e1f09abba3867b2883bd9db2cf2a62eb6087bdcaae40216d102008e107c7ab97e12fc2"}, @generic={0x2c, 0x2, "a8926e6ce3657bd7984b99332e63d323d442a54de1c7a82024703872a137caec9dddd43fa675af2944bb"}]}}]}}, {{0x9, 0x4, 0x39, 0x9, 0xc, 0x6d, 0xbb, 0xe7, 0xe, [], [{{0x9, 0x5, 0xe, 0x3, 0x400, 0xfe, 0x2b, 0x80, [@generic={0xc7, 0x10, "6f4a83fca266d58f6a58abb8dc76c38958022b71daf42b2429b757eb78d278e9ec521c26b7646d8fa3458c195fee66a00b61a53dc26409f87afc432b18276ceb178225ab30397f1908252050aa724efaf93908c1278296b700683e5abfc85667a7d815ca6a383bd6c32cc500e7a3d9ba835fbd68c5684b66ec027e294c951038b6b3da5c9c36351fbe15dfb7482fa77989c3dea287c1599e99ec6750fc27270a5c8bed1a6e2aa8dbefe00c05e5c774e057a39d2067c2f7cb9b6abc9e7f84117bd4302b954d"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x48, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7f}]}}, {{0x9, 0x5, 0xf, 0xc, 0x3ff, 0xc, 0x3, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x40, 0x7, 0x3, [@generic={0x8a, 0x6, "09569b57d225347dac00f09b5c751b03773256af78b81d62f4a9900cc44d7ef1fbd6780b1192bfb22c03ec432fcd40d85dc5cbe739d4ed52b89c87739515ddec4918b62dc9e0599716f6fb2628fb555881614d593f2aa1b06ae4b5af42d53a83aa7a76e3c6f575f58705a01ab855a803feb21804b0adaf9ed11fdbf3b6a5223896518536ea08035e"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x9}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x3, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x8}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x6, 0x1, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x7, 0xb, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xfa, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x4, 0xd, 0x40, [@generic={0xba, 0xa, "83e806909176e99b77b7b59226489bdea5bec0115f43a41f9ecad17d332a486676dbe28e8891e5c66db78eb331fa6c246e140dd85195275dba320902a370a9ab3717952cad80068da62468ab74b98891644597df4e61ef4a397a4fbf6c2aab453cc6f75db759a2f2a237c8d137c10ab013d3ce0d48e819137c9877836ea8fd508b7d193d58d98fa6d966c49441e7117d5b5e34a5970fbce2edce3009efdf379bdb5dea4c523d471323e766cc740e967ef04e5839bb8bbd7d"}, @generic={0xad, 0x6, "30d84c967088aea437d83be6e72ce5ae559cdc1b376b87779c9da688a49a0194946bbc08b583fea1c2a62225edc4fd3001e7650b49d1f0757368a398bd4b7f8e6324a02af37318a36c6a537de5391df474a14bfa3a2183aee8f5a8b0689f54ad716471ed144b86d3eddfa32e42fe11813a632e9a2b0f047bdc4ba3d8cce8273505c8ac24ce4cbc4f59108a8b63f0c9e9d6d9c7ff10622f4962e1a71226eb9d4f86d93a1fe5ef7ba8a0e17e"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0xfa, 0xff, [@generic={0x19, 0x22, "c55d6a92947fb213c9863b32a1770a90f1082f501e32ee"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x8000}]}}, {{0x9, 0x5, 0x1, 0x1, 0x20, 0x3, 0x2, 0x2}}, {{0x9, 0x5, 0x0, 0x1, 0x8, 0x81, 0x7, 0x1, [@generic={0x53, 0xe, "e5122742aad50e5af7405a86164e237b56492d2f0ae2fa05a80382dbb4e39a334cf0f7fa69a7dcc80a6a10259741845f13f4d6306663662ff02d0f96337fdfa7b86bb253008826175783bb30a115430ba0"}]}}]}}, {{0x9, 0x4, 0xd6, 0x8, 0xc, 0x59, 0x24, 0x57, 0x1, [], [{{0x9, 0x5, 0xb, 0x1, 0x620, 0x2, 0x5, 0x8}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0xa3, 0xb, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x22, 0xb6f}, @generic={0x87, 0x8, "1f820bdc303054a2fe8e60e903ff96000e1d4a17ee730c02b4788695a41946b7093e3343d6ca0ec4f25a549130145bef9150a2841fba463b5a37d1f3789b946a3c7134c673c6a995e247063619c4f5649468165539586823f5530f5b036f9f8016893bf8aeafa4b9b8b075f3dca8a717d421ee1cd7a47af9a8e69ca9c9dc6daf6e3ca77f33"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x6, 0x80, 0x86}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x2}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x5, 0x9, 0x1, [@generic={0xc4, 0x2b, "e52593d973490604e55ddef307aea1982f513ebf470683385657df47cfe6186632ca47a55190b8e1231faa00f14f3e25539259d0e3b98513ab8655af88b48300332a7d60b20859038fa73d478f905dcb97ce5461ee7e0599680426203b192f5512deceb1150f657f91bd83532261521dcfd77e904ededb65379ead45adda0dc9957ec4fdc7350efaa322e68ba11d7c2471f88b87142cf5d793a332844a7878a7b8a5cb40694970f1cf46070417ba2a5419fba226dd0795a1b807ffccb0981b6aebe6"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xaa}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x4, 0x8, 0x6}}, {{0x9, 0x5, 0x5d1d65d90cee6b9e, 0x10, 0x200, 0x3a, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x6, 0x58, 0x4}}, {{0x9, 0x5, 0xe6bb6c35b4f82df2, 0x8, 0x8, 0x10, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x666}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0xc, 0x400, 0x7f, 0x2b, 0x7, [@generic={0x31, 0x23, "4f6123b14fa60b933b6c987fd17f8d7264c61c3016f1a427a77fe23ad314199b8a458dc4f31e632f5c246513e20414"}, @generic={0x21, 0x23, "8c1b4f89a2730709308ef5b37b403e3008719bc74886163d2a1875fcff55d7"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x8, 0xf9, 0x5d}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0xa, 0xf5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x6557}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x4, 0x3, 0x87, 0x10, 0x3}, 0x127, &(0x7f0000000040)={0x5, 0xf, 0x127, 0x3, [@generic={0xe9, 0x10, 0xb, "0d6679bd57d0978c2c45e8e566ed764f74b5f011bf1de83064708830e1648fe75ecdeb9da1570c02b3a4f8964e90516c5559f0046992de98527a9bbe96404abafe41e23854fc9faa50f731361931841166c701492cacd470f83e236c0f84370c8856f29c9f12df50f57c92a00dde25eb7353b5e8734ba507bdc2183c5dcb962f8f2dca9967ff33e2f063f7e0b80f1eaa989f0b5fee3cdea49b7729e9df6676fb60502b1476f4d98449f636342f8258216b5faf4859a02ec7f366bba5c06316a0af931148371175c14e2b7fdd6a2d2c27fb228dc2386fb47520dee33b56ef37e384ae9f63cb66"}, @generic={0x32, 0x10, 0xa, "848741a646dda1a3f34254fc45980b50186395c549e9eccf67d05f6e43cd6525edc2f62df7d9a97cf8dc77b0d7caea"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0x9, 0x1}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40f}}]}) 8.464072603s ago: executing program 5 (id=1224): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x3, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="df4034b36a3528a6066312ba3a2735dcea0ba8f4800f3199ada2823fb21da70ae51e43e1bd0f6e954d9396930e69b960bd03424a4dd1c91355d9e097c27c366342a2199b93b0d305d7f373b93be3a9aba9938bf311f490787845845a298339c40b7fb0097c07e1e6c36ea4e09eb3a25f8e3165f2dcd2ea795d999dbee04d", 0x7e}, {&(0x7f0000000380)="502db2b8fc344d8c4454479e24a203ef51d0259a24e4a36be347943aba3cc70179337a77d095de4d70d6df9d475fe533edb75851229f96ddb38cd1c1de0e48bde26f", 0x42}, {&(0x7f0000000400)="4e8fd2ad56ccfdf6004dc0a15068557a5ed71b4284e0be6924629ed2cc12d8af4c51ab70379734141142021dd26fbc26c80e5eee816c", 0x36}, {&(0x7f0000000440)="a2a0abf884c986cd4aeb705893088eef3ac92bfd2dade1d7c136e298815a2fac314ab86be05e959c35a508", 0x2b}, {&(0x7f00000005c0)="88ca2003db59bdc32ff964268e583e63f7746043b96c93b4fd0a9b19f69d0a2c71c5c666199ca9088c30808459a4eea75f3d3e79d42071e3996d62e7fb720f1736d45dbb3a170db6566caefa05434ef9a55925c5e111731a7c3d9880c145acb2c41cc6d4b61f4d89d53a518540096718490d8a68d0d349fff99909f3ea03cf037485ac87af9f47fc54ac20b22e96e001364bdc6dc3e3d8787ae49a384a2ac42509d04e5d19d24fc6bf5183908e1356e3f27dd9aee62b4d42227f0af26b9a8d5d361f49a5bab678ba8b862161854f3dee5d7cf12ecd2db5dc751ebd3b9e7839b9ce7289d2b94a2e37200c", 0xea}], 0x5, &(0x7f0000000540)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}}}], 0x30}}], 0x2, 0x40080c1) (async) shutdown(r1, 0x1) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a0524010103052406000105"], 0x0) r2 = socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000800)={0x12, 0x10, 0xfa00, {&(0x7f0000000740), 0xffffffffffffffff, r0}}, 0x18) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r5) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) (async) openat$fuse(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r7 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0x0, 0x3b6, 0x0, r0}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r10, 0x401, 0x0) (async) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) (async) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) (async) io_uring_enter(r7, 0x48e9, 0x0, 0x3, 0x0, 0x0) 7.289693915s ago: executing program 5 (id=1230): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x0, 0x0, 0x1}]}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000001300)={0x57, 0x2}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0xffffffffffffffff, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170901000000000000000300"], 0x5c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x40810, 0x3}, [@IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_XDP={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000090) 7.015883966s ago: executing program 5 (id=1232): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900082b0100000000000000000002ffffac1e0001fe8000000000000000000000000000aaff"], 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmsg$unix(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x40000102) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x6, @sliced={0x0, [0x8, 0x2b8, 0x8, 0x4, 0x2, 0x7fff, 0x4, 0x5d, 0x9, 0x3ff, 0xdf49, 0x1, 0x4, 0x3, 0x2, 0x27, 0x0, 0x8, 0x7, 0x0, 0xffff, 0x8, 0x9, 0x9, 0x6e12, 0x8000, 0xfffb, 0x6, 0xac, 0x40, 0x7, 0x5, 0x9, 0x1ff, 0x14, 0x8, 0x0, 0x101, 0x6, 0x5, 0x1ff, 0x2, 0x4e44, 0x6fe, 0xd8b3, 0x7ff, 0x2, 0x513], 0x380}}) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r6, 0xae64, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xe6ad, r0, &(0x7f0000000000)="611549ba7879ef7bafc4eae8ff", 0xd, 0xee, 0x0, 0x0, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3ff, r0, &(0x7f00000000c0)="b3645f70061527e8cc5e0914a864de68a2cc687e95291d470d427b85fc7f00515d277314bf2d6e122fefdaf425a0cc0032576fa88b7b4cef407c4dd2e03933b06e0e3229d3c7f49a6b146545c4ec5a84da8554849fbf41e9c9031b088cf1afc587a66080dda2d70659dad3a3b2a0f157148d620d5fc5bb21031c8fdc1c1ff23512679d72e0296eb26db92e36a97ca7da7091a69e251aa8dd13b2052b5e37a549fbf707f6782da649c5b6066a8ad91489fc2e3f48dcbe3ed6c15abb007e0f8d0e", 0xc0, 0x5, 0x0, 0x0, r7}]) socket(0x3, 0x80000, 0xf) 6.611276473s ago: executing program 2 (id=1233): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host, 0x6}, @host, 0x0, 0x2000000, 0x4, 0x2, 0x0, 0x3ff, 0x5}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r7, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r9 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r10 = shmat(r9, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 6.042712586s ago: executing program 0 (id=1237): r0 = open(&(0x7f0000000000)='./file0\x00', 0xe0400, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000a000007"], 0x14}}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) keyctl$invalidate(0x15, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x42600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008040, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x9, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29, 0x7afb]}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000200)) fsopen(&(0x7f0000000040)='virtiofs\x00', 0x1) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r7, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) fcntl$setlease(r0, 0x400, 0x0) 5.442879203s ago: executing program 3 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'dvmrp1\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 5.223636943s ago: executing program 3 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x10, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x1, 0x5}, @hopopts={0x87}]}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x2, 0x8, 0x0, [@empty]}]}}}}}, 0x0) 5.186248516s ago: executing program 5 (id=1241): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) close(0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x400) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x1, 0xd, 0x40, 0x0, 0x3, 0x3, 0x9, 0xda, 0x14, 0xb, 0x63, 0x6, 0x0, 0x1, 0x0, 0x4, 0x2, 0xfd, 0x9, '\x00', 0x80, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) sendmmsg$inet6(r3, &(0x7f0000000340)=[{{&(0x7f00000002c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000480)="c0", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000001980)='G', 0x1}], 0x10000220}}], 0x2, 0x404c8d0) 5.129437153s ago: executing program 2 (id=1242): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x0, 0x0, 0x1}]}}}}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000001300)={0x57, 0x2}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x3, 0xffffffffffffffff, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170901000000000000000300"], 0x5c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x40810, 0x3}, [@IFLA_CARRIER={0x5, 0x21, 0x1}, @IFLA_XDP={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x4000090) 5.051657638s ago: executing program 1 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000018c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 18) 4.997779145s ago: executing program 3 (id=1244): r0 = socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101600, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340), 0x0) syz_emit_ethernet(0xa4, &(0x7f0000001140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000cd04006e3afffe8000200000000000000000000000bbfe8000000000000000000000000000aa860090780000000000000000000000000e000e00000b5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53946b08e3751a4083eae0afb360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9fe02935a47ac6463bab2642c4808298e62afbf03269f1f9"], 0x0) connect$tipc(r0, &(0x7f0000003100)=@id, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c045}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) ioctl$TCXONC(r3, 0x540a, 0x2) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff21, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYRES16=r3, @ANYRES64=r1, @ANYBLOB="75f3e90b2c164f5387691964ddd1575eed5975a3af300165d1130b0d5bab50035b6ceec245193eb23ce9644cf44dad83a601270afbf625d00817abe103be7694d453333e5352b1ef6690d6a81efbe2cbc628292391b3b94111c1e63451ef1619bc84faee087f77612c833873dcec08a84a08e8e120e3c9858a4bb132bab543439b9284d4b6f63fa7dd3888240f134dcb57afce67621f9158435ac085d4155bc9ad991a8cc316f84452377350bb74ede82a0f88d218e05972177a1ebc6ddecc5ff0c4cd4c4ee0d2853e6cdb2b08dfe7859554ec5c5773d77094798f48edf1da963f8b6b758de20428ba2e15d00d33", @ANYRES32=r2], 0xb0}, 0x1, 0x0, 0x0, 0x40008804}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) fcntl$notify(r6, 0x402, 0x1) r7 = syz_open_procfs(0x0, &(0x7f0000001100)='maps\x00') openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r7, 0x0, 0x0, 0x82, 0x3) 4.977829239s ago: executing program 0 (id=1245): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000ffdbdf256700000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) r8 = syz_create_resource$binfmt(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00') execveat$binfmt(r0, r8, &(0x7f00000003c0)={[&(0x7f00000002c0)='nl80211\x00']}, &(0x7f0000000600)={[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000004c0)='\'\x93#&\x04\x00', &(0x7f0000000500)='.{\x00', &(0x7f0000000540)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000580)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000005c0)='wlan1\x00']}, 0x800) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xf9, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b00", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_fclose={0x1e, 0xb, 0xa62, 0x0, 0x1000}]}}}}}}}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/27, 0x19}], 0x2, 0x401, 0x2) socket$nl_route(0x10, 0x3, 0x0) 4.435550544s ago: executing program 1 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x13c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@nested={0x126, 0x93, 0x0, 0x1, [@generic="6dbaaa423653b2c15cc6e6642cdca453dd520970bffa5c07c12e3912222049c11353661344429b2a8579c5295fb7052000a25facbebd104640e91c273971f5d7572ffb855a615746a7049551f18d399bdbcdb6841f8c5466d4c837fe495c60c7c15b3995098cd192772601739f7a7e8afa9e812f6a91120bba3b37f37b2caf076a490e3a5037fe30cf90b571007d71a6edbfc0d0ec64d503a34e34f65bb5791cccc10f2ff1dfc6ff6b06", @typed={0x8, 0x87, 0x0, 0x0, @fd=r0}, @generic="619839e5cba324805073e60eb583b2760789a1cad7131b40c1a7d2ca36d85f1601416467ce5ccb0476570cdaebaf350fc9969f946760398ce9f15778a627ec47b2817b19914760c5afa83ccc6cb78b31f56d435fcb91c1a5c0bf7eedad19481119364e8b341bf321247e4ccb", @nested={0x4, 0x144}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) 4.108900468s ago: executing program 2 (id=1247): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x81, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x100, &(0x7f0000000240)=ANY=[]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.945904254s ago: executing program 1 (id=1248): r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000300)=""/186, 0xba}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/229, 0xe5}], 0x3) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x8, 0x4}]}, 0x10) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="b3", 0x1}], 0x1}}], 0x1, 0x4015) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001400)={&(0x7f0000c72000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001440)=0x40) 3.663278098s ago: executing program 0 (id=1249): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, &(0x7f0000010200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1) 3.662452332s ago: executing program 1 (id=1250): r0 = socket(0xa, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x0, 0x8}}], 0x38, 0x8000}, 0x20000000) (fail_nth: 18) 3.567552893s ago: executing program 5 (id=1251): syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee0000000109022400e2ff0000000904000000ff010000072402"], 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x27c}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x3d, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c68000/0x2000)=nil, 0x2000) readv(r1, &(0x7f0000001480)=[{&(0x7f0000000000)=""/119, 0x20}], 0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0, 0x18}], 0x3) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800458600340064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80c20002907800e7080a1b0000000e00000002"], 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x2fe2, 0x0, 0xffffffff, 0xc5}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r10, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$FUSE_INIT(r8, &(0x7f0000004300)={0x50, 0x0, r9, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r9, {0x7, 0x2b, 0xd, 0x2, 0x7f, 0x6, 0xfb, 0x4, 0x0, 0x0, 0x4, 0x3}}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000100)) splice(r11, 0x0, r1, 0x0, 0x800000008ec0, 0xa) sendto$inet(r3, &(0x7f00000001c0)="1c2100bb23e706be", 0x8, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) 3.436100993s ago: executing program 0 (id=1252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) 2.851613388s ago: executing program 0 (id=1253): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010003, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x231, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x100}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 2.693663949s ago: executing program 3 (id=1254): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001040)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/215, 0xd7}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f0000000200)=""/186, 0xba}, {&(0x7f00000002c0)=""/153, 0x99}], 0x5, &(0x7f0000000400)=""/11, 0xb}, 0x7}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000000640)=""/200, 0xc8}, 0xe692}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000740)=""/137, 0x89}, {&(0x7f0000000800)=""/38, 0x26}, {&(0x7f0000000840)=""/246, 0xf6}, {&(0x7f0000000940)=""/244, 0xf4}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/5, 0x5}, {&(0x7f0000000ac0)=""/109, 0x6d}, {&(0x7f0000000b40)=""/113, 0x71}], 0x8, &(0x7f0000000c40)=""/123, 0x7b}, 0xc}, {{&(0x7f0000000cc0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d40)=""/124, 0x7c}, {&(0x7f0000000dc0)=""/137, 0x89}, {&(0x7f0000000e80)=""/4, 0x4}, {&(0x7f0000000ec0)=""/54, 0x36}], 0x4, &(0x7f0000000f40)=""/249, 0xf9}, 0x2}], 0x4, 0x42, &(0x7f0000001180)={r1, r2+10000000}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000021c0)={0x28000, 0x128, 0x24}, 0x18) r5 = openat(r4, &(0x7f0000002200)='./file0\x00', 0x8001, 0x385) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000002240)={0x1, 0x0, 0x101, 0x4, {0x89, 0x1, 0xd0, 0x8}}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002280)='./file0\x00', 0x142, 0x6c) mknodat(r6, &(0x7f00000022c0)='./file0/file0\x00', 0x400, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000002300), 0x8) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000024c0), &(0x7f0000002500)={'fscrypt:', @desc3}, &(0x7f0000002540)={0x0, "d13c383bae4ad497fd5697549a3f43190030b13ca28a91ef894ad500bec7380f341f8a748977bf39ee82cf9c725821b9d92d23acb595b79e606aebd8fe802867", 0x12}, 0x48, 0xfffffffffffffff9) r8 = add_key(&(0x7f0000002380)='big_key\x00', &(0x7f00000023c0)={'syz', 0x1}, &(0x7f0000002400)="af74a824d76d3ea4dd7134e1968ac610e801806f0ed3be16d970555bb80cae75096aa9adce7049cd9ecfed546a31389ff26fccf8719b1743db77437be1e3966921331f13b4aa5dafb5362b323358bf1f5cdc6c238bf75a5ec26b59b5dfbb7d0badb7758e6d5ab5ab4a059a895b680410774978d970c394ac436477d2a90d0ebf8384e109706cd8377a831ad77752008fca2fc63996bcae3e651ba613b33ecff3cd3f", 0xa2, r7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002640)={{r5}, &(0x7f00000025c0), &(0x7f0000002600)='%ps \x00'}, 0x20) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x4010, r5, 0x8000000) r9 = fsmount(r5, 0x0, 0x79) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000002780)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002680)=[{}, {}, {}]}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000027c0)={r5, r9, 0x2e, 0x0, @void}, 0x10) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) read$FUSE(r10, &(0x7f0000002840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) r13 = syz_usb_connect(0x3, 0x908, &(0x7f0000004880)={{0x12, 0x1, 0x200, 0x9, 0x44, 0x83, 0x20, 0xbaeb, 0xeece, 0xb630, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f6, 0x3, 0x5, 0x2, 0x10, 0x75, [{{0x9, 0x4, 0x8b, 0x7, 0x1, 0xee, 0xec, 0x6, 0xb7, [@uac_control={{0xa, 0x24, 0x1, 0x8}, [@processing_unit={0x9, 0x24, 0x7, 0x6, 0x6, 0x77, "c056"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0x0, 0x4, 0xd, [@generic={0x3a, 0xf, "ab75f36b0b9cd480619b7003894c33f82d980eacb6d4227c1763493464140ad8f08fb9102fc787e0722d1d6184643bab66d3b4674e8be46f"}]}}]}}, {{0x9, 0x4, 0xd7, 0x40, 0x6, 0xd4, 0xf4, 0x1c, 0x2, [@hid_hid={0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0xa54}}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xff, 0xe4, 0x1}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x5, 0x4, 0x5, "8e26f5"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x6, 0x3}]}], [{{0x9, 0x5, 0x0, 0x18, 0x40, 0x5, 0x6, 0xa6, [@generic={0xb5, 0x10, "21790405592855360518cd66b911ee8be5a3b88a756da6be88310bab4fad80ade22ba017a04d5ef34684f00faaf699ec22ab6d2f48ac42f5db15da4f0e3606a9876b5551e50cd56eaa717457e728ea118110b4b6b8cf46dc4d70ef87741e97b12318967ba931c669811115a78b60b7e2b6a6e2d4d3e9f05a918fd54cbd74a58ee40b84761feed2fbc875dcf075e49aa01af6e4d476ccd1c50493a33988c626e345619e0fa84bfd5061042e1754f93d63418a2c"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x2, 0x9, 0x6, [@generic={0x83, 0x14, "b40cd440e569d8a3374146bb32aa8cb4e0a27126ee94a56d465dd3711b8dc231c66bbbcfae8022b21096e205b881b2ee2ebd197bbc7d3f6202e48ae431e931d454738cc2db528f6222c13e378bb3d5a1b1c9619c13700bf06dfffe6ddb6b80edc7ac1b7c84212c1beeea84ff59583385951a1bdd23fbd5f35b46122f75d71b5226"}, @generic={0x65, 0xf, "a6bb058fd706c2dafe540ebd831a836eb1a04cda685432c439200efb05d38ac0a466c00bd705a309e52cafa5fa975e33df4fd78acef576ad7ed2da979f71bdf7ec7746b86f9f400e0827c15449eaea43a178955f0ebb0239d111a1ad75ee40beb5fd23"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7, 0x31, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x9}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x4, 0x2, 0x6, [@generic={0xbd, 0x10, "2f95822e316712ca7bbcbce67b0d67f544c50323b056fc1a6b310bd73c5727002e1bb07d1847423ed46414747fa70ad7c2a0806544369b8355705bac373a5e9bbbd1cca5e7d0cb77fe295e2543b968351b37029941d6e62713d9108eb31afa4b7d6b094ef948ff26dd9f989054ea4b552a8c3ec9c4b6a8f6135fa6ba4bdaebc5941c090bf9a775b64762f0b3c7478f49c22aaf0f8eb3a6d4337c097014f663ea026d5de3f7222cfe018eef1d10ca8517bb5551ebcc827072abd334"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x200, 0x6, 0x3, 0x4, [@generic={0xc5, 0x10, "9715d23162013df12bc5ebe05fe0c306cbaeda9b374d158d856811e0e6725695c6af3ec2c5fc5d25efb20983aac9d47b4103a3c6608d69f449be294491e7788c95fc2f1905daa808db3209ea49284a8693b9968a0312a595ae0178179347f0d64fd1366cfa84dfb8f1f70c3d351ed1f7c0a7454e08bacf39805251b93fab44daaa64e6842305bb01f29a0a6bbc2df4eeb2aeefeea7c47e38c3d163514cc6389ce2a1367e2fd14743589cbc6bd112b4b478cff56f3346bc56e562fba87a8083ffaecd1a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x200}]}}]}}, {{0x9, 0x4, 0x61, 0x4, 0xc, 0x9b, 0x2f, 0x9f, 0xb, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "ea413951"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xbf, 0x3ff, 0x40}, {0x6, 0x24, 0x1a, 0x9, 0x39}, [@mdlm_detail={0x1a, 0x24, 0x13, 0x9d, "3d194eb61832de99e827373c6e5ff1836441e835c0c2"}, @obex={0x5, 0x24, 0x15, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x3, 0x25, 0x5}]}, @uac_control={{0xa, 0x24, 0x1, 0x155, 0xd}, [@selector_unit={0xb, 0x24, 0x5, 0x6, 0x7f, "12db2dbfebee"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}]}], [{{0x9, 0x5, 0xe, 0x8, 0x610, 0x5, 0x5, 0x0, [@generic={0x25, 0x23, "333510276e47d1fa1998a1c71a82b4e9ea3a7856aface5d24fc5448535cb7949dbb428"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x608, 0x6, 0x7, 0x4, [@generic={0x21, 0x5, "7102bc051576ef133afa8e16c34a54044517a88469ba4b8bf5c12be37a00c2"}]}}, {{0x9, 0x5, 0xa, 0x81bb0e18bb493379, 0x200, 0xfd, 0x3, 0xd4, [@generic={0xc2, 0x11, "014d7f33bfcad8aeb3ee8827bc172c5f04f22f049d61d9fd9ee74e99eadb64b330b0edf097f81da37fa6378a897a59737dff69278486315630ac257f933325736b10396cf677691aa516b4512b9e9b263b0c0df46b506d4bf918dc590bc3ff01cfac60f488e0bf39bb7ae1f257ea7e36361691ca2e0ab70447c4dbe616c7694cdf5e1d00e5af9165bbfb555e7affed592cd4f551323293b9cdd2b895ffd0c814de7b4d9cee2511e4d285eeae979e6f35578703ec1ea87bb0eaee1a85952ab368"}, @generic={0x9a, 0x28, "1abba684269e97f5103d6864ce99a58dc5465761c0519869bec74694f22e2a245c42e6e8d588fc111e5d7e6eadaf7192352422874a14d33058d96fb43d967cd630a9e2c140201ecc9ede7fa9ba6422054f21fa16ba820c567747a675f04afea408cad7b68ca7de73f9e86bddd8bee79ee846b9d1e1a2ed1a9854a80afe5512da001344df1638d69c6386c9e54c647865e320c50a13ff4921"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x20, 0x1, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x8, 0xd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x6}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x81, 0x0, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0xa7, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x81}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x4b, 0x6, 0x1, [@generic={0xa7, 0xf, "619933fd976f11b94600dad8173c981cd280bc9f3844619d50942691f0a54d3f578642fde3f4e4bb8538f8bb1ad94f79f3b2efad12a3704a7322118bc00cf8ce84ce3b4fa65baba39c03bbaaca15d7ce0bd4928d2dd33b541593485cf056264fb3404cb4e9faa2b34e0f05258b6eb2a541bec2c2765866340db151e96faf3da13d3b8faac31c17a2cb9ab0d80ce16a00746acf99061ace8704272f5a6a3d63c827d15f4df2"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x0, 0x81, 0x95, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf7, 0x7}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x36, 0x5, 0x5, [@generic={0xa5, 0x22, "32fa81b837c1d2d8e6fdb7107aa40c605bb8ea09a4b0cec93ffa457aa50b161c2084ef7c6d4bc287ef2d721f97a6edf339cd5f390bfffaf087508f167576f8f0d5c2d8053150ca1ff717a601f630afb4bce57cfe54c240b0cd0130b36271cbbaa8f72152987883882dff7dfdce2c93476db492c0c4cfeead13684f343ff7b4be94da480412e72557b2d0c9e2e986ba5827d495a58cf45f0a4c3b16186d9d449e97a156"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x8, 0x64, [@generic={0xf7, 0x3, "8cd37d853dda73292f43bc8eb1f69a6281feaa7dd41d7e8608fe77ced2702cf5057bc65c7e65ffbb059f6aa38b7ed87bba875f4cc2eaa758dfeb8a24783c2ba7973e4f5045d51b9da5211149343d36e95518ddef025663a71b456e560a87d974d4d5c034a5b264d57e1007cda820000970455e25970c514571c19f0312cdf7c88fe7e443a65a44d06c3ed99fc250b4bb81904aa399664268fabcc05515905a5c834ebdd0eca7d3680a3c1eb3423ec5c3e0b4427be1c3104fcca6ac4eda9e1e68a0c657fc46e268ff31b7ebd3c41edff3db810b198844325df52a8f406fa2cb2e1620cda44640d899b32beab250d65f45c8fc4bc73a"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x2, 0x7, [@generic={0xe, 0x23, "4959f215f5c9f3949b93609b"}]}}]}}]}}]}}, &(0x7f00000052c0)={0xa, &(0x7f00000051c0)={0xa, 0x6, 0x310, 0x81, 0x8, 0x7, 0xff, 0x1}, 0x37, &(0x7f0000005200)={0x5, 0xf, 0x37, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x40, 0x7, 0x2, 0xfb}, @generic={0x27, 0x10, 0x3, "76caeef7106094289bb838a1c548a6c69e21e4c66406e4599a56c9c862dc02c4f4edf9b9"}]}, 0x2, [{0x4, &(0x7f0000005240)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000005280)=@lang_id={0x4, 0x3, 0x425}}]}) syz_usb_disconnect(r13) keyctl$chown(0x4, r8, r11, r12) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000005300)={'veth0_to_bridge\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000005340)={0xffffffffffffffff, 0x1, 0x4, r14, 0x8}, 0xc) socket$igmp(0x2, 0x3, 0x2) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000053c0), r9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000054c0)={&(0x7f0000005380), 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x2c, r15, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x937}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x437}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) 2.672857371s ago: executing program 1 (id=1255): fsopen(&(0x7f0000000040)='virtiofs\x00', 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x13, 0x1, 0x5, 0x9, 0x1}, 0x14) 1.979559522s ago: executing program 0 (id=1256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0xd, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000001400)) r2 = dup(r0) socket$inet(0x2, 0x4000000000080001, 0x0) r3 = syz_io_uring_setup(0x4e3, &(0x7f0000000140)={0x0, 0x11ffffa, 0x10100, 0x3, 0x0, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0xafef, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x24, 0x0, &(0x7f0000000000)) r7 = socket(0x40000000015, 0x5, 0x0) readv(r7, &(0x7f0000000880)=[{&(0x7f0000000400)=""/50, 0x32}], 0x1) stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000005600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000007640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f00000077c0)='./file0\x00', 0x4000, 0x100, &(0x7f0000007800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000007900), &(0x7f0000007940)=0x0, &(0x7f0000007980)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001440)="1e0564cd9d11890a65d14ab090050b518a817cf0f106d9c2a5758bb564e2d0dd9e8191db376d76f0ed31c899db5be70913199165734d60e94e724d9e1c8c04529a90472029bcede8ee012567ab8d5a727be71a5947e3ebb30d619f7454b4cb0ba7726bc7b2638f51a045083cdac74bedaeac193dd21630a690487d4c1bdffe8629957357a8cfff18898d5c0a5e02b5c356da7518f9b9b8abb8c7b1c27036d87fbe7f6af87c664440f01809b792b3cec147e218656f18b88fd7db70f4d4753a31b2ff028c3fa9003815ab9069359909b679597c0d2323de3edfa2634fdc14a0b53539f5d38a33c7fe4644ad1e0d45a5c925520cced1552676c2393f4dab394541322ab2fc28a899bdb6911772f7725a63f254baaa3103eee1a835f59100f81f0ac99c58d1bb8ce16f71cd2118135ba95a0606804bf1ccbcdc03e596542b11c4e044f7ce4951fa8cccd55457769eeb1df4e4f8676a2bbfc56388f78800368febb3e681e13dee920104ef70ee94f5feb64e3824dcd97f6ac43821896658a165a56e208a268088f935bb1b1e9549bcb0cd294c8c2575accb902ba0530cea125bdfc93b22a8bd85c58be04d961d38e47085c70e8d8280d45b665a0f035ea9f618ca144fda55f46d41091643f6d6fb4989a73cefc1d400fe6666b162239a990240acf83a0232d5116f57f756ee8b08699444e7620a45d7ccb7c833333414479bdec03e3bf6a5c6248b3642e20abcdfcb9a8bb17f763d09f04566218907e830bddeb8d4c6c9e5006c81a00c417c963cfa89cba3adaeb4d47d29d6a05825977a8c8d9a36cfa5a88737bec2022beddd764b1a29b69984eed07c8f20dbfe3a6bd6cabb413bfa49c6047bb5c92b35d2a8180542e175346371d244c754a6797a255277c6dc55cfc9ff1347f65bb16ae92241b3896eb988b1f099cee8e3832d68bcb1d5c00368ba94ac4f319ab37e2dc5bbb8776cce5ab1567cefa171799941ec0a71edb07b2c39795535e464ad06a018403870410579c06818280b9de8995ec142f1da4810d0d162187cd0fd7eef3ebe2df99cb80303d2b01a2b8fca1a0fbf07b1fb3e42140367cc02c13e10f8b84b3deba7fa6a9f0721535c14dedd1a0e1e52ff915406cc3eb081027cb3f07e7bcd19701dcac694322d42d609234bbf80afa4cb72509a3f00dca3823e0845271ce40544a4bf3157bf88db7479dd5e35853c6a3a88b0915c5be04c811778164cd76d16ad6249251e338fb5f4f708699671602a63a810244daa118d342c5f2637c6749b9339ae2021e25c5014f0e003d35e97003e4e537769b3b057fa41945bb5b8d885df5b9df2b5e76121fed80ff6fd3c75b5c6f147631fb4db92936b82a27568093081006fa4feb3501653d4a0a89dce8f0670e29e16b02503e6e9a021415903b7f30affa2a8715c5df7d8c44761291e424aa840557b813f267a6ea0f11aab68a5dc40956cc3092291ea4dd71da46a07bca9e6e1bfc57eeee27748c956e7f35e05f44d481afc42bcff848201e319a2e09e68b3735e76becf346018e8787a43166f3aac35079582a10a227b4ef6d0785b50f84de083807092b52da1980514a01790f94a06233b42dbd11e56715cde37d5de56466a4101f9e4fc75b56079a976d7eef7675e32dbc8fa59c562b25535c68fec0b1520c64856f08704d84cafa306ff4c747689697c2e03389f2776d0b437b3f3435ca916de2eb03127267a8dd821330f1dcdcb3328d854174d64d733d648efe32f82f8c74bface7d4f299acbfb5a07b8b247246b0dcf39d6f380b78904c4876c74a5e0c0a5102cf10946095efbdf56e4fd0320ac24d63395a36a0f126ab3ed54b04e2d45e7f0439ce61f313ccbaa0b20fde25623c43e3f56fa9f53673f80522048e628912acd141f170153fe6108e09ecc624f2b627a917f4e8ba7b3938a021d2036eb781b98e96e0ce4b95eee89c3983c9f484a228792e511427f762023be698f8a9e0df079f35dd49b0962da5905ef4e731131d5332727d37fd8ac3929257cba6ab7f871dca59edb046af77d52ab9530b0d5521d08dfccfb7eb5aae428426a87fd261ac6d70f4fb9b69f8d1c8ba4c9a1a6a5cf3412be65251f2fe3244a825d73c6ddf080d3e9e14c7ac3fe6a9dbd8b77683119e82e561e91400a9e9f5af108f6009a9bd5c18090d13514123ebd9d0c4bd042d2768c724eefe155005c37550baaef4a83ccd9b2c5280fecb188d3bd1dd6b0bed1439b4059f0babfdad99a3a1190e0806dd4ea42263f9bc194c04238462a4788d102872a0bf7dc48b427804b2b470cb7cbada1a10beeef7cc25efb30df5db5a2af813e29d3bce3025dc9f5466d7e1d5e0dc8116a0a2ddb9967697f28b3b7d8a49b4fac7877e0d57e2204bbf86da2c1d287f0a467873fbcf853ef4f986028ef714d7a13e6c71929fa3b6fd9a3a3e2103355c2afbd0c6d9484c94bfbb83bb48e20625da1a92da52b137ec5f269fb100ce8a6c9190f341a8698d85afb387ac5d1f8b9b87b2daf43fecff9c4fa89c8a0972f7970d9b65bf6def0ada59ea6667e806916cad8f920b84806c84af2b1e168f5e7210126be99746a6f2e218f4772d87622735b20f1ff2a0042c3fa77b7eca0cf780acb111890838b86bb35e152ec58b44b8e3c0dc136a6f725c55947afadeb0b082de22e783351013b44937e65492e67b9dca1e1374475fd01e7764b50e02d8bfb8a9fc5da0ff3ee20cd07d4164450d540234c076865a98142d8e7bc9f7099e069cf6863cc907833d3e02be459c5cff2ed34028124b613e76f8bddf16cb89614678de56382f3acd288e8c53371df432b5a56dd5595cf4fed0aa5ed096548c5539b11dc50ff7dc8ae8deed7cae1b86f213dbedaf040e3b3f332d1017f78f2e47cc96a955d1a08b3aef64d4c6f90ba7876e94c814fa5b2d9ac88d4d6e7082d63a59b30eed927b3d758d52354eebc52880ec41c34bf8ce3b8a34d9378a4edba38b666a34745023d79eefead60b7022e54d1e860382230aad18e29261527e949edf350214fbd9e926bba0a6483f654fa7d2ede7eba547c6815a701977be889103879ea86b553a6605461af89ba33682691ec5c3f26e01fcacab2c8f96741e5a624d142150e8e2da8016a15031b2002cab722b16c57926ec36cc1e7fb617610a1d287bd9bd5a38c12a690aacd870ed1ca6e39c3e9cb0f373ed7ae3052de0ca1f0fda2382367485fc3abe954742415bd1d206aeeeabe54c8df5247d191a9d037847a41a92d624278809fab4721209adfa1e256ca447d7c253332aeea6626ef1373caacccacfc3f5c13465e76d3d08f22bdbb8408f8d19707cddeead69b15bdeacd5e70b48d3544f3a76a517ca88fb11eb28c31701f1f74f4453c49e7c3a8e980a3c6844b5939ee7d2788c13bcfc4bc8e68c956091bf948dd57db7283545634d7bdef6450dfa579edf1d285d52227c35b62865bed46a7a652d0609625aa01721f08f60af628503f70a256516efedaba2e3e5b705f7f22cfc5d49f26306f4acacdedd5c050939bcfc6c0c4a7057b7ac6c03e088c635f7c0ce80210a7772018d7efff556ac462afa61f2a2cf77c3826f450f2c63ec6852ad0ad0844edc13c30c38557fd8a3a564e8ae541122627fc75039606766875acaf87f88c680e3725138d5376b54ae3afa7ff70d106bb96af9998cf579e2502a901920fac00510363dd36d7e8105696e449d115d07c6bd8ae65f67659ef9c2e8f7e7527a69b9c227e2707a4032f559b057d397da8f43397333338a3f91aafd0cda8dfa157d3119511b6cdeaf10d6586f8f421fbb4afb095d74313865fcbb481849f325ca69520184ec7157d9419edff348ca9e4ccbf5f44856204a074dadf6a2e4b81e9413080778326c4031b31ac91ae3cc162318faa8ab3659fc54b1cb33e0be81838db67c63f816404d6f9b7f31218b2236d3c64bf31325381fe81ebb2a9ea42ce71e9ddf5f1e47a0c9b74c30953d5145878ae735af0dd5d328e3d79aff691e8bd4e5202fa22897385a4688d34034b503b9a9e1c12dbbe33e458c2af7834aebfdf3e4780360d75bb3b89ccfad7486af16055ba9555c627789b53f852fe41543911b167174dfc817f9d7af09a99ca91d1f6f6c652e2bd431807a88759f9991982a26db056de99bd2347ab6ea5e65bcd0d05f2e7b549e566a0d98aa676155e588ffceeda9e854caa952de1e5d08041b6c892d9c6f711c8a700e5c80ac6890c1fa980ef2016a623ec6fe2a767f82538a41dc8a872026c4f3c40b42ccd723bc78af71a183da312ffe1e83d5cb4b06c92e484d6090a603ce86744c0675c54a439b9be05f4cdd3896932a5728af58be1dbfa29b371c73b4bf3cc9fa84af7e4238875a4d92d18d5a4c93ba72b2063fdc9439160ae7d13fa08769c4f33c4acf4f0938058383eaa469432f49622e3ad2c73dbe455de096a3ffd6f336a0b2d500ac15c733a9f6999a85692f6ebfef251828c548fde1e52c48e3f4a728415a4f1580f457918ca835ed58907d1d16b7d5dd23ca94119f274736bed8d3356f29f4a94a8905d5f1cb1f239b8adc39d78c19afc0cfaa72aa5cc6a457734b1a00b86d081fe0fbf2cf03974631a8ff0afa4e8f85f618f89582629e353adda562413dbc116c9f3e183be1f7c83987e050a2aa63933f933bcacf2cec7ee38e942f56f9d286931f13216e17c9f2b798baf7cc254804954d9c563a2d2b32d170fcb3646e764d4f610267c12f4a247b2cf1a90a2c37ba375d1c437070bbcc260582fdb6c773d173bd52ba9998ae5d93989daa1252d7ca0060946a3c575a36a77c7867695a4cf5fd65e1db2c6c7e75f30e1e9400580f1595e9671ccb34dddf49933ef29793b6b01781d3d4d2c7055beb1c9bdf8287d31265c5a95b5b3699f70b0483ab5292d2dd606eb6820573af5aa7962496ee0bf9921dc1282beb5d74648ffe0255ef07014993e6133b9db0ce4b842f8b34e1bfc21694b8fe1b622b68c56215ea8f7582c41f2f97a112cc6d780c2ed6bfe9dd08181a8729600e676a6d5c669ff1ede94d01c4f9151c3b89acc6d4d3ae27e70d6546da9aae8b9c4efa874b1f4218b9544cc1b095673824653c3e85950037eaedeaddf8a0d9a2eef2485f70f96ef0fcebc7035b66b00c8df4f45aecec141406d382127a9aa205901b3a4eb22c2a0ce9a08828121d9c0c84c9793482cd4a96cf8008b2fb03bd087d1248d033253fc80918afd6414e1d43b4af9cb2381bdd5db1b4add383544097eecca406a5d344d18f1bdd57222b9dcb3cef35daf34a3a5de5d99d65aa1b1eb40462ac179f219adcc559c30ca5a7e504d21274f7f9ddbf6cb245042f2a1eece3f510b9f9b2402b57dc8f20d5430afc4a8ab39808b155ef22f1375b6fe7e9b3b9304a13a436d4f20c1f03c1a152938cff61c9769e08e732c9c96a02fcd2949397c68850512e481ec838af7a6d56cb86a14a9fe640b8f40e4d0307d3d2c7c99e0cca97036179534a728918aa0c3a97dee1eed0fa0098f8d9bf93974f6a32ee927acbbad1634e7b80437af0a608a599adc363b7e52cf64ad711d91ef88ccd6fa9f246b1e4ac05f3ca0e0b2e0655f25c1614c9ac5c7d4b6026e8d235406a0dae5a60b4256b68e83d9edb0489288f4740b70b31876b019a4e70fee3e1e3975792c007f784396c727fb291b7401683630ffcf9d060e1121a9d402edd2d58d8928f0ef1d006f054319d0cb20455fbc436abe2b1b6cc2615e4cedc0aea6452433b18b457a5b14d9f13c5e98a75941a28c056a045cea3e96e4bcd0998fa2afd63cf23cbb8eacf3deb1df6e998a8d07b4c90b8a7df257756abd55dd343b9f86181021fb9a2136608bbb2cede9dc285cbf2f26f7aa0c9281f0f804003244f8130b48363f7dd59593e466728fab7a8e0991463580addf47881b646fca37740d037809354154a125e3f203c4863807625e0b92224a7de6772e06a41163ba4ebe5fc0ef6dc0ef50711fbdd66aa5113c49948abc0bdaae855a88048550c51a5ae86aba319e94647166bc62d2db45b6aaf6c1a05a4f39f44c160b8cc39cd168221bff3119720186a0c294114475a6549478cf39a16afc2b3a17cc928601eeace66b2298f188743d17e6ac2dbe929a06b16b7bb747ed8d3f146db9c30e94e13cf640309b443df0aa4a86acb788fe699dee2bd27930bb438adcb5fb737b8cd63abddacff955b7d9cacffef6108ec00b5afc2eacdb49c0e6a4455bb7eca0191e1dfc52df5b3dca628bafadcdc45d4824c223811329358105369a6cfe7472da9e2b421abed6bb8f6efd15654d9b00e55c4dc16cb3d9e4c2a055fe9f8aef8244a85669859f8a872b02172756ae469bd8b88b4cd85e23696c5bdfdd6012284d63069f4bb03f37b9a633866a3371bdeb3d54fcc96549f413cc7acba0f0b98cc7804d62479a7f8d7755ef5e5f6a61ccecff3cb11a02805f56dad34d21668968c846e33378e97e70138711076e90cd5a1560ee9ef478f3170dfcf828558e96c5d2a6a28944d0a5f13073ed0db7580481ea09befdb1f8a967cc430d8eb15998ce615d015670c4b95ca221ab608a4cbb3e8c4b57f77f1c96136414e3f536915f545c7c80b9004253e08cd50660005a35a828feb2c6773ef46b61a8cebe76ed43b1802ee2b464d258501b713c93e38e4baf54e07328b84acf87e2450d60548acf0bf0dd1997ed4884c4fbe05cc18c5e2a451c702d857fc544ceb17fd60faaa847a74a9c0afd8360e4a759a9ea30747144789adc0f802d5541856c3a5313cef34ed52cb574c909cdde522a55211cf084e3bd504db954c5a5a511b0c1d2d6d58e7005de4fba8b6f7ac270cc17ca24bf40235fd26d58207d0c733b7cee369662f79552abda7a48875e3325b6a2616a8e12f169a1175c4d7f0671ff406a683924c3e4c81dbb71e018b029c2d9cdcaad51456bdc4408b196ce3ffe5ac79e4de67757de413f7bf83e62a2b5889bd852fbdbe3bf1ee7f78232257cfa9acd19141aceb91e433d0a3ba807a7da39a95252194523a5ccb0e9cbd1df374c890b5ffb1949de01c63c2a1a30038843253fbc10dc5e4b9a5ecbfc3816c69a23ce85e185a21d434acb5f3a8e2ad75e218299130a85bc776ca5f06f5e2d7f978919285fe0849d73e5b6523807529bec2cfc15da3769781b8e4eba88033635bda7c215cbab1fbc7b736502f9a422d964302d3cb3d8f92d83d40cde97da0763ce9d2cdc27f7a884d16971c2d90da4d0bd442de2af75a0c9d3b4819000d644aed05347f2316d025a489eb8e9ee7aa3e7ff94e85530c9c7a38590d1c7596d8ce39910809dac1beb14daae3323283c2a7f4db012e2d8a6bc7745b2f4a22e1aecb755b9c3859300a88972a991c48a80c702ca6e2b0eba27cc73d23a084dfb07eda0b00ea67cb6e00473ddf10729b2403b959894eeaab7bf8665051d8e1294219a4d999ba73922b1476ebea0f7da4cb53958197aafa38b4185fc52eb73ca11010569ccca822a68d280730029ecd3d223c300d7e7a58b65f2c312e8233997c661c09c6a740e42223b8cf347267f2cd420f17eba81a2a3728d377ee7c08fd6307e23e81e33e2ac12c382a2742b1fa9e8945e674875f6d5c7586b19c94a034dd1593bf91243b16735c3439318a9e03605c9e0128c237e9c134d5e863e05ee06a34340498d1045a928069e56148b6e2082e4dd06a609dc9768d1da2b383980a17c48b937f3882d00186f08b30c985dcf1c77a14bea7b7065e7fe8fba7bdb4aa921d700cd73c9ae9676f34b8f589a57c4bfdc209eca73e7744664324adeba360fdb480f7b94f35b8df89d37de44465c090ad2843c022236808c1d8d2a2ddc88ee5d7edab652b447c9b7a60f3e1a95297d06ba08ad430573d47d8217a318cdd9d69ea403fb4d60f304877e3ca114ae5f64b2f66448df8fb3cb53ff99d78ea5f27b65eae68ba18806842815aa7bc8b21fca645a558209a0ccf6b79880f90e191b8e071614f6f0629e55b54bf6dffe809d3c5523f427260f598c9e9f3b5f216664693a3bff9db94f3949483209d9f9a308e7aac51da57aba4df9822133222b216905fb8948aba3d2e6048e1056ac95a9fc5aae2118777b206add75b938dc678e285da66125729f316da1d3e959d85834c53924c5beff615c1fdf5f3e97d01f2962b1324bc0b9ae4a10948f31790cf812de5e4c06c85c2ba6d53433b4157d9038e98b24f789daf6c5a7ca8134a700d3bfa1126e2481a4247ec202f08319e27823e22585f35bb8bbea812ab581f5f5951ff78c16da399b8f3c0babc40ee441bea3c0f4864d43fee387c9d57d9a6d587885803e319e43ff06512c92c6ad11fd673c7d31cb6ac4224c8ccb35c8370b8022fbecedb2cb17ebde96ee0348785edf023818639e15bf5f9b35527cc72a928385a19338892bbaba1f5cf2acd680b0f09a88793865cead3bd85c6760bc05c4a74d4aca529a59f091219aa8ad5cfa291ff699f6ceb3e91b2bba2d88a0a0b94c518548c42d278673b1961dcd80ee316f97dd473a687d640e4c10a60547e5fd95ab5c8e49e5960f5267c38ae179666a5db14679b35ba6063dbbe459a7eea33c672215ee080602c6427355672b8ec810ef22dc1e69c2ea6ef2f56ed31439f53b13717dd0e8a202a591252ba35fc88ee8cbd4b0cb2fd2d52555ce8feac90349fcec28881badcbc60a8a46201a0855f20ac49b340074ddbd0b5496b34e1ae338d5ec2c9290b983ebd3170827c06148b7e0db234efcd18b91b5c6644cd29b7582841a728d619cca59025e9fef4e00a57b61022029781cf8236fb75c4326e01bc181fb79a3ba52de93bb50b7dca5521ef83cfed2c169d9d268ae4fe1f3bfef5df853d928a094d54cf1a811413a14b9273fdb186eb7e9b1ff6927242d01d06616b3f80b693ae52fe42e9a0988065d9f88691920c0ccc594456edfbbf639a98f708abc17f25a42d3627cbf7db8db4f361da7dc18cfb03d4bae672738e1a4c208fe7822e84856a1578d87a86e53518db273788c0c339adf821aedc25f3f6f3c38eefa07f4c3e68e297bd99d828174651efdb85e797d6171a6d1c250e4800bc8e5898a990a985ad613e3013eb0791476500b6751b8655075b63f77468bd3f3a9ea17caacd570434589e866cb5155a1587d5f8466c6d8154e5522179d004227b8237d3fe8b97aa6a9b64d96666ebdae6fb8a6c9d27e63b521eb1e4857dd9d44a7da1a5603bd21cdae568b9d809a2d78e1c337d65632db60b8f77462b107ac768d908152d15f9e0f4b223a2a24e24389f37c3d9664e8a6f2b41d94b3dcd6e2e56dbd5c8d2dc16e0a97172e9e5f70dd90e256ec6ab3dc0d8b5110864c97ea38e563f0d6d6f42d9e17756b7335dad9cfff7243f730e7b9c68f910ad5f196f47efa57d598710d3868c1e4c4182a402922ca51b59e5957b93b3c9ae9d081165867da1b54c13920818e6b6978a89705c33ae73757ae9a79bbe6b7c398fd52f3341f4c29b045477bc235363817b8e5096cb777527179ff9681863c73185e0ebb9ae03f6a5cc65b708e4ff4c21a1c2da1e3215c2f0e16880483ee7b1a877359ebfc220cc953f07cb5ff10f36fa5d7f16060055da5f092fb31270b1e9e39e84163e5e7ff135745bcf0c9c03dfd825176c051f7fb77320ce254f289172c4345aae28125696a0f3dbe91de8c614493b0500393b287378cb6988cff82d7e46980dcee40639d7f404f3f44dc7ca2619d022f5dd8254c9f8b2fb2ef62e587c974d59b5907da9f6688f6ef3c51f3acbe75396ffa1ffbdb9adf3eb192ce042e552933f7e63663cb59c13f5b704a137e0ffd6590ffcf34b61139fb9d52ef31ccb717dfcfd0e768fcf035cfd083c112880f5020a6c04785acff9c28d254ae5d15b853057a4449dbf4af416b81f459681466eef1fb903d0e465e681425d5eeefc19a94dc6c1122efe941b998af929ddec48ffd88b2096511985cd4bb41341b4f86a9af1c1e7d3353ae48bdba3fd0a26a51a7879fb492b8863f7d73dbab83c9de0f931f9aee770278af1ff472f59ccf9832cd7adaab19a02f952111d9103cf493ad4d63db082ea1d75a6252e2b956adcd302e6f0600771cb84560b716a6711f3d3499d5ffb4360a4fb3dd20dd01118e7230aa049ffa7d9c91ce1ba31f5bd8e343a8ca53281545dc046999f76d6b7200d89c4584c89268c3c64522452cf3387ed5658f9649fd7b37b598a6e70fefcbf006a7382b4cb9a99fe6db40e766b7894a50a393e442b79b3e42dd82970e360abd7041d9d17e45a467132daa4e9ac33b2f9602fe37700854f7182a9a20a134a663595839432be2304b0a2640f053126b7954a25d8d4f7ce629b13a48a21b36046951879e6294258a34aaa520c2bc50c056dede6906955b4e73f8f09c44cf4c3ad2bda129af4c3cd2985fa8be357c77798a4bb3b941d4c6a83bacf8e8118d8f0f4de8035224543b6834fe7d4af44d14e061cc6c6a17b06ae55e1ccc9ca673076f325d3ab7eb4cc0052e05c6e5e90231f39aa59f73efae827ba205fbdd5961b1396444883b7ba42ca9f7643cf54f90f96bf5d7bc05c561b6d2cb604686718570d0b420370391c5a6d5a1845423d699ff52b078d01b0dc6a5c1833f4c6437d7a2087df70f19cc533dd6971addbdc049a0040febc66a0dc9647c07326defeaa90b0d4eada6ff63c770d788ae296395bef424d82f11701813fcc99848fa5b10c0d7d37d0263f37e3310c46cd5b0d771746fe5617e09dba3dcd96e65295ae68c44b0aa286b45cd5b0225995db95658b169a43a29935835061c5e5fc182a16157e50f14574fdab042f4de2bb9d408cca353c2aa5ed392b26e42d16fbbe2473a05331eb64bb274f309cc43236b9e993f7751f6d04e41f05a52d9c3c37ede25bb57de9f018ccd731a4d9bc722aa37260cb6699ea6cd1292eb1784d2cd8152c78ed808e6a73825062c0cc5d8d38b10c1fd9c17f6900ee9ba0c0246fcb02554617400d7ab8dc5e023d4bb08434152515bef8392af854b26c16242e2991adb00b3d42a2bbba0dcab304a329f3127424d55b31bdee289e2b43c3d486042a78c215510738589e52b7f683cbcd2bc9caf7488e2c1c74921242195473535cf4e074a5848e5a77f2c55a258da59e981408293d3a8814f7fe0412a697c3e63561db2885377fae610079482cd9b61e84caa69e7c291b569508868faad6700bfda07dcf41daae8da582cfbe672f44794cc0619610309f756f475952a1c7a88651ab61c5c3bdd0ec48bc98ef06aa0a78eac5c22269c5a37ce572a4c3f87b4ee144302cea320389a4679eb8fd064b73f52ec06ccfe9cbbdcece94874a48f1ddd76ab37ef57ac6771a48728ed48a1a559c34b2ab6ec394b7732cb4632655412823d83e6474e2fb55134cb14cad3613d076f8b917e18f603642496b07899b0f5ace972fc8789d3c7388cae96aa19b7ce03ef36e32ce1452baa72d8395efb9b760262933fdbfcd8bfb964d0c718333a629b720c6669e407189185ab8f181b0d65a4bd658873f082bd528c5cce8de82acd43ae3adfcbdbece935ef0ae837a5f2e5ae5db2e5f36443d2518c3cce8acced2b9b108347dd8dcb8e1f58bfb9ab04c216d1", 0x2000, &(0x7f0000007b00)={&(0x7f0000000380)={0x50, 0xfffffffffffffff5, 0x4, {0x7, 0x2b, 0x0, 0xffffffff90011040, 0x9, 0xa928, 0x4, 0x0, 0x0, 0x0, 0x80, 0x7}}, &(0x7f0000000280)={0x18, 0xffffffffffffffda, 0x1, {0x7fffffff}}, &(0x7f0000000440)={0x18, 0x0, 0x1, {0x8}}, &(0x7f0000000480)={0x18, 0x0, 0x6, {0x5}}, &(0x7f00000004c0)={0x18, 0x0, 0x4, {0xffff}}, &(0x7f0000000840)={0x28, 0xfffffffffffffffe, 0x80000000, {{0x2, 0x8}}}, 0x0, &(0x7f0000000d80)={0x18, 0x0, 0x1, {0xffffff01}}, &(0x7f0000000dc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000e00)={0x20, 0x0, 0x3, {0x0, 0x17}}, &(0x7f0000000f80)={0x78, 0xffffffffffffffda, 0xef, {0x1, 0x200, 0x0, {0x4, 0x6, 0x6, 0x8430, 0x9, 0x6, 0x2, 0x5, 0x7, 0xc000, 0xfffff801, 0xee00, 0x0, 0x7, 0x7}}}, &(0x7f0000001100)={0x90, 0xfffffffffffffff5, 0x6, {0x3, 0x1, 0x9, 0x3, 0x8001, 0x1, {0x1, 0x7, 0x10000000, 0x10001, 0x8, 0x8000, 0x9, 0x8, 0xa5, 0xc000, 0xe4f, 0x0, 0x0, 0xfffffff9, 0x7f}}}, &(0x7f00000011c0)=ANY=[@ANYBLOB="68000000feffffff0100af050000000000000009000000000100000000000000000000000d000000030000000000000003000000000000000700000005000000736f040000000000000004000000060000002328261300"/98], &(0x7f0000005480)={0x150, 0xfffffffffffffffe, 0x80000000, [{{0x1, 0x3, 0x3, 0x3, 0x101, 0x9, {0x5, 0x3, 0x1, 0x1000, 0x0, 0x200, 0x81, 0x8c, 0x74, 0x4000, 0x6, 0x0, r8, 0xa4, 0x42}}, {0x5, 0x4f, 0x1, 0x2, '0'}}, {{0x1, 0x0, 0xfffffffffffffffa, 0x6, 0x3, 0x4, {0x3, 0x6a99, 0xa4, 0x7, 0x7, 0x8, 0x5, 0x1, 0xdd4, 0x8000, 0x80000001, r9, r10, 0x1}}, {0x4, 0x0, 0x5, 0xfffffffb, '\'#.\v@'}}]}, &(0x7f00000076c0)={0xa0, 0xffffffffffffffda, 0x3, {{0x0, 0x2, 0xfd, 0xc100, 0x4, 0x2, {0x6, 0x7, 0x4, 0x4dcb3748, 0x9, 0x7, 0x8, 0x68b2, 0x8, 0xc000, 0x6, r11, r12, 0xf, 0x5}}, {0x0, 0x3}}}, &(0x7f0000007780)={0x20, 0x0, 0x5, {0x80, 0x0, 0x4, 0xfffffffb}}, &(0x7f00000079c0)={0x130, 0x0, 0x1d7, {0x1, 0x81, 0x0, '\x00', {0x4, 0x5, 0x3, 0x1, r13, r14, 0x2000, '\x00', 0x8, 0x6, 0xdadc, 0xfff, {0x5, 0x401}, {0x1ff, 0x9}, {0x9, 0x4}, {0x3ff, 0x81}, 0x6916, 0x8000, 0xfffffa93, 0x7}}}}) 1.727853032s ago: executing program 1 (id=1257): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) getgroups(0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) unshare(0x2a020400) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x2000, 0x1da) socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000036c0)={0xfc, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x64, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x81}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1.663374476s ago: executing program 2 (id=1258): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="280000001300010029bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) socket$inet_smc(0x2b, 0x1, 0x0) r11 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000140)=0x2000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 573.029361ms ago: executing program 3 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001c00357428bd7000fed3df2502000000", @ANYRES32=0x0, @ANYBLOB="0800800408000100ac14147c"], 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x8040) r2 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2517000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r6 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, r5, 0x3f, 0x30, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f0000000400), 0x8, 0x1256c2) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r3) r9 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000, '\x00', 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r10, 0xc058534f, &(0x7f0000000340)={{0x5, 0x8a}, 0x1, 0x8, 0x3, {0x64}, 0xa5, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x102}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x6400}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x110}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000080)='GPL\x00', 0xd, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0xa1}, 0x94) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="e0fff7080000ffdb8008000100", @ANYRES32=r11, @ANYBLOB="10000380080003800400018004000100"], 0x30}, 0x1, 0x0, 0x0, 0x2400c0d4}, 0x4044014) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r12, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2135}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 405.065094ms ago: executing program 5 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "92b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x100000}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8a, 0x13, 0x8, 0x3, 0x7, 0xdb}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000340)=@string={0x4, 0x3, "92b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]}) (async) 0s ago: executing program 3 (id=1261): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_setup(0x20, &(0x7f0000000240)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd}) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f0000000180)) kernel console output (not intermixed with test programs): rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 360.737313][T10111] ptrace attach of "./syz-executor exec"[5867] was attempted by "./syz-executor exec"[10111] [ 360.797515][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 360.838126][T10109] fuse: Bad value for 'fd' [ 360.909432][T10117] kernel profiling enabled (shift: 17) [ 360.929591][T10117] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 360.938641][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.3.888'. [ 360.971528][T10117] bridge0: port 2(dummy0) entered blocking state [ 361.227217][ T10] usb 6-1: USB disconnect, device number 7 [ 361.276893][T10117] bridge0: port 2(dummy0) entered disabled state [ 361.302297][T10117] dummy0: entered allmulticast mode [ 361.357971][T10117] dummy0: entered promiscuous mode [ 361.442567][T10117] bridge0: port 2(dummy0) entered blocking state [ 361.449162][T10117] bridge0: port 2(dummy0) entered forwarding state [ 361.461256][T10120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.081588][T10124] netlink: 'syz.2.894': attribute type 4 has an invalid length. [ 362.159702][T10124] netlink: 'syz.2.894': attribute type 17 has an invalid length. [ 362.600776][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.5.899'. [ 362.930144][T10151] ptrace attach of "./syz-executor exec"[5867] was attempted by "./syz-executor exec"[10151] [ 362.958269][T10151] netlink: 88 bytes leftover after parsing attributes in process `syz.1.902'. [ 363.024065][ T5860] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 363.625352][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 363.661694][ T5860] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.710654][ T5860] usb 3-1: config 7 has an invalid interface number: 6 but max is 0 [ 363.815334][ T5860] usb 3-1: config 7 has no interface number 0 [ 363.821536][ T5860] usb 3-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 363.854589][ T5860] usb 3-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.916762][ T5860] usb 3-1: config 7 interface 6 has no altsetting 0 [ 363.958969][ T5860] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e [ 363.972684][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.041369][ T5860] usb 3-1: Product: syz [ 364.051053][T10166] fuse: Bad value for 'fd' [ 364.068379][ T5860] usb 3-1: Manufacturer: syz [ 364.081652][ T5860] usb 3-1: SerialNumber: syz [ 364.301372][ T5920] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 364.520714][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 364.746705][T10173] ALSA: mixer_oss: invalid OSS volume 'LIN$' [ 365.216545][ T5920] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 365.340383][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 365.390308][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.528189][T10178] netlink: 'syz.1.910': attribute type 12 has an invalid length. [ 365.545441][T10187] fuse: Bad value for 'group_id' [ 365.566200][T10187] fuse: Bad value for 'group_id' [ 365.583210][T10164] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 365.944804][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.663510][ T5920] usb 1-1: USB disconnect, device number 39 [ 366.671904][ T5860] option 3-1:7.6: GSM modem (1-port) converter detected [ 366.755331][ T978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 366.809426][ T5860] usb 3-1: USB disconnect, device number 29 [ 366.960306][ T5860] option 3-1:7.6: device disconnected [ 366.965644][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 367.024537][ T978] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 367.084795][ T978] usb 6-1: config 0 has no interface number 0 [ 367.132084][ T978] usb 6-1: config 0 interface 85 has no altsetting 0 [ 367.157999][ T978] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 367.185302][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.217891][ T978] usb 6-1: Product: syz [ 367.222136][ T978] usb 6-1: Manufacturer: syz [ 367.269773][ T978] usb 6-1: SerialNumber: syz [ 367.311505][ T978] usb 6-1: config 0 descriptor?? [ 367.347261][ T978] appletouch 6-1:0.85: Could not find int-in endpoint [ 367.354126][ T978] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 367.422317][ T30] audit: type=1326 audit(1752587204.463:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.1.914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63bbb8e929 code=0x0 [ 367.445763][ T978] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 367.575444][T10201] input: syz0 as /devices/virtual/input/input18 [ 367.608918][T10194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.667673][T10194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.734426][ T978] usb 6-1: USB disconnect, device number 8 [ 367.825228][ T5860] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 368.011068][ T5860] usb 3-1: device descriptor read/64, error -71 [ 368.256031][ T5860] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 368.480716][ T978] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 368.485339][ T5860] usb 3-1: device descriptor read/64, error -71 [ 368.668577][ T978] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 368.697131][ T5860] usb usb3-port1: attempt power cycle [ 368.700789][ T978] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 368.792261][T10222] ptrace attach of "./syz-executor exec"[5867] was attempted by "./syz-executor exec"[10222] [ 368.839998][ T978] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 368.893658][T10225] netlink: 88 bytes leftover after parsing attributes in process `syz.1.918'. [ 368.903148][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.941507][ T978] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 368.958158][T10222] netlink: 'syz.1.918': attribute type 21 has an invalid length. [ 369.035987][T10222] netlink: 128 bytes leftover after parsing attributes in process `syz.1.918'. [ 369.042069][ T978] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 369.056550][T10224] vti0: entered promiscuous mode [ 369.061570][T10224] vti0: entered allmulticast mode [ 369.075808][ T5860] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 369.118265][ T5860] usb 3-1: device descriptor read/8, error -71 [ 369.162690][T10209] delete_channel: no stack [ 369.172168][T10209] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 369.190336][ T978] usb 1-1: USB disconnect, device number 40 [ 369.415268][ T5860] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 369.813412][ T5860] usb 3-1: device descriptor read/8, error -71 [ 369.850663][T10222] netlink: 'syz.1.918': attribute type 4 has an invalid length. [ 369.880290][T10222] netlink: 3 bytes leftover after parsing attributes in process `syz.1.918'. [ 369.925549][ T5860] usb usb3-port1: unable to enumerate USB device [ 370.403610][T10244] fuse: Bad value for 'fd' [ 370.908292][T10254] ipvlan2: entered promiscuous mode [ 370.926861][T10254] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 370.952905][T10254] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 371.077861][T10256] FAULT_INJECTION: forcing a failure. [ 371.077861][T10256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.117011][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.2.928 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 371.117045][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.117064][T10256] Call Trace: [ 371.117072][T10256] [ 371.117083][T10256] dump_stack_lvl+0x189/0x250 [ 371.117115][T10256] ? __pfx____ratelimit+0x10/0x10 [ 371.117150][T10256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.117176][T10256] ? __pfx__printk+0x10/0x10 [ 371.117206][T10256] ? __might_fault+0xb0/0x130 [ 371.117244][T10256] should_fail_ex+0x414/0x560 [ 371.117288][T10256] _copy_from_user+0x2d/0xb0 [ 371.117314][T10256] snd_seq_write+0x300/0x810 [ 371.117363][T10256] ? __pfx_snd_seq_write+0x10/0x10 [ 371.117398][T10256] ? bpf_lsm_file_permission+0x9/0x20 [ 371.117419][T10256] ? security_file_permission+0x75/0x290 [ 371.117449][T10256] ? rw_verify_area+0x258/0x650 [ 371.117472][T10256] ? __pfx_snd_seq_write+0x10/0x10 [ 371.117507][T10256] vfs_write+0x27b/0xa90 [ 371.117541][T10256] ? __pfx_vfs_write+0x10/0x10 [ 371.117567][T10256] ? __fget_files+0x2a/0x420 [ 371.117599][T10256] ? __fget_files+0x2a/0x420 [ 371.117626][T10256] ? __fget_files+0x3a0/0x420 [ 371.117653][T10256] ? __fget_files+0x2a/0x420 [ 371.117692][T10256] ksys_write+0x145/0x250 [ 371.117720][T10256] ? __pfx_ksys_write+0x10/0x10 [ 371.117741][T10256] ? rcu_is_watching+0x15/0xb0 [ 371.117774][T10256] ? do_syscall_64+0xbe/0x3b0 [ 371.117800][T10256] do_syscall_64+0xfa/0x3b0 [ 371.117820][T10256] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.117853][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.117874][T10256] ? clear_bhb_loop+0x60/0xb0 [ 371.117900][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.117927][T10256] RIP: 0033:0x7fa58398e929 [ 371.117946][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.117966][T10256] RSP: 002b:00007fa584824038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.117992][T10256] RAX: ffffffffffffffda RBX: 00007fa583bb5fa0 RCX: 00007fa58398e929 [ 371.118008][T10256] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000003 [ 371.118021][T10256] RBP: 00007fa584824090 R08: 0000000000000000 R09: 0000000000000000 [ 371.118034][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.118047][T10256] R13: 0000000000000000 R14: 00007fa583bb5fa0 R15: 00007fa583cdfa28 [ 371.118080][T10256] [ 371.883037][T10266] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[10266] [ 371.895872][T10266] netlink: 88 bytes leftover after parsing attributes in process `syz.3.933'. [ 371.918893][T10266] netlink: 'syz.3.933': attribute type 21 has an invalid length. [ 371.928341][T10266] netlink: 128 bytes leftover after parsing attributes in process `syz.3.933'. [ 371.949008][T10266] netlink: 'syz.3.933': attribute type 4 has an invalid length. [ 371.968963][T10266] netlink: 3 bytes leftover after parsing attributes in process `syz.3.933'. [ 372.005207][ T5920] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 372.175654][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 372.184105][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 372.215814][ T5920] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 372.225191][ T5920] usb 2-1: config 1 has no interface number 1 [ 372.231358][ T5920] usb 2-1: too many endpoints for config 1 interface 2 altsetting 6: 223, using maximum allowed: 30 [ 372.244912][ T5920] usb 2-1: config 1 interface 2 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 372.276583][ T5920] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 99, changing to 7 [ 372.291685][ T5920] usb 2-1: config 1 interface 2 has no altsetting 2 [ 372.310026][ T5920] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.322163][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.334007][ T5920] usb 2-1: Product: syz [ 372.341977][ T5920] usb 2-1: Manufacturer: syz [ 372.350255][ T5920] usb 2-1: SerialNumber: syz [ 372.405363][ T5959] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 372.557597][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 372.571591][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.580677][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.604600][ T5959] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 372.616595][ T5959] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 372.628737][ T5959] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 372.638194][ T5959] usb 4-1: config 13 has no interface number 0 [ 372.645342][ T5959] usb 4-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 372.660668][ T5959] usb 4-1: config 13 interface 50 has no altsetting 0 [ 372.676178][ T5959] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 372.685997][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.695902][ T5959] usb 4-1: Product: syz [ 372.701449][ T5959] usb 4-1: Manufacturer: syz [ 372.717722][ T5959] usb 4-1: SerialNumber: syz [ 372.982622][ T5959] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 372.999623][ T5959] usb 4-1: USB disconnect, device number 47 [ 373.004269][ T9743] usb 4-1: Failed to submit usb control message: -71 [ 373.037214][ T9743] usb 4-1: unable to send the bmi data to the device: -71 [ 373.061454][ T9743] usb 4-1: unable to get target info from device [ 373.088974][ T9743] usb 4-1: could not get target info (-71) [ 373.096970][ T9743] usb 4-1: could not probe fw (-71) [ 373.505392][ T43] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 373.548574][ T5860] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 373.675304][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 373.683201][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 373.701540][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 373.712091][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.729676][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 373.783290][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.798100][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 373.807939][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.817431][ T5860] usb 6-1: config 2 has an invalid interface number: 1 but max is 0 [ 373.826741][ T5860] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 373.837196][ T5860] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 373.860753][ T5860] usb 6-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 373.870416][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.884699][ T5860] usb 6-1: Product: syz [ 374.085212][ T43] usb 1-1: GET_CAPABILITIES returned 0 [ 374.090979][ T43] usbtmc 1-1:16.0: can't read capabilities [ 374.099788][ T5860] usb 6-1: Manufacturer: syz [ 374.119146][ T5860] usb 6-1: SerialNumber: syz [ 374.155067][ T5860] cdc_acm 6-1:2.1: probe with driver cdc_acm failed with error -22 [ 374.168720][ T5860] cdc_acm 6-1:2.0: probe with driver cdc_acm failed with error -22 [ 374.331059][T10291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.340218][T10291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.795527][ T5860] usb 1-1: USB disconnect, device number 41 [ 374.989702][T10310] ptrace attach of "./syz-executor exec"[5867] was attempted by "./syz-executor exec"[10310] [ 375.042476][T10310] netlink: 88 bytes leftover after parsing attributes in process `syz.1.946'. [ 375.155477][T10310] netlink: 'syz.1.946': attribute type 21 has an invalid length. [ 375.167709][T10310] netlink: 128 bytes leftover after parsing attributes in process `syz.1.946'. [ 375.202471][T10310] netlink: 'syz.1.946': attribute type 4 has an invalid length. [ 375.262435][T10310] netlink: 3 bytes leftover after parsing attributes in process `syz.1.946'. [ 375.438323][ T5920] usb 2-1: USB disconnect, device number 43 [ 375.500984][T10315] sctp: [Deprecated]: syz.0.947 (pid 10315) Use of int in maxseg socket option. [ 375.500984][T10315] Use struct sctp_assoc_value instead [ 375.900852][T10321] bridge0: port 3(ip6gretap0) entered blocking state [ 375.919827][T10321] bridge0: port 3(ip6gretap0) entered disabled state [ 375.954612][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 375.968991][T10321] ip6gretap0: entered allmulticast mode [ 375.991185][T10321] ip6gretap0: entered promiscuous mode [ 376.763954][T10339] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 376.793527][T10340] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[10340] [ 376.869609][T10340] netlink: 88 bytes leftover after parsing attributes in process `syz.2.958'. [ 376.957571][T10343] netlink: 'syz.2.958': attribute type 21 has an invalid length. [ 376.976443][T10343] netlink: 128 bytes leftover after parsing attributes in process `syz.2.958'. [ 377.002972][ T5920] usb 6-1: USB disconnect, device number 9 [ 377.010385][T10343] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 377.028834][T10343] netlink: 3 bytes leftover after parsing attributes in process `syz.2.958'. [ 377.280131][T10355] FAULT_INJECTION: forcing a failure. [ 377.280131][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 377.309354][T10355] CPU: 0 UID: 0 PID: 10355 Comm: syz.1.965 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 377.309386][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.309400][T10355] Call Trace: [ 377.309410][T10355] [ 377.309419][T10355] dump_stack_lvl+0x189/0x250 [ 377.309451][T10355] ? __pfx____ratelimit+0x10/0x10 [ 377.309484][T10355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.309510][T10355] ? __pfx__printk+0x10/0x10 [ 377.309545][T10355] ? __pfx___might_resched+0x10/0x10 [ 377.309569][T10355] ? fs_reclaim_acquire+0x7d/0x100 [ 377.309605][T10355] should_fail_ex+0x414/0x560 [ 377.309643][T10355] should_failslab+0xa8/0x100 [ 377.309683][T10355] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 377.309711][T10355] ? kobject_set_name_vargs+0x61/0x110 [ 377.309740][T10355] kstrdup+0x42/0x100 [ 377.309775][T10355] kobject_set_name_vargs+0x61/0x110 [ 377.309801][T10355] dev_set_name+0xd4/0x120 [ 377.309829][T10355] ? __pfx_dev_set_name+0x10/0x10 [ 377.309857][T10355] ? device_initialize+0x24b/0x440 [ 377.309887][T10355] netdev_register_kobject+0xb7/0x2f0 [ 377.309924][T10355] register_netdevice+0x126c/0x1ae0 [ 377.309973][T10355] ? __pfx_register_netdevice+0x10/0x10 [ 377.310014][T10355] ? net_generic+0x1e/0x240 [ 377.310044][T10355] ip6_tnl_create2+0x78/0x150 [ 377.310073][T10355] ip6_tnl_newlink+0x311/0x620 [ 377.310097][T10355] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 377.310126][T10355] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 377.310151][T10355] rtnl_newlink_create+0x30d/0xb00 [ 377.310185][T10355] ? __pfx_aa_get_newest_label+0x10/0x10 [ 377.310221][T10355] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 377.310245][T10355] ? rtnl_newlink+0x8db/0x1c70 [ 377.310271][T10355] ? __pfx___mutex_lock+0x10/0x10 [ 377.310302][T10355] ? ns_capable+0x8a/0xf0 [ 377.310336][T10355] rtnl_newlink+0x16d6/0x1c70 [ 377.310362][T10355] ? netlink_sendmsg+0x805/0xb30 [ 377.310397][T10355] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.310447][T10355] ? kasan_quarantine_put+0xdd/0x220 [ 377.310471][T10355] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.310512][T10355] ? nlmon_xmit+0xb0/0x100 [ 377.310532][T10355] ? kmem_cache_free+0x18f/0x400 [ 377.310567][T10355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 377.310592][T10355] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.310627][T10355] ? __local_bh_enable_ip+0x12d/0x1c0 [ 377.310659][T10355] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 377.310689][T10355] ? __dev_queue_xmit+0x27e/0x3a70 [ 377.310732][T10355] ? __lock_acquire+0xab9/0xd20 [ 377.310781][T10355] ? __pfx_rtnl_newlink+0x10/0x10 [ 377.310805][T10355] rtnetlink_rcv_msg+0x7cc/0xb70 [ 377.310832][T10355] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 377.310856][T10355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.310877][T10355] ? ref_tracker_free+0x63a/0x7d0 [ 377.310908][T10355] ? __copy_skb_header+0xa7/0x550 [ 377.310939][T10355] ? __pfx_ref_tracker_free+0x10/0x10 [ 377.310984][T10355] netlink_rcv_skb+0x208/0x470 [ 377.311013][T10355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 377.311039][T10355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.311081][T10355] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.311107][T10355] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.311141][T10355] netlink_unicast+0x75c/0x8e0 [ 377.311177][T10355] netlink_sendmsg+0x805/0xb30 [ 377.311216][T10355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.311249][T10355] ? aa_sock_msg_perm+0x94/0x160 [ 377.311284][T10355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.311318][T10355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.311347][T10355] __sock_sendmsg+0x219/0x270 [ 377.311372][T10355] ____sys_sendmsg+0x505/0x830 [ 377.311428][T10355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.311469][T10355] ? import_iovec+0x74/0xa0 [ 377.311500][T10355] ___sys_sendmsg+0x21f/0x2a0 [ 377.311532][T10355] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.311603][T10355] ? __fget_files+0x2a/0x420 [ 377.311632][T10355] ? __fget_files+0x3a0/0x420 [ 377.311680][T10355] __x64_sys_sendmsg+0x19b/0x260 [ 377.311713][T10355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.311754][T10355] ? __pfx_ksys_write+0x10/0x10 [ 377.311777][T10355] ? rcu_is_watching+0x15/0xb0 [ 377.311810][T10355] ? do_syscall_64+0xbe/0x3b0 [ 377.311837][T10355] do_syscall_64+0xfa/0x3b0 [ 377.311860][T10355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.311882][T10355] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 377.311904][T10355] ? clear_bhb_loop+0x60/0xb0 [ 377.311931][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.311953][T10355] RIP: 0033:0x7f63bbb8e929 [ 377.311973][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.311993][T10355] RSP: 002b:00007f63bca2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.312016][T10355] RAX: ffffffffffffffda RBX: 00007f63bbdb5fa0 RCX: 00007f63bbb8e929 [ 377.312031][T10355] RDX: 0000000000040004 RSI: 0000200000000200 RDI: 0000000000000004 [ 377.312045][T10355] RBP: 00007f63bca2f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.312058][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.312070][T10355] R13: 0000000000000000 R14: 00007f63bbdb5fa0 R15: 00007f63bbedfa28 [ 377.312104][T10355] [ 377.421162][T10358] dvmrp0: entered allmulticast mode [ 377.725296][ T978] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 377.840460][ T5920] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 378.005409][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 378.012808][ T5920] usb 6-1: config 252 has an invalid interface number: 165 but max is 0 [ 378.023884][ T5920] usb 6-1: config 252 has no interface number 0 [ 378.031113][ T978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 378.044427][ T978] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 378.054309][ T5920] usb 6-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 378.074139][ T978] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 378.087182][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.110032][ T978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 378.121992][ T5920] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 378.136529][T10356] dvmrp0: left allmulticast mode [ 378.144129][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.152580][ T5920] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 378.166888][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 378.174703][ T978] usb 3-1: Product: syz [ 378.182217][ T978] usb 3-1: Manufacturer: syz [ 378.190497][ T978] usb 3-1: SerialNumber: syz [ 378.315023][ T5920] usb 6-1: USB disconnect, device number 10 [ 378.325230][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 378.343305][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 378.380271][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 378.390751][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 378.401628][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 378.428184][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 378.445844][ T978] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 378.466787][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 378.486388][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.501549][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 378.514529][ T9] usb 2-1: SerialNumber: syz [ 378.533858][T10361] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 378.555417][T10361] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 378.704900][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712863][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.017211][T10383] FAULT_INJECTION: forcing a failure. [ 379.017211][T10383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.054351][T10383] CPU: 0 UID: 0 PID: 10383 Comm: syz.5.974 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 379.054384][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.054398][T10383] Call Trace: [ 379.054410][T10383] [ 379.054420][T10383] dump_stack_lvl+0x189/0x250 [ 379.054453][T10383] ? __pfx____ratelimit+0x10/0x10 [ 379.054488][T10383] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.054522][T10383] ? __pfx__printk+0x10/0x10 [ 379.054552][T10383] ? __might_fault+0xb0/0x130 [ 379.054591][T10383] should_fail_ex+0x414/0x560 [ 379.054627][T10383] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 379.054667][T10383] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 379.054708][T10383] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 379.054741][T10383] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 379.054787][T10383] ? __lock_acquire+0xab9/0xd20 [ 379.054816][T10383] ? fpu__alloc_mathframe+0xad/0x130 [ 379.054854][T10383] get_sigframe+0x58d/0x7d0 [ 379.054894][T10383] ? __pfx_get_sigframe+0x10/0x10 [ 379.054934][T10383] ? posixtimer_deliver_signal+0x2d9/0x3e0 [ 379.055014][T10383] x64_setup_rt_frame+0x15b/0xd40 [ 379.055042][T10383] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.055078][T10383] ? _raw_spin_unlock_irq+0x2e/0x50 [ 379.055106][T10383] ? get_signal+0x1151/0x1340 [ 379.055136][T10383] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 379.055174][T10383] arch_do_signal_or_restart+0x3d7/0x750 [ 379.055210][T10383] ? __fget_files+0x3a0/0x420 [ 379.055243][T10383] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 379.055296][T10383] ? exit_to_user_mode_loop+0x40/0x110 [ 379.055324][T10383] exit_to_user_mode_loop+0x75/0x110 [ 379.055348][T10383] do_syscall_64+0x2bd/0x3b0 [ 379.055372][T10383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.055393][T10383] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 379.055416][T10383] ? clear_bhb_loop+0x60/0xb0 [ 379.055443][T10383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.055464][T10383] RIP: 0033:0x7fcb5d78d3df [ 379.055485][T10383] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 379.055511][T10383] RSP: 002b:00007fcb5e677030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 379.055535][T10383] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00007fcb5d78d3df [ 379.055549][T10383] RDX: 0000000000000001 RSI: 00007fcb5e677090 RDI: 0000000000000003 [ 379.055563][T10383] RBP: 00007fcb5e677090 R08: 0000000000000000 R09: 00007fcb5e676df7 [ 379.055577][T10383] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 379.055590][T10383] R13: 0000000000000000 R14: 00007fcb5d9b5fa0 R15: 00007fcb5dadfa28 [ 379.055623][T10383] [ 379.317902][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.559092][ T9] usb 2-1: USB disconnect, device number 44 [ 379.675226][ T978] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 379.835270][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 379.842347][ T978] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 379.851456][ T978] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.862027][ T978] usb 4-1: config 0 has no interfaces? [ 379.867845][ T978] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 379.877358][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.889547][ T978] usb 4-1: config 0 descriptor?? [ 380.235952][T10386] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 380.287897][ T978] usb 3-1: USB disconnect, device number 34 [ 380.306074][ T978] usblp0: removed [ 380.476717][ T5860] usb 4-1: USB disconnect, device number 48 [ 380.715280][ T978] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 380.877533][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 380.904291][ T978] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 380.931672][ T978] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 380.969231][ T978] usb 3-1: config 63 has no interface number 0 [ 380.994865][ T978] usb 3-1: config 63 interface 66 has no altsetting 0 [ 381.025628][ T978] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 381.043867][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.062258][ T978] usb 3-1: Product: syz [ 381.075403][ T5860] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 381.083378][ T978] usb 3-1: Manufacturer: syz [ 381.088172][ T978] usb 3-1: SerialNumber: syz [ 381.225404][ T5860] usb 6-1: device descriptor read/64, error -71 [ 381.372071][ T978] usb 3-1: Found UVC 0.07 device syz (174f:8a31) [ 381.384070][ T978] usb 3-1: No valid video chain found. [ 381.408594][ T978] usb 3-1: USB disconnect, device number 35 [ 381.486117][ T5860] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 381.665362][ T5860] usb 6-1: device descriptor read/64, error -71 [ 381.792877][ T5860] usb usb6-port1: attempt power cycle [ 382.148833][ T5860] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 382.176298][ T5860] usb 6-1: device descriptor read/8, error -71 [ 382.245312][ T43] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 382.310873][T10436] FAULT_INJECTION: forcing a failure. [ 382.310873][T10436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.325984][T10436] CPU: 0 UID: 0 PID: 10436 Comm: syz.2.988 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 382.326007][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.326017][T10436] Call Trace: [ 382.326024][T10436] [ 382.326031][T10436] dump_stack_lvl+0x189/0x250 [ 382.326056][T10436] ? __pfx____ratelimit+0x10/0x10 [ 382.326081][T10436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.326099][T10436] ? __pfx__printk+0x10/0x10 [ 382.326121][T10436] ? __might_fault+0xb0/0x130 [ 382.326157][T10436] should_fail_ex+0x414/0x560 [ 382.326195][T10436] _copy_from_user+0x2d/0xb0 [ 382.326222][T10436] ___sys_sendmsg+0x158/0x2a0 [ 382.326254][T10436] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.326322][T10436] ? __fget_files+0x2a/0x420 [ 382.326351][T10436] ? __fget_files+0x3a0/0x420 [ 382.326391][T10436] __x64_sys_sendmsg+0x19b/0x260 [ 382.326419][T10436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.326446][T10436] ? __pfx_ksys_write+0x10/0x10 [ 382.326468][T10436] ? do_syscall_64+0xbe/0x3b0 [ 382.326486][T10436] do_syscall_64+0xfa/0x3b0 [ 382.326500][T10436] ? lockdep_hardirqs_on+0x9c/0x150 [ 382.326524][T10436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.326539][T10436] ? clear_bhb_loop+0x60/0xb0 [ 382.326558][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.326573][T10436] RIP: 0033:0x7fa58398e929 [ 382.326587][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.326602][T10436] RSP: 002b:00007fa584824038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.326618][T10436] RAX: ffffffffffffffda RBX: 00007fa583bb5fa0 RCX: 00007fa58398e929 [ 382.326630][T10436] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 382.326640][T10436] RBP: 00007fa584824090 R08: 0000000000000000 R09: 0000000000000000 [ 382.326649][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.326658][T10436] R13: 0000000000000000 R14: 00007fa583bb5fa0 R15: 00007fa583cdfa28 [ 382.326680][T10436] [ 382.537938][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.612655][ T43] usb 2-1: config 0 has an invalid interface number: 92 but max is 0 [ 382.631395][ T5860] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 382.639433][ T43] usb 2-1: config 0 has no interface number 0 [ 382.668030][ T5860] usb 6-1: device descriptor read/8, error -71 [ 382.676674][ T43] usb 2-1: config 0 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.755228][ T43] usb 2-1: config 0 interface 92 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 382.827703][ T5860] usb usb6-port1: unable to enumerate USB device [ 382.860634][ T43] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 382.912687][ T43] usb 2-1: config 0 interface 92 altsetting 0 endpoint 0x84 has invalid maxpacket 49879, setting to 1024 [ 382.961107][T10443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.977142][ T43] usb 2-1: config 0 interface 92 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.994398][ T43] usb 2-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 383.004617][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.017577][ T43] usb 2-1: config 0 descriptor?? [ 383.023391][T10432] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 383.046832][ T43] em28xx 2-1:0.92: New device @ 480 Mbps (093b:a005, interface 92, class 92) [ 383.057147][ T43] em28xx 2-1:0.92: DVB interface 92 found: isoc [ 383.112044][ T5860] hid-generic 0003:0000:0000.0004: unknown main item tag 0x0 [ 383.134659][ T5860] hid-generic 0003:0000:0000.0004: hidraw0: USB HID vbc.d3 Device [syz0] on syz1 [ 383.588074][ T5860] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 383.796382][ T5860] usb 4-1: device descriptor read/64, error -71 [ 384.155375][ T5959] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 384.163024][ T5860] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 384.196849][ T43] em28xx 2-1:0.92: unknown em28xx chip ID (0) [ 384.300333][ T43] em28xx 2-1:0.92: reading from i2c device at 0xa0 failed (error=-5) [ 384.309001][ T5860] usb 4-1: device descriptor read/64, error -71 [ 384.335598][ T43] em28xx 2-1:0.92: board has no eeprom [ 384.352907][ T5959] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.377667][ T5959] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.391892][ T5959] usb 3-1: config 0 interface 0 has no altsetting 0 [ 384.413444][ T5959] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 384.433472][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.445253][ T5860] usb usb4-port1: attempt power cycle [ 384.451026][ T43] em28xx 2-1:0.92: Identified as Plextor ConvertX PX-TV100U (card=40) [ 384.478789][ T43] em28xx 2-1:0.92: dvb set to isoc mode. [ 384.497218][ T5959] usb 3-1: config 0 descriptor?? [ 384.513782][ T5841] em28xx 2-1:0.92: Remote control support is not available for this card. [ 384.844331][ T5860] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 384.870847][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 384.896041][ T5860] usb 4-1: device descriptor read/8, error -71 [ 384.953077][ T5959] hid-steam 0003:28DE:1102.0005: item fetching failed at offset 4/5 [ 384.972136][ T5959] hid-steam 0003:28DE:1102.0005: steam_probe:parse of hid interface failed [ 384.991314][ T5959] hid-steam 0003:28DE:1102.0005: probe with driver hid-steam failed with error -22 [ 385.137642][ T5860] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 385.170509][ T5959] usb 2-1: USB disconnect, device number 45 [ 385.206993][ T5959] em28xx 2-1:0.92: Disconnecting em28xx [ 385.212650][ T5959] em28xx 2-1:0.92: Closing input extension [ 385.231540][ T5860] usb 4-1: device descriptor read/8, error -71 [ 385.323484][ T5959] em28xx 2-1:0.92: Freeing device [ 385.546630][ T5860] usb usb4-port1: unable to enumerate USB device [ 385.742080][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 385.752308][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 385.774491][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 385.970141][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 385.989744][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 386.000749][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 386.010447][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 386.022903][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 386.031369][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 386.039785][T10487] netlink: 'syz.1.1006': attribute type 29 has an invalid length. [ 386.195208][ T5959] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 386.246434][ T978] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 386.362907][ T5959] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 386.382386][ T5959] usb 6-1: config 0 interface 0 has no altsetting 0 [ 386.399779][ T5959] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 386.405572][ T978] usb 1-1: Using ep0 maxpacket: 16 [ 386.413648][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.434163][ T5959] usb 6-1: Product: syz [ 386.441023][ T978] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 386.444675][ T5959] usb 6-1: Manufacturer: syz [ 386.450238][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.454772][ T5959] usb 6-1: SerialNumber: syz [ 386.465601][ T978] usb 1-1: config 0 has no interface number 0 [ 386.475535][ T978] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.498803][ T978] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 386.511562][ T5959] usb 6-1: config 0 descriptor?? [ 386.511562][ T978] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 386.511589][ T978] usb 1-1: Product: syz [ 386.530151][ T978] usb 1-1: SerialNumber: syz [ 386.532303][ T5959] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected [ 386.538976][ T978] usb 1-1: config 0 descriptor?? [ 386.553073][ T978] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 386.554722][ T5959] keyspan 6-1:0.0: unsupported endpoint type 0 [ 386.577057][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 386.588166][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81 [ 386.596526][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 386.604290][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 386.613862][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 386.633094][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 386.654284][ T5959] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 386.708872][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83 [ 386.736510][T10491] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1007'. [ 386.766239][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3 [ 386.827463][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1007'. [ 386.827605][ T10] usb 3-1: USB disconnect, device number 36 [ 386.843171][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4 [ 386.843268][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86 [ 386.843355][ T5959] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6 [ 386.878931][T10491] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1007'. [ 386.889691][T10491] netlink: 31 bytes leftover after parsing attributes in process `syz.5.1007'. [ 386.941248][ T5959] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 387.216045][ T5920] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 387.318332][T10509] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1013'. [ 387.320553][T10509] FAULT_INJECTION: forcing a failure. [ 387.320553][T10509] name failslab, interval 1, probability 0, space 0, times 0 [ 387.320600][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.1013 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 387.320619][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.320634][T10509] Call Trace: [ 387.320642][T10509] [ 387.320651][T10509] dump_stack_lvl+0x189/0x250 [ 387.320681][T10509] ? __pfx____ratelimit+0x10/0x10 [ 387.320714][T10509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.320740][T10509] ? __pfx__printk+0x10/0x10 [ 387.320773][T10509] ? __pfx___might_resched+0x10/0x10 [ 387.320800][T10509] ? fs_reclaim_acquire+0x7d/0x100 [ 387.320826][T10509] should_fail_ex+0x414/0x560 [ 387.320853][T10509] should_failslab+0xa8/0x100 [ 387.320875][T10509] __kmalloc_cache_noprof+0x70/0x3d0 [ 387.320894][T10509] ? vlan_vid_add+0x145/0x760 [ 387.320915][T10509] vlan_vid_add+0x145/0x760 [ 387.320940][T10509] team_vlan_rx_add_vid+0x8e/0x150 [ 387.320962][T10509] vlan_vid_add+0x650/0x760 [ 387.320978][T10509] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 387.321008][T10509] register_vlan_dev+0x9e/0x800 [ 387.321028][T10509] ? lockdep_rtnl_is_held+0x26/0x40 [ 387.321049][T10509] ? vlan_changelink+0x4b3/0x560 [ 387.321075][T10509] vlan_newlink+0x4b2/0x610 [ 387.321100][T10509] ? __pfx_vlan_newlink+0x10/0x10 [ 387.321125][T10509] rtnl_newlink_create+0x30d/0xb00 [ 387.321153][T10509] ? __pfx_aa_get_newest_label+0x10/0x10 [ 387.321179][T10509] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 387.321197][T10509] ? rtnl_newlink+0x8db/0x1c70 [ 387.321215][T10509] ? __pfx___mutex_lock+0x10/0x10 [ 387.321239][T10509] ? ns_capable+0x8a/0xf0 [ 387.321259][T10509] rtnl_newlink+0x16d6/0x1c70 [ 387.321277][T10509] ? netlink_sendmsg+0x805/0xb30 [ 387.321305][T10509] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.321340][T10509] ? kasan_quarantine_put+0xdd/0x220 [ 387.321357][T10509] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.321385][T10509] ? nlmon_xmit+0xb0/0x100 [ 387.321400][T10509] ? kmem_cache_free+0x18f/0x400 [ 387.321423][T10509] ? __local_bh_enable_ip+0x12d/0x1c0 [ 387.321441][T10509] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.321465][T10509] ? __local_bh_enable_ip+0x12d/0x1c0 [ 387.321483][T10509] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 387.321513][T10509] ? __dev_queue_xmit+0x27e/0x3a70 [ 387.321545][T10509] ? __lock_acquire+0xab9/0xd20 [ 387.321581][T10509] ? __pfx_rtnl_newlink+0x10/0x10 [ 387.321597][T10509] rtnetlink_rcv_msg+0x7cc/0xb70 [ 387.321617][T10509] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 387.321633][T10509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.321647][T10509] ? ref_tracker_free+0x63a/0x7d0 [ 387.321670][T10509] ? __copy_skb_header+0xa7/0x550 [ 387.321692][T10509] ? __pfx_ref_tracker_free+0x10/0x10 [ 387.321724][T10509] netlink_rcv_skb+0x208/0x470 [ 387.321743][T10509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 387.321764][T10509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.321793][T10509] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.321811][T10509] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.321834][T10509] netlink_unicast+0x75c/0x8e0 [ 387.321859][T10509] netlink_sendmsg+0x805/0xb30 [ 387.321886][T10509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.321908][T10509] ? aa_sock_msg_perm+0x94/0x160 [ 387.321933][T10509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.321956][T10509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.321976][T10509] __sock_sendmsg+0x219/0x270 [ 387.322006][T10509] ____sys_sendmsg+0x505/0x830 [ 387.322030][T10509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.322056][T10509] ? import_iovec+0x74/0xa0 [ 387.322076][T10509] ___sys_sendmsg+0x21f/0x2a0 [ 387.322098][T10509] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.322144][T10509] ? __fget_files+0x2a/0x420 [ 387.322164][T10509] ? __fget_files+0x3a0/0x420 [ 387.322191][T10509] __x64_sys_sendmsg+0x19b/0x260 [ 387.322214][T10509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.322240][T10509] ? __pfx_ksys_write+0x10/0x10 [ 387.322256][T10509] ? rcu_is_watching+0x15/0xb0 [ 387.322277][T10509] ? do_syscall_64+0xbe/0x3b0 [ 387.322295][T10509] do_syscall_64+0xfa/0x3b0 [ 387.322308][T10509] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.322331][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.322346][T10509] ? clear_bhb_loop+0x60/0xb0 [ 387.322364][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.322378][T10509] RIP: 0033:0x7fa58398e929 [ 387.322391][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.322423][T10509] RSP: 002b:00007fa584824038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.322439][T10509] RAX: ffffffffffffffda RBX: 00007fa583bb5fa0 RCX: 00007fa58398e929 [ 387.322450][T10509] RDX: 0000000008000002 RSI: 0000200000000080 RDI: 0000000000000003 [ 387.322460][T10509] RBP: 00007fa584824090 R08: 0000000000000000 R09: 0000000000000000 [ 387.322470][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.322478][T10509] R13: 0000000000000000 R14: 00007fa583bb5fa0 R15: 00007fa583cdfa28 [ 387.322501][T10509] [ 387.477431][ T5920] usb 2-1: unable to get BOS descriptor or descriptor too short [ 387.478735][ T5920] usb 2-1: config 250 has an invalid interface number: 150 but max is 0 [ 387.478767][ T5920] usb 2-1: config 250 has no interface number 0 [ 387.478801][ T5920] usb 2-1: config 250 interface 150 has no altsetting 0 [ 387.481197][ T5920] usb 2-1: New USB device found, idVendor=1b71, idProduct=3002, bcdDevice=e2.bf [ 387.481228][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.481250][ T5920] usb 2-1: Product: syz [ 387.481266][ T5920] usb 2-1: Manufacturer: syz [ 387.481283][ T5920] usb 2-1: SerialNumber: syz [ 387.707127][ T5920] usb 2-1: USB disconnect, device number 46 [ 387.955234][ T5959] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 388.105550][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 388.108447][ T5959] usb 4-1: config 0 has an invalid interface number: 149 but max is 1 [ 388.108469][ T5959] usb 4-1: config 0 has an invalid descriptor of length 121, skipping remainder of the config [ 388.108484][ T5959] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 388.108499][ T5959] usb 4-1: config 0 has no interface number 0 [ 388.108529][ T5959] usb 4-1: config 0 interface 149 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.110414][ T5959] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19 [ 388.110454][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.110469][ T5959] usb 4-1: Product: syz [ 388.110480][ T5959] usb 4-1: Manufacturer: syz [ 388.110492][ T5959] usb 4-1: SerialNumber: syz [ 388.112774][ T5959] usb 4-1: config 0 descriptor?? [ 388.471905][ T30] audit: type=1804 audit(1752587225.523:813): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1015" name="/newroot/216/file1" dev="fuse" ino=1 res=1 errno=0 [ 389.122874][T10528] veth0_macvtap: left promiscuous mode [ 389.138837][T10528] batman_adv: batadv0: Adding interface: macvtap0 [ 389.145774][T10528] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.177738][ T5860] usb 6-1: USB disconnect, device number 15 [ 389.208312][T10528] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 389.233970][ T5860] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 389.256716][ T43] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 389.286989][ T5860] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 389.318135][ T5860] keyspan 6-1:0.0: device disconnected [ 389.427685][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.440770][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 389.462287][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 389.475021][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 389.489008][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 389.554870][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.574574][ T43] usb 2-1: config 0 descriptor?? [ 389.591534][T10526] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 389.815352][ T5920] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 390.031641][ T5920] usb 6-1: config 0 has no interfaces? [ 390.042766][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 390.189282][ T5920] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 390.229719][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.244652][ T5920] usb 6-1: Product: syz [ 390.253598][ T10] usb 1-1: USB disconnect, device number 42 [ 390.264053][T10543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.469441][ T5920] usb 6-1: Manufacturer: syz [ 390.475042][T10543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.506516][ T5920] usb 6-1: SerialNumber: syz [ 390.549729][T10542] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.603074][ T5920] usb 6-1: config 0 descriptor?? [ 390.775403][T10542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.092415][ T5959] peak_usb 4-1:0.149 can0: unable to request usb[type=0 value=1] err=-71 [ 391.124477][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 391.131429][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 391.163464][ T5959] peak_usb 4-1:0.149: unable to read PCAN-Chip USB firmware info (err -71) [ 391.170543][T10537] input: syz0 as /devices/virtual/input/input21 [ 391.214022][ T43] usb 2-1: USB disconnect, device number 47 [ 391.285278][T10537] input: syz1 as /devices/virtual/input/input20 [ 391.521964][T10556] loop2: detected capacity change from 0 to 7 [ 391.572472][ T5950] Dev loop2: unable to read RDB block 7 [ 391.583574][ T5950] loop2: AHDI p2 p3 [ 391.589073][ T5950] loop2: partition table partially beyond EOD, truncated [ 391.603010][ T5950] loop2: p3 start 335544320 is beyond EOD, truncated [ 391.631730][T10556] Dev loop2: unable to read RDB block 7 [ 391.647397][T10556] loop2: AHDI p2 p3 [ 391.652653][T10556] loop2: partition table partially beyond EOD, truncated [ 391.679037][ T5959] peak_usb 4-1:0.149: probe with driver peak_usb failed with error -71 [ 391.696528][T10556] loop2: p3 start 335544320 is beyond EOD, truncated [ 391.883316][ T5959] usb 4-1: USB disconnect, device number 53 [ 395.117939][ T10] usb 6-1: USB disconnect, device number 16 [ 395.703089][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'. [ 395.741984][T10578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1034'. [ 395.987460][T10588] ptrace attach of "./syz-executor exec"[5868] was attempted by "./syz-executor exec"[10588] [ 397.185198][ T5959] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 397.596311][ T5939] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 397.625700][ T5959] usb 3-1: config 0 has no interfaces? [ 397.808720][ T5959] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 397.861432][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.884509][ T5959] usb 3-1: Product: syz [ 397.901865][ T5959] usb 3-1: Manufacturer: syz [ 397.909954][ T5959] usb 3-1: SerialNumber: syz [ 397.999795][ T5959] usb 3-1: config 0 descriptor?? [ 398.045048][ T5939] usb 1-1: unable to get BOS descriptor or descriptor too short [ 398.129366][ T5939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.159357][ T5939] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 398.180173][ T5939] usb 1-1: config 1 has no interface number 1 [ 398.192737][ T5939] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 398.211578][ T30] audit: type=1326 audit(1752587235.263:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.5.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb5d78e929 code=0x0 [ 398.248667][T10600] validate_nla: 18 callbacks suppressed [ 398.248692][T10600] netlink: 'syz.2.1040': attribute type 12 has an invalid length. [ 398.273457][ T5959] IPVS: starting estimator thread 0... [ 398.282189][T10600] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1040'. [ 398.302431][ T5939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.311856][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.322369][ T5939] usb 1-1: Product: syz [ 398.345965][ T5939] usb 1-1: Manufacturer: syz [ 398.350899][ T5939] usb 1-1: SerialNumber: syz [ 398.430903][T10612] IPVS: using max 36 ests per chain, 86400 per kthread [ 399.037617][T10616] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 399.657782][T10616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.186622][ T5920] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 401.312919][ T9] usb 3-1: USB disconnect, device number 37 [ 401.393807][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 401.496592][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 401.551899][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 401.599457][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.640151][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.718500][ T5920] usb 4-1: Product: syz [ 401.722757][ T5920] usb 4-1: Manufacturer: syz [ 401.764546][ T5920] usb 4-1: SerialNumber: syz [ 401.790790][ T5920] usb 4-1: config 0 descriptor?? [ 401.901414][ T5920] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 401.952334][ T5920] em28xx 4-1:0.0: Video interface 0 found: [ 402.125777][ T5939] usb 1-1: USB disconnect, device number 43 [ 402.721211][T10660] fuse: Bad value for 'fd' [ 402.757006][T10660] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1055'. [ 403.033697][T10667] FAULT_INJECTION: forcing a failure. [ 403.033697][T10667] name failslab, interval 1, probability 0, space 0, times 0 [ 403.066484][T10667] CPU: 0 UID: 0 PID: 10667 Comm: syz.5.1057 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 403.066519][T10667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.066533][T10667] Call Trace: [ 403.066542][T10667] [ 403.066552][T10667] dump_stack_lvl+0x189/0x250 [ 403.066585][T10667] ? __pfx____ratelimit+0x10/0x10 [ 403.066620][T10667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.066645][T10667] ? __pfx__printk+0x10/0x10 [ 403.066683][T10667] ? ref_tracker_alloc+0x318/0x460 [ 403.066720][T10667] should_fail_ex+0x414/0x560 [ 403.066756][T10667] should_failslab+0xa8/0x100 [ 403.066787][T10667] kmem_cache_alloc_noprof+0x73/0x3c0 [ 403.066813][T10667] ? skb_clone+0x212/0x3a0 [ 403.066850][T10667] skb_clone+0x212/0x3a0 [ 403.066884][T10667] __netlink_deliver_tap+0x404/0x850 [ 403.066925][T10667] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.066954][T10667] netlink_deliver_tap+0x19c/0x1b0 [ 403.066983][T10667] netlink_unicast+0x730/0x8e0 [ 403.067019][T10667] netlink_sendmsg+0x805/0xb30 [ 403.067057][T10667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.067088][T10667] ? aa_sock_msg_perm+0x94/0x160 [ 403.067122][T10667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.067155][T10667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.067183][T10667] __sock_sendmsg+0x219/0x270 [ 403.067209][T10667] ____sys_sendmsg+0x505/0x830 [ 403.067244][T10667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.067284][T10667] ? import_iovec+0x74/0xa0 [ 403.067314][T10667] ___sys_sendmsg+0x21f/0x2a0 [ 403.067346][T10667] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.067415][T10667] ? __fget_files+0x2a/0x420 [ 403.067450][T10667] ? __fget_files+0x3a0/0x420 [ 403.067490][T10667] __x64_sys_sendmsg+0x19b/0x260 [ 403.067521][T10667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.067562][T10667] ? __pfx_ksys_write+0x10/0x10 [ 403.067584][T10667] ? rcu_is_watching+0x15/0xb0 [ 403.067616][T10667] ? do_syscall_64+0xbe/0x3b0 [ 403.067641][T10667] do_syscall_64+0xfa/0x3b0 [ 403.067661][T10667] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.067694][T10667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.067715][T10667] ? clear_bhb_loop+0x60/0xb0 [ 403.067742][T10667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.067763][T10667] RIP: 0033:0x7fcb5d78e929 [ 403.067783][T10667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.067803][T10667] RSP: 002b:00007fcb5e677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.067826][T10667] RAX: ffffffffffffffda RBX: 00007fcb5d9b5fa0 RCX: 00007fcb5d78e929 [ 403.067842][T10667] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 403.067856][T10667] RBP: 00007fcb5e677090 R08: 0000000000000000 R09: 0000000000000000 [ 403.067870][T10667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.067883][T10667] R13: 0000000000000000 R14: 00007fcb5d9b5fa0 R15: 00007fcb5dadfa28 [ 403.067916][T10667] [ 403.068461][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1057'. [ 403.158290][T10668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1053'. [ 403.175382][ T5920] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 403.525415][ T5939] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 403.545491][ T5920] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 403.554883][ T5920] em28xx 4-1:0.0: board has no eeprom [ 403.626480][T10670] tipc: Started in network mode [ 403.635331][T10670] tipc: Node identity 4, cluster identity 4711 [ 403.655251][T10670] tipc: Node number set to 4 [ 403.675404][ T5920] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 403.695008][ T5920] em28xx 4-1:0.0: Currently, V4L2 is not supported on this model [ 403.709411][ T5939] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 403.748147][ T5939] usb 1-1: config 0 has no interface number 0 [ 403.756162][ T10] em28xx 4-1:0.0: Binding DVB extension [ 403.762398][ T10] em28xx 4-1:0.0: no endpoint for DVB mode and transfer type 0 [ 403.772171][ T5939] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 403.815195][ T10] em28xx 4-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 403.823546][ T10] em28xx 4-1:0.0: Registering input extension [ 403.831620][ T5939] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 403.851412][ T5920] usb 4-1: USB disconnect, device number 54 [ 403.859219][ T5920] em28xx 4-1:0.0: Disconnecting em28xx [ 403.864995][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.917283][ T5920] em28xx 4-1:0.0: Closing input extension [ 403.925819][ T5939] usb 1-1: Product: syz [ 403.947456][ T5939] usb 1-1: Manufacturer: syz [ 403.967580][ T5939] usb 1-1: SerialNumber: syz [ 403.973786][ T5920] em28xx 4-1:0.0: Freeing device [ 404.022235][ T5939] usb 1-1: config 0 descriptor?? [ 404.041595][T10656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 404.282663][ T5939] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 404.304172][ T5939] usb 1-1: MIDIStreaming interface descriptor not found [ 404.346924][T10679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.408843][ T5939] usb 1-1: USB disconnect, device number 44 [ 404.798350][T10697] FAULT_INJECTION: forcing a failure. [ 404.798350][T10697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.875429][T10698] netlink: 'syz.3.1061': attribute type 7 has an invalid length. [ 404.883376][T10698] netlink: 'syz.3.1061': attribute type 8 has an invalid length. [ 404.995212][T10697] CPU: 0 UID: 0 PID: 10697 Comm: syz.2.1067 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 404.995245][T10697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.995260][T10697] Call Trace: [ 404.995269][T10697] [ 404.995279][T10697] dump_stack_lvl+0x189/0x250 [ 404.995312][T10697] ? __pfx____ratelimit+0x10/0x10 [ 404.995347][T10697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.995375][T10697] ? __pfx__printk+0x10/0x10 [ 404.995408][T10697] ? fs_reclaim_acquire+0x7d/0x100 [ 404.995449][T10697] should_fail_ex+0x414/0x560 [ 404.995488][T10697] prepare_alloc_pages+0x213/0x610 [ 404.995528][T10697] __alloc_frozen_pages_noprof+0x123/0x370 [ 404.995567][T10697] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 404.995612][T10697] ? policy_nodemask+0x27c/0x720 [ 404.995638][T10697] ? __lock_acquire+0xab9/0xd20 [ 404.995665][T10697] alloc_pages_mpol+0x232/0x4a0 [ 404.995699][T10697] vma_alloc_folio_noprof+0xe4/0x200 [ 404.995732][T10697] ? __anon_vma_prepare+0x3d2/0x4a0 [ 404.995761][T10697] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 404.995789][T10697] ? up_write+0x1c4/0x420 [ 404.995816][T10697] ? do_raw_spin_unlock+0x122/0x240 [ 404.995857][T10697] folio_prealloc+0x30/0x180 [ 404.995887][T10697] __handle_mm_fault+0x2c88/0x5620 [ 404.995933][T10697] ? __pfx___handle_mm_fault+0x10/0x10 [ 404.995988][T10697] ? __pfx___might_resched+0x10/0x10 [ 404.996019][T10697] handle_mm_fault+0x40a/0x8e0 [ 404.996055][T10697] __get_user_pages+0x1af4/0x30b0 [ 404.996116][T10697] ? __pfx___get_user_pages+0x10/0x10 [ 404.996150][T10697] get_user_pages_remote+0x2f9/0xaa0 [ 404.996185][T10697] ? __pfx_get_user_pages_remote+0x10/0x10 [ 404.996207][T10697] ? down_read+0x1ad/0x2e0 [ 404.996234][T10697] ? mmap_read_lock_maybe_expand+0xc6/0x3c0 [ 404.996270][T10697] get_arg_page+0x104/0x330 [ 404.996296][T10697] ? __pfx_get_arg_page+0x10/0x10 [ 404.996322][T10697] ? create_init_stack_vma+0x523/0x680 [ 404.996354][T10697] copy_string_kernel+0x191/0x2a0 [ 404.996384][T10697] do_execveat_common+0x3c5/0x6a0 [ 404.996423][T10697] __x64_sys_execveat+0xc4/0xe0 [ 404.996453][T10697] do_syscall_64+0xfa/0x3b0 [ 404.996473][T10697] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.996507][T10697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.996528][T10697] ? clear_bhb_loop+0x60/0xb0 [ 404.996555][T10697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.996577][T10697] RIP: 0033:0x7fa58398e929 [ 404.996596][T10697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.996616][T10697] RSP: 002b:00007fa584824038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 404.996639][T10697] RAX: ffffffffffffffda RBX: 00007fa583bb5fa0 RCX: 00007fa58398e929 [ 404.996655][T10697] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 404.996670][T10697] RBP: 00007fa584824090 R08: 0000000000000000 R09: 0000000000000000 [ 404.996684][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.996697][T10697] R13: 0000000000000000 R14: 00007fa583bb5fa0 R15: 00007fa583cdfa28 [ 404.996731][T10697] [ 406.047739][T10711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.088943][T10711] trusted_key: encrypted_key: insufficient parameters specified [ 406.105284][T10711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.122349][T10711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.260992][T10717] loop2: detected capacity change from 0 to 7 [ 407.289835][T10717] loop2: [ 407.297405][T10717] loop2: partition table partially beyond EOD, truncated [ 408.399947][T10728] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 408.718994][T10731] netlink: 'syz.5.1077': attribute type 2 has an invalid length. [ 408.768494][T10731] netlink: 'syz.5.1077': attribute type 8 has an invalid length. [ 408.799323][T10731] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1077'. [ 409.306919][T10743] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1080'. [ 409.426871][ T5920] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 409.604967][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.683747][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.761827][ T5920] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 409.805280][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.853246][ T5920] usb 4-1: config 0 descriptor?? [ 410.009305][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 410.445281][ T5959] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 410.685257][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 411.090710][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 411.104690][T10778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1090'. [ 411.138447][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 411.153739][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 411.171490][T10778] netlink: 'syz.1.1090': attribute type 19 has an invalid length. [ 411.221544][T10778] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.231496][T10778] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.240438][T10778] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.249276][T10778] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.988712][T10785] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1093'. [ 413.835975][ T5920] usbhid 4-1:0.0: can't add hid device: -71 [ 413.923572][ T5920] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 414.008644][ T5920] usb 4-1: USB disconnect, device number 55 [ 414.105815][T10798] syz_tun: entered allmulticast mode [ 414.150869][T10798] ucma_write: process 766 (syz.1.1097) changed security contexts after opening file descriptor, this is not allowed. [ 414.190372][T10797] syz_tun: left allmulticast mode [ 414.241363][T10801] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 414.321518][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 414.349642][ T5959] usb 6-1: no configurations [ 414.361398][ T5959] usb 6-1: can't read configurations, error -22 [ 414.426930][T10803] netlink: 'syz.3.1098': attribute type 7 has an invalid length. [ 414.434729][T10803] netlink: 'syz.3.1098': attribute type 8 has an invalid length. [ 414.598917][T10807] loop7: detected capacity change from 0 to 7 [ 415.534245][T10807] Dev loop7: unable to read RDB block 7 [ 415.540763][T10807] loop7: unable to read partition table [ 415.547443][T10807] loop7: partition table beyond EOD, truncated [ 415.554370][T10807] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 416.019605][T10822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1104'. [ 416.045498][ T5216] Dev loop7: unable to read RDB block 7 [ 416.051170][ T5216] loop7: unable to read partition table [ 416.077028][ T5216] loop7: partition table beyond EOD, truncated [ 416.171735][T10824] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1105'. [ 416.598782][T10834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1109'. [ 416.868358][T10840] netlink: 'syz.2.1110': attribute type 12 has an invalid length. [ 416.885736][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 417.026308][ T9] usb 2-1: device descriptor read/64, error -71 [ 417.227672][T10847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1113'. [ 417.241200][T10847] netlink: 'syz.3.1113': attribute type 7 has an invalid length. [ 417.267594][T10847] netlink: 'syz.3.1113': attribute type 8 has an invalid length. [ 417.305241][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 417.333967][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 417.485340][ T9] usb 2-1: device descriptor read/64, error -71 [ 417.605591][ T9] usb usb2-port1: attempt power cycle [ 418.006344][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 418.025899][ T9] usb 2-1: device descriptor read/8, error -71 [ 418.275209][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 418.750011][ T9] usb 2-1: device descriptor read/8, error -71 [ 418.929222][ T5986] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 418.955648][T10866] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1117'. [ 418.996458][ T9] usb usb2-port1: unable to enumerate USB device [ 419.095432][ T5986] usb 3-1: Using ep0 maxpacket: 32 [ 419.115566][ T5986] usb 3-1: config 4 has an invalid interface number: 129 but max is 0 [ 419.123815][ T5986] usb 3-1: config 4 has no interface number 0 [ 419.161573][ T5986] usb 3-1: config 4 interface 129 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 419.208504][ T5986] usb 3-1: config 4 interface 129 has no altsetting 0 [ 419.232675][ T5986] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ea.e3 [ 419.242094][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.251882][ T5986] usb 3-1: Product: syz [ 419.259889][ T5986] usb 3-1: Manufacturer: syz [ 419.264554][ T5986] usb 3-1: SerialNumber: syz [ 419.499745][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.514957][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.545195][T10861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.576097][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.610824][T10861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.625674][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.633545][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.891295][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.155301][ T43] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 420.265225][ T5959] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 420.500519][ T5986] adutux 3-1:4.129: interrupt endpoints not found [ 420.514329][ T5986] usb 3-1: USB disconnect, device number 38 [ 420.686568][ T5959] usb 6-1: Using ep0 maxpacket: 8 [ 420.704087][ T5959] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 420.719832][ T5959] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 420.732053][ T5959] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.742646][ T5959] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.756927][ T5959] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.766661][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.102890][ T5959] usb 6-1: GET_CAPABILITIES returned 0 [ 421.133336][ T5959] usbtmc 6-1:16.0: can't read capabilities [ 421.377113][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.387787][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.468401][ T9] usb 6-1: USB disconnect, device number 19 [ 421.767756][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'. [ 421.785686][T10889] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1124'. [ 421.797194][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1125'. [ 421.881427][T10898] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1124'. [ 421.921742][T10889] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1124'. [ 422.495400][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 422.534877][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 422.553549][ T43] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 422.568119][ T43] usb 1-1: can't read configurations, error -71 [ 422.695274][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 422.719205][ T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 422.730539][ T9] usb 6-1: config 0 has no interface number 0 [ 422.758569][ T9] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 422.773589][ T9] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 422.776026][ T5939] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 422.789657][ T9] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 422.803633][ T9] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 422.824795][T10915] fuse: Unknown parameter 'roltmode' [ 422.841355][ T9] usb 6-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 422.854483][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.863240][ T9] usb 6-1: Product: syz [ 422.883280][ T9] usb 6-1: Manufacturer: syz [ 422.906143][ T9] usb 6-1: SerialNumber: syz [ 422.937050][ T9] usb 6-1: config 0 descriptor?? [ 422.976248][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 422.989673][ T5939] usb 4-1: config 1 has an invalid interface number: 50 but max is 0 [ 423.042716][ T5939] usb 4-1: config 1 has no interface number 0 [ 423.059430][ T5939] usb 4-1: config 1 interface 50 has no altsetting 0 [ 423.071777][ T5939] usb 4-1: New USB device found, idVendor=04f1, idProduct=3012, bcdDevice=b5.94 [ 423.083805][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.122452][ T5939] usb 4-1: Product: syz [ 423.136561][ T5939] usb 4-1: Manufacturer: syz [ 423.146150][ T5939] usb 4-1: SerialNumber: syz [ 423.173347][ T5939] ipaq 4-1:1.50: PocketPC PDA converter detected [ 423.188101][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 423.211204][ T9] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 423.238027][ T9] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 423.289477][ T9] usb 6-1: USB disconnect, device number 20 [ 423.304105][T10920] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 423.374360][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.415705][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.465894][ T5959] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 423.704370][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 423.714919][ T5959] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 423.724390][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.734343][ T5959] usb 2-1: Product: syz [ 423.753797][ T30] audit: type=1326 audit(1752587260.803:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 423.857658][ T5959] usb 2-1: Manufacturer: syz [ 423.900374][ T5959] usb 2-1: SerialNumber: syz [ 423.917916][ T5959] usb 2-1: config 0 descriptor?? [ 423.931043][ T30] audit: type=1326 audit(1752587260.833:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 423.986650][ T30] audit: type=1326 audit(1752587260.833:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 424.032016][ T5959] gspca_main: se401-2.14.0 probing 047d:5003 [ 424.221685][T10923] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 424.292910][T10923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.360367][ T5860] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 424.444097][T10939] bond1: (slave ip6gretap2): making interface the new active one [ 424.445457][ T30] audit: type=1326 audit(1752587260.833:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 424.520027][T10939] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 424.564682][ T30] audit: type=1326 audit(1752587260.833:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 424.589826][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 424.601909][ T5860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 424.619654][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 424.648070][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.658635][ T30] audit: type=1326 audit(1752587260.833:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 424.708655][ T5860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.724607][T10923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.739459][T10923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.769428][ T5860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.778984][ T30] audit: type=1326 audit(1752587260.833:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 424.825034][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.860139][ T30] audit: type=1326 audit(1752587260.833:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58398e929 code=0x7ffc0000 [ 424.915047][ T30] audit: type=1326 audit(1752587260.833:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa583990847 code=0x7ffc0000 [ 424.972068][ T30] audit: type=1326 audit(1752587260.833:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10924 comm="syz.2.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa5839907bc code=0x7ffc0000 [ 425.008749][T10923] netlink: 'syz.1.1135': attribute type 6 has an invalid length. [ 425.087394][ T5860] usb 6-1: GET_CAPABILITIES returned 0 [ 425.102265][ T5860] usbtmc 6-1:16.0: can't read capabilities [ 425.318058][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.334147][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.399593][ T9] usb 6-1: USB disconnect, device number 21 [ 425.836127][ T5959] gspca_se401: read req failed req 0x06 error -19 [ 425.896159][ T5959] usb 2-1: USB disconnect, device number 52 [ 425.989332][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 426.759775][T10963] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1144'. [ 426.846584][ T5939] ipaq 4-1:1.50: probe with driver ipaq failed with error -71 [ 426.894114][ T5939] usb 4-1: USB disconnect, device number 56 [ 428.735246][ T5860] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 428.951652][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 428.964614][ T5860] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 429.022636][ T5860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 429.075131][ T5860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.120898][ T5860] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.205145][ T5860] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.257476][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.518100][ T5860] usb 4-1: GET_CAPABILITIES returned 0 [ 429.547410][ T5860] usbtmc 4-1:16.0: can't read capabilities [ 429.645263][ T5939] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 429.789949][T11014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 429.796550][T11014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 429.800358][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.815143][T11014] vhci_hcd vhci_hcd.0: Device attached [ 429.828338][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.845518][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 429.866051][ T5986] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 429.876871][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.893559][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.908699][ T5939] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 429.918833][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.928044][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 429.931780][ T5939] usb 2-1: config 0 descriptor?? [ 430.025418][ T5920] vhci_hcd: vhci_device speed not set [ 430.032642][ T43] usb 4-1: USB disconnect, device number 57 [ 430.035498][ T5986] usb 6-1: Using ep0 maxpacket: 32 [ 430.047162][ T5986] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 430.058527][ T5986] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 430.071585][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 430.080900][ T5986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 430.090859][ T5920] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 430.099004][ T5986] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.109653][ T5986] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 430.123053][ T5986] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 430.132288][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 430.137905][ T10] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 430.145691][ T5986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.157028][ T9] usb 1-1: config 1 has an invalid interface number: 50 but max is 0 [ 430.166040][ T9] usb 1-1: config 1 has no interface number 0 [ 430.173280][ T5986] usb 6-1: config 0 descriptor?? [ 430.178944][ T9] usb 1-1: config 1 interface 50 has no altsetting 0 [ 430.190148][ T9] usb 1-1: New USB device found, idVendor=04f1, idProduct=3012, bcdDevice=b5.94 [ 430.201981][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.210548][ T9] usb 1-1: Product: syz [ 430.214996][ T9] usb 1-1: Manufacturer: syz [ 430.220013][ T9] usb 1-1: SerialNumber: syz [ 430.236357][ T9] ipaq 1-1:1.50: PocketPC PDA converter detected [ 430.308203][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.316893][ T10] usb 3-1: config 0 has no interface number 0 [ 430.323113][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 430.334246][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 430.345741][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 430.354859][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.369620][ T10] usb 3-1: config 0 descriptor?? [ 430.376168][T11014] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 430.390113][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 430.423203][ T5939] viewsonic 0003:0543:E621.0006: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.1-1/input0 [ 430.427076][ T5986] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 430.441110][T11011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.458456][T11011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.594040][ T5986] usb 3-1: USB disconnect, device number 39 [ 430.713762][T11026] bond0: entered promiscuous mode [ 430.738004][T11026] bond_slave_0: entered promiscuous mode [ 430.748907][T11026] bond_slave_1: entered promiscuous mode [ 430.760273][ T10] usb 6-1: USB disconnect, device number 22 [ 430.784532][ T10] usblp1: removed [ 430.795549][T11026] bond0: entered allmulticast mode [ 430.805390][T11026] bond_slave_0: entered allmulticast mode [ 430.825808][T11015] vhci_hcd: connection reset by peer [ 430.833225][ T9754] vhci_hcd: stop threads [ 430.840528][T11026] bond_slave_1: entered allmulticast mode [ 430.841679][ T9754] vhci_hcd: release socket [ 430.858899][ T9754] vhci_hcd: disconnect device [ 431.583782][T11035] ptrace attach of "./syz-executor exec"[5863] was attempted by "./syz-executor exec"[11035] [ 431.602467][T11035] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1161'. [ 431.623916][T11035] netlink: 'syz.2.1161': attribute type 21 has an invalid length. [ 431.634577][T11035] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1161'. [ 431.650180][T11035] netlink: 'syz.2.1161': attribute type 4 has an invalid length. [ 431.659146][T11035] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1161'. [ 431.795220][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 431.949670][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.964970][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.988982][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.058644][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.151185][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.206776][ T43] usb 6-1: config 0 descriptor?? [ 432.565581][T11039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.680369][ T10] usb 2-1: USB disconnect, device number 53 [ 432.940699][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 432.996485][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1160'. [ 433.059624][T11034] netlink: 'syz.5.1160': attribute type 5 has an invalid length. [ 433.295328][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'. [ 433.387742][ T43] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 433.462355][ T43] usb 6-1: USB disconnect, device number 23 [ 433.979132][T11048] team0 (unregistering): Port device team_slave_0 removed [ 434.123063][T11048] team0 (unregistering): Port device team_slave_1 removed [ 434.173857][T11056] FAULT_INJECTION: forcing a failure. [ 434.173857][T11056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.187589][T11056] CPU: 1 UID: 0 PID: 11056 Comm: syz.2.1168 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 434.187620][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.187634][T11056] Call Trace: [ 434.187643][T11056] [ 434.187651][T11056] dump_stack_lvl+0x189/0x250 [ 434.187684][T11056] ? __pfx____ratelimit+0x10/0x10 [ 434.187721][T11056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.187747][T11056] ? __pfx__printk+0x10/0x10 [ 434.187777][T11056] ? __might_fault+0xb0/0x130 [ 434.187814][T11056] should_fail_ex+0x414/0x560 [ 434.187852][T11056] _copy_from_user+0x2d/0xb0 [ 434.187879][T11056] video_usercopy+0x354/0x14f0 [ 434.187918][T11056] ? __pfx___video_do_ioctl+0x10/0x10 [ 434.187945][T11056] ? __pfx_video_usercopy+0x10/0x10 [ 434.187986][T11056] ? __fget_files+0x2a/0x420 [ 434.188019][T11056] ? __fget_files+0x2a/0x420 [ 434.188046][T11056] ? __fget_files+0x3a0/0x420 [ 434.188079][T11056] v4l2_ioctl+0x18a/0x1e0 [ 434.188106][T11056] ? __pfx_v4l2_ioctl+0x10/0x10 [ 434.188133][T11056] __se_sys_ioctl+0xfc/0x170 [ 434.188158][T11056] do_syscall_64+0xfa/0x3b0 [ 434.188179][T11056] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.188212][T11056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.188233][T11056] ? clear_bhb_loop+0x60/0xb0 [ 434.188260][T11056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.188282][T11056] RIP: 0033:0x7fa58398e929 [ 434.188309][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.188329][T11056] RSP: 002b:00007fa584824038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.188352][T11056] RAX: ffffffffffffffda RBX: 00007fa583bb5fa0 RCX: 00007fa58398e929 [ 434.188369][T11056] RDX: 00002000000002c0 RSI: 00000000c058560f RDI: 0000000000000003 [ 434.188383][T11056] RBP: 00007fa584824090 R08: 0000000000000000 R09: 0000000000000000 [ 434.188397][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.188411][T11056] R13: 0000000000000000 R14: 00007fa583bb5fa0 R15: 00007fa583cdfa28 [ 434.188443][T11056] [ 434.437940][T11048] syz_tun: left promiscuous mode [ 434.475460][T11048] team0 (unregistering): Port device macvlan2 removed [ 434.690914][T11060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.705043][ T9] ipaq 1-1:1.50: probe with driver ipaq failed with error -71 [ 434.712546][T11060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.749895][ T9] usb 1-1: USB disconnect, device number 47 [ 434.907323][ T5939] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 435.029816][T11075] ptrace attach of "./syz-executor exec"[8492] was attempted by "./syz-executor exec"[11075] [ 435.085177][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 435.106353][ T5939] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.124214][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.132252][T11079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 435.165625][ T5939] usb 6-1: Product: syz [ 435.169889][ T5939] usb 6-1: Manufacturer: syz [ 435.174850][ T5939] usb 6-1: SerialNumber: syz [ 435.181289][T11077] netlink: 'syz.0.1174': attribute type 21 has an invalid length. [ 435.189471][T11077] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1174'. [ 435.220081][T11075] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1174'. [ 435.253559][ T5939] usb 6-1: config 0 descriptor?? [ 435.265407][ T5920] vhci_hcd: vhci_device speed not set [ 435.291115][T11077] netlink: 'syz.0.1174': attribute type 4 has an invalid length. [ 435.299221][T11077] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1174'. [ 435.476183][ T5939] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 435.497090][ T5939] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 435.504707][T11084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1178'. [ 435.532752][ T5939] usb 6-1: USB disconnect, device number 24 [ 435.915294][ T9] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 436.108466][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.139852][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.166919][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.189763][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.213849][ T9] usb 3-1: Product: syz [ 436.229074][ T9] usb 3-1: Manufacturer: syz [ 436.234090][ T9] usb 3-1: SerialNumber: syz [ 436.419972][T11108] FAULT_INJECTION: forcing a failure. [ 436.419972][T11108] name failslab, interval 1, probability 0, space 0, times 0 [ 436.437052][T11108] CPU: 0 UID: 0 PID: 11108 Comm: syz.1.1185 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 436.437086][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.437100][T11108] Call Trace: [ 436.437109][T11108] [ 436.437118][T11108] dump_stack_lvl+0x189/0x250 [ 436.437154][T11108] ? __pfx____ratelimit+0x10/0x10 [ 436.437190][T11108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.437217][T11108] ? __pfx__printk+0x10/0x10 [ 436.437264][T11108] should_fail_ex+0x414/0x560 [ 436.437303][T11108] should_failslab+0xa8/0x100 [ 436.437333][T11108] kmem_cache_alloc_noprof+0x73/0x3c0 [ 436.437364][T11108] ? skb_clone+0x212/0x3a0 [ 436.437400][T11108] skb_clone+0x212/0x3a0 [ 436.437443][T11108] __netlink_deliver_tap+0x404/0x850 [ 436.437483][T11108] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.437512][T11108] netlink_deliver_tap+0x19c/0x1b0 [ 436.437539][T11108] netlink_sendskb+0x68/0x140 [ 436.437564][T11108] netlink_rcv_skb+0x28c/0x470 [ 436.437592][T11108] ? __pfx_genl_rcv_msg+0x10/0x10 [ 436.437627][T11108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 436.437671][T11108] ? down_read+0x1ad/0x2e0 [ 436.437697][T11108] genl_rcv+0x28/0x40 [ 436.437727][T11108] netlink_unicast+0x75c/0x8e0 [ 436.437763][T11108] netlink_sendmsg+0x805/0xb30 [ 436.437800][T11108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.437832][T11108] ? aa_sock_msg_perm+0x94/0x160 [ 436.437867][T11108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.437901][T11108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.437929][T11108] __sock_sendmsg+0x219/0x270 [ 436.437954][T11108] ____sys_sendmsg+0x505/0x830 [ 436.437990][T11108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.438030][T11108] ? import_iovec+0x74/0xa0 [ 436.438061][T11108] ___sys_sendmsg+0x21f/0x2a0 [ 436.438094][T11108] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.438163][T11108] ? __fget_files+0x2a/0x420 [ 436.438192][T11108] ? __fget_files+0x3a0/0x420 [ 436.438234][T11108] __x64_sys_sendmsg+0x19b/0x260 [ 436.438266][T11108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.438307][T11108] ? __pfx_ksys_write+0x10/0x10 [ 436.438339][T11108] ? do_syscall_64+0xbe/0x3b0 [ 436.438366][T11108] do_syscall_64+0xfa/0x3b0 [ 436.438386][T11108] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.438420][T11108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.438451][T11108] ? clear_bhb_loop+0x60/0xb0 [ 436.438478][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.438499][T11108] RIP: 0033:0x7f63bbb8e929 [ 436.438519][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.438538][T11108] RSP: 002b:00007f63bca2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.438560][T11108] RAX: ffffffffffffffda RBX: 00007f63bbdb5fa0 RCX: 00007f63bbb8e929 [ 436.438576][T11108] RDX: 0000000000004854 RSI: 0000200000001080 RDI: 0000000000000003 [ 436.438590][T11108] RBP: 00007f63bca2f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.438604][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.438617][T11108] R13: 0000000000000000 R14: 00007f63bbdb5fa0 R15: 00007f63bbedfa28 [ 436.438651][T11108] [ 436.815932][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 436.815952][ T30] audit: type=1326 audit(1752587273.863:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11114 comm="syz.3.1187" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9db798e929 code=0x0 [ 436.843895][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.946316][T11117] trusted_key: encrypted_key: master key parameter 'trus³ed:tru' is invalid [ 437.055336][T11124] ptrace attach of "./syz-executor exec"[5867] was attempted by "./syz-executor exec"[11124] [ 437.098583][ T5855] Bluetooth: hci5: command 0x0405 tx timeout [ 437.158054][T11124] __nla_validate_parse: 3 callbacks suppressed [ 437.158074][T11124] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1190'. [ 437.190782][T11124] netlink: 'syz.1.1190': attribute type 21 has an invalid length. [ 437.205554][T11124] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1190'. [ 437.214871][T11124] netlink: 'syz.1.1190': attribute type 4 has an invalid length. [ 437.230186][T11124] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1190'. [ 437.302569][T11130] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1192'. [ 438.566377][ T9] usb 3-1: 0:2 : does not exist [ 438.630060][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 438.684307][ T9] usb 3-1: USB disconnect, device number 40 [ 439.151015][T11149] FAULT_INJECTION: forcing a failure. [ 439.151015][T11149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.202470][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.1.1198 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 439.202502][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.202516][T11149] Call Trace: [ 439.202525][T11149] [ 439.202535][T11149] dump_stack_lvl+0x189/0x250 [ 439.202570][T11149] ? __pfx____ratelimit+0x10/0x10 [ 439.202606][T11149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.202634][T11149] ? __pfx__printk+0x10/0x10 [ 439.202667][T11149] ? __might_fault+0xb0/0x130 [ 439.202706][T11149] should_fail_ex+0x414/0x560 [ 439.202745][T11149] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 439.202788][T11149] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 439.202830][T11149] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 439.202864][T11149] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 439.202914][T11149] ? __lock_acquire+0xab9/0xd20 [ 439.202943][T11149] ? fpu__alloc_mathframe+0xad/0x130 [ 439.202982][T11149] get_sigframe+0x58d/0x7d0 [ 439.203023][T11149] ? __pfx_get_sigframe+0x10/0x10 [ 439.203061][T11149] ? irqentry_exit+0x74/0x90 [ 439.203091][T11149] x64_setup_rt_frame+0x15b/0xd40 [ 439.203121][T11149] ? _raw_spin_unlock_irq+0x29/0x50 [ 439.203154][T11149] ? _raw_spin_unlock_irq+0x2e/0x50 [ 439.203194][T11149] ? get_signal+0x1151/0x1340 [ 439.203226][T11149] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 439.203260][T11149] arch_do_signal_or_restart+0x3d7/0x750 [ 439.203303][T11149] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 439.203356][T11149] ? exit_to_user_mode_loop+0x40/0x110 [ 439.203385][T11149] exit_to_user_mode_loop+0x75/0x110 [ 439.203410][T11149] do_syscall_64+0x2bd/0x3b0 [ 439.203433][T11149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.203460][T11149] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.203483][T11149] ? clear_bhb_loop+0x60/0xb0 [ 439.203512][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.203534][T11149] RIP: 0033:0x7f63bbb8e927 [ 439.203554][T11149] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 439.203574][T11149] RSP: 002b:00007f63bca2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 439.203598][T11149] RAX: 0000000000000000 RBX: 00007f63bbdb5fa0 RCX: 00007f63bbb8e929 [ 439.203614][T11149] RDX: 0000000000002020 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 439.203628][T11149] RBP: 00007f63bca2f090 R08: 0000000000000000 R09: 0000000000000000 [ 439.203642][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.203656][T11149] R13: 0000000000000000 R14: 00007f63bbdb5fa0 R15: 00007f63bbedfa28 [ 439.203690][T11149] [ 439.461957][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.962182][T11162] fuse: Unknown parameter 'group¬FU00000000000000000000' [ 440.144329][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.151075][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.362556][T11173] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1205'. [ 441.005183][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 441.166719][ T9] usb 2-1: config 0 has an invalid interface number: 253 but max is 0 [ 441.177168][ T9] usb 2-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 441.192616][ T9] usb 2-1: config 0 has no interface number 0 [ 441.221292][ T9] usb 2-1: config 0 interface 253 has no altsetting 0 [ 441.252370][ T9] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 441.280938][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.311440][ T9] usb 2-1: Product: syz [ 441.329645][ T9] usb 2-1: Manufacturer: syz [ 441.343485][ T9] usb 2-1: SerialNumber: syz [ 441.364135][ T9] usb 2-1: config 0 descriptor?? [ 441.602820][ T9] usbhid 2-1:0.253: couldn't find an input interrupt endpoint [ 441.629186][ T9] usb 2-1: USB disconnect, device number 54 [ 442.595303][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 442.905331][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 442.925191][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 442.932616][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.943304][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 442.955805][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.967046][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.980018][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 442.989430][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.997501][ T9] usb 6-1: Product: syz [ 443.002058][ T9] usb 6-1: Manufacturer: syz [ 443.006900][ T9] usb 6-1: SerialNumber: syz [ 443.018556][ T9] usb 6-1: config 0 descriptor?? [ 443.032905][ T9] appledisplay 6-1:0.0: Submitting URB failed [ 443.039943][ T9] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5 [ 443.068617][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.087706][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.107817][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.122788][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 443.134417][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.147733][ T10] usb 2-1: config 0 descriptor?? [ 443.305756][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.318391][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.422610][T11213] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1218'. [ 443.692771][ T10] ryos 0003:1E7D:3232.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 443.948385][ T30] audit: type=1800 audit(1752587280.993:849): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1216" name="card6" dev="devtmpfs" ino=3589 res=0 errno=0 [ 444.709237][ T5939] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 444.885992][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 444.906554][ T5939] usb 3-1: config index 0 descriptor too short (expected 46935, got 18) [ 444.919268][ T5939] usb 3-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 444.956678][ T5939] usb 3-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 444.988707][ T5939] usb 3-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 445.021342][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 445.031119][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.062424][ T5939] usb 3-1: Product: syz [ 445.072848][ T5939] usb 3-1: Manufacturer: syz [ 445.082241][ T5939] usb 3-1: SerialNumber: syz [ 445.337814][ T5939] usb 3-1: USB disconnect, device number 41 [ 445.795215][ T9] usb 6-1: USB disconnect, device number 25 [ 445.876171][T11018] usb 2-1: USB disconnect, device number 55 [ 446.175372][ T5939] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 446.285236][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 446.365410][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 446.379387][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 446.400472][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 446.438076][ T9] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 446.457921][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.468627][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.492336][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 446.508239][ T9] usb 6-1: config 0 has no interface number 0 [ 446.533087][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 446.554327][ T9] usb 6-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 446.594713][ T5939] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 446.605641][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.614194][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.634763][ T9] usb 6-1: config 0 descriptor?? [ 446.637026][ T5939] usb 3-1: Product: syz [ 446.656711][ T9] rndis_host 6-1:0.9: More than one union descriptor, skipping ... [ 446.658275][ T5939] usb 3-1: Manufacturer: syz [ 446.664718][ T9] rndis_host 6-1:0.9: skipping garbage [ 446.664743][ T9] usb 6-1: bad CDC descriptors [ 446.706097][ T9] cdc_acm 6-1:0.9: More than one union descriptor, skipping ... [ 446.713820][ T9] cdc_acm 6-1:0.9: skipping garbage [ 446.725437][ T5939] usb 3-1: SerialNumber: syz [ 446.758855][ T5939] usb 3-1: config 0 descriptor?? [ 446.790841][ T5939] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 446.950832][ T5959] usb 6-1: USB disconnect, device number 26 [ 447.016656][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.033357][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.057494][T11018] usb 3-1: USB disconnect, device number 42 [ 447.105245][ T5860] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 447.118653][ T30] audit: type=1326 audit(1752587284.173:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.1.1229" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63bbb8e929 code=0x0 [ 447.122033][T11262] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1230'. [ 447.274721][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 447.289917][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.315220][ T5860] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 447.344762][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.367505][ T5860] usb 4-1: config 0 descriptor?? [ 447.791358][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 447.835325][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 447.864268][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 447.926991][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 447.987685][ T5860] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 448.029186][ T5860] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 448.186523][T11256] FAULT_INJECTION: forcing a failure. [ 448.186523][T11256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.224032][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.3.1228 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 448.224065][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 448.224078][T11256] Call Trace: [ 448.224086][T11256] [ 448.224096][T11256] dump_stack_lvl+0x189/0x250 [ 448.224129][T11256] ? __pfx____ratelimit+0x10/0x10 [ 448.224174][T11256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.224201][T11256] ? __pfx__printk+0x10/0x10 [ 448.224244][T11256] should_fail_ex+0x414/0x560 [ 448.224283][T11256] _copy_to_user+0x31/0xb0 [ 448.224311][T11256] simple_read_from_buffer+0xe1/0x170 [ 448.224344][T11256] proc_fail_nth_read+0x1df/0x250 [ 448.224379][T11256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.224414][T11256] ? rw_verify_area+0x258/0x650 [ 448.224438][T11256] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 448.224471][T11256] vfs_read+0x1fd/0x980 [ 448.224501][T11256] ? __pfx___mutex_lock+0x10/0x10 [ 448.224524][T11256] ? __pfx_vfs_read+0x10/0x10 [ 448.224550][T11256] ? __fget_files+0x2a/0x420 [ 448.224585][T11256] ? __fget_files+0x3a0/0x420 [ 448.224611][T11256] ? __fget_files+0x2a/0x420 [ 448.224651][T11256] ksys_read+0x145/0x250 [ 448.224674][T11256] ? __fget_files+0x3a0/0x420 [ 448.224705][T11256] ? __pfx_ksys_read+0x10/0x10 [ 448.224736][T11256] ? do_syscall_64+0xbe/0x3b0 [ 448.224762][T11256] do_syscall_64+0xfa/0x3b0 [ 448.224782][T11256] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.224815][T11256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.224836][T11256] ? clear_bhb_loop+0x60/0xb0 [ 448.224862][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.224881][T11256] RIP: 0033:0x7f9db798d33c [ 448.224900][T11256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 448.224918][T11256] RSP: 002b:00007f9db875a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.224941][T11256] RAX: ffffffffffffffda RBX: 00007f9db7bb5fa0 RCX: 00007f9db798d33c [ 448.224956][T11256] RDX: 000000000000000f RSI: 00007f9db875a0a0 RDI: 0000000000000004 [ 448.224969][T11256] RBP: 00007f9db875a090 R08: 0000000000000000 R09: 0000000000000000 [ 448.224983][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.224995][T11256] R13: 0000000000000000 R14: 00007f9db7bb5fa0 R15: 00007f9db7cdfa28 [ 448.225026][T11256] [ 448.748869][ T5860] usb 4-1: USB disconnect, device number 58 [ 448.898581][T11294] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 449.319535][T11305] FAULT_INJECTION: forcing a failure. [ 449.319535][T11305] name failslab, interval 1, probability 0, space 0, times 0 [ 449.350610][T11303] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1242'. [ 449.363043][T11305] CPU: 0 UID: 0 PID: 11305 Comm: syz.1.1243 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 449.363075][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.363089][T11305] Call Trace: [ 449.363098][T11305] [ 449.363107][T11305] dump_stack_lvl+0x189/0x250 [ 449.363138][T11305] ? __pfx____ratelimit+0x10/0x10 [ 449.363171][T11305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.363197][T11305] ? __pfx__printk+0x10/0x10 [ 449.363246][T11305] should_fail_ex+0x414/0x560 [ 449.363283][T11305] should_failslab+0xa8/0x100 [ 449.363314][T11305] kmem_cache_alloc_noprof+0x73/0x3c0 [ 449.363339][T11305] ? skb_clone+0x212/0x3a0 [ 449.363374][T11305] skb_clone+0x212/0x3a0 [ 449.363408][T11305] __netlink_deliver_tap+0x404/0x850 [ 449.363449][T11305] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.363477][T11305] netlink_deliver_tap+0x19c/0x1b0 [ 449.363505][T11305] netlink_sendskb+0x68/0x140 [ 449.363531][T11305] nfnetlink_rcv+0x2290/0x2520 [ 449.363600][T11305] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 449.363652][T11305] ? ref_tracker_free+0x63a/0x7d0 [ 449.363719][T11305] ? __netlink_deliver_tap+0x807/0x850 [ 449.363755][T11305] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.363781][T11305] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.363813][T11305] netlink_unicast+0x75c/0x8e0 [ 449.363849][T11305] netlink_sendmsg+0x805/0xb30 [ 449.363886][T11305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.363917][T11305] ? aa_sock_msg_perm+0x94/0x160 [ 449.363958][T11305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.363990][T11305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.364018][T11305] __sock_sendmsg+0x219/0x270 [ 449.364043][T11305] ____sys_sendmsg+0x505/0x830 [ 449.364081][T11305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.364121][T11305] ? import_iovec+0x74/0xa0 [ 449.364151][T11305] ___sys_sendmsg+0x21f/0x2a0 [ 449.364182][T11305] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.364252][T11305] ? __fget_files+0x2a/0x420 [ 449.364280][T11305] ? __fget_files+0x3a0/0x420 [ 449.364321][T11305] __x64_sys_sendmsg+0x19b/0x260 [ 449.364353][T11305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.364393][T11305] ? __pfx_ksys_write+0x10/0x10 [ 449.364415][T11305] ? rcu_is_watching+0x15/0xb0 [ 449.364446][T11305] ? do_syscall_64+0xbe/0x3b0 [ 449.364473][T11305] do_syscall_64+0xfa/0x3b0 [ 449.364493][T11305] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.364526][T11305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.364547][T11305] ? clear_bhb_loop+0x60/0xb0 [ 449.364573][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.364594][T11305] RIP: 0033:0x7f63bbb8e929 [ 449.364613][T11305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.364632][T11305] RSP: 002b:00007f63bca2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.364654][T11305] RAX: ffffffffffffffda RBX: 00007f63bbdb5fa0 RCX: 00007f63bbb8e929 [ 449.364670][T11305] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 449.364683][T11305] RBP: 00007f63bca2f090 R08: 0000000000000000 R09: 0000000000000000 [ 449.364697][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.364709][T11305] R13: 0000000000000000 R14: 00007f63bbdb5fa0 R15: 00007f63bbedfa28 [ 449.364742][T11305] [ 450.203929][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 450.213352][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1244'. [ 450.223922][T11320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.377583][T11307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 450.568536][ T5860] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 450.770278][ T5860] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 450.794045][T11330] FAULT_INJECTION: forcing a failure. [ 450.794045][T11330] name failslab, interval 1, probability 0, space 0, times 0 [ 450.812210][ T5860] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.835513][ T5860] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 450.860226][T11330] CPU: 1 UID: 0 PID: 11330 Comm: syz.1.1250 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 450.860258][T11330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.860272][T11330] Call Trace: [ 450.860280][T11330] [ 450.860290][T11330] dump_stack_lvl+0x189/0x250 [ 450.860322][T11330] ? __pfx____ratelimit+0x10/0x10 [ 450.860357][T11330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.860384][T11330] ? __pfx__printk+0x10/0x10 [ 450.860429][T11330] should_fail_ex+0x414/0x560 [ 450.860467][T11330] should_failslab+0xa8/0x100 [ 450.860497][T11330] __kmalloc_cache_noprof+0x70/0x3d0 [ 450.860524][T11330] ? sctp_add_bind_addr+0x8c/0x370 [ 450.860551][T11330] sctp_add_bind_addr+0x8c/0x370 [ 450.860580][T11330] sctp_copy_local_addr_list+0x30b/0x4e0 [ 450.860608][T11330] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 450.860632][T11330] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 450.860657][T11330] ? sctp_v6_is_any+0x64/0x80 [ 450.860684][T11330] ? sctp_copy_one_addr+0x93/0x360 [ 450.860711][T11330] sctp_bind_addr_copy+0xb3/0x3c0 [ 450.860735][T11330] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 450.860773][T11330] sctp_connect_new_asoc+0x2e0/0x690 [ 450.860806][T11330] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 450.860836][T11330] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 450.860865][T11330] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 450.860901][T11330] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 450.860931][T11330] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 450.860952][T11330] ? security_sctp_bind_connect+0x7e/0x2e0 [ 450.860985][T11330] sctp_sendmsg+0x155c/0x2810 [ 450.861027][T11330] ? __pfx_sctp_sendmsg+0x10/0x10 [ 450.861059][T11330] ? aa_sk_perm+0x81e/0x950 [ 450.861094][T11330] ? __pfx_aa_sk_perm+0x10/0x10 [ 450.861128][T11330] ? sock_rps_record_flow+0x19/0x410 [ 450.861154][T11330] ? inet_sendmsg+0x2f4/0x370 [ 450.861175][T11330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.861211][T11330] __sock_sendmsg+0x19c/0x270 [ 450.861237][T11330] ____sys_sendmsg+0x505/0x830 [ 450.861271][T11330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.861310][T11330] ? import_iovec+0x74/0xa0 [ 450.861340][T11330] ___sys_sendmsg+0x21f/0x2a0 [ 450.861371][T11330] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.861442][T11330] ? __fget_files+0x2a/0x420 [ 450.861469][T11330] ? __fget_files+0x3a0/0x420 [ 450.861510][T11330] __x64_sys_sendmsg+0x19b/0x260 [ 450.861542][T11330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.861582][T11330] ? __pfx_ksys_write+0x10/0x10 [ 450.861605][T11330] ? rcu_is_watching+0x15/0xb0 [ 450.861638][T11330] ? do_syscall_64+0xbe/0x3b0 [ 450.861664][T11330] do_syscall_64+0xfa/0x3b0 [ 450.861684][T11330] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.861717][T11330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.861738][T11330] ? clear_bhb_loop+0x60/0xb0 [ 450.861765][T11330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.861795][T11330] RIP: 0033:0x7f63bbb8e929 [ 450.861813][T11330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.861832][T11330] RSP: 002b:00007f63bca2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.861855][T11330] RAX: ffffffffffffffda RBX: 00007f63bbdb5fa0 RCX: 00007f63bbb8e929 [ 450.861871][T11330] RDX: 0000000020000000 RSI: 0000200000001640 RDI: 0000000000000003 [ 450.861894][T11330] RBP: 00007f63bca2f090 R08: 0000000000000000 R09: 0000000000000000 [ 450.861907][T11330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.861920][T11330] R13: 0000000000000000 R14: 00007f63bbdb5fa0 R15: 00007f63bbedfa28 [ 450.861954][T11330] [ 451.218363][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.328124][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 451.334826][ T5860] usb 3-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 451.344342][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.358282][ T5860] usb 3-1: config 0 descriptor?? [ 451.455198][T11018] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 451.607617][T11018] usb 6-1: config 255 has too many interfaces: 226, using maximum allowed: 32 [ 451.632598][T11018] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 451.659653][T11018] usb 6-1: config 255 has 1 interface, different from the descriptor's value: 226 [ 451.672196][T11018] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 451.700611][T11018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.845178][ T5860] uclogic 0003:28BD:0074.000A: interface is invalid, ignoring [ 451.885278][ T9] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 452.040879][ T10] usb 3-1: USB disconnect, device number 43 [ 452.046530][T11345] raw_sendmsg: syz.5.1251 forgot to set AF_INET. Fix it! [ 452.054105][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 452.070540][ T9] usb 4-1: config 5 has an invalid interface number: 139 but max is 2 [ 452.081997][ T9] usb 4-1: config 5 has an invalid interface descriptor of length 3, skipping [ 452.093199][ T9] usb 4-1: config 5 has an invalid descriptor of length 1, skipping remainder of the config [ 452.103901][ T9] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 452.112978][ T9] usb 4-1: config 5 has no interface number 0 [ 452.119416][ T9] usb 4-1: config 5 interface 139 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 452.132990][ T9] usb 4-1: config 5 interface 139 has no altsetting 0 [ 452.142427][ T9] usb 4-1: New USB device found, idVendor=baeb, idProduct=eece, bcdDevice=b6.30 [ 452.152069][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.160649][ T9] usb 4-1: Product: syz [ 452.164861][ T9] usb 4-1: Manufacturer: Ð¥ [ 452.169576][ T9] usb 4-1: SerialNumber: syz [ 452.384948][ T9] hub 4-1:5.139: bad descriptor, ignoring hub [ 452.393169][ T9] hub 4-1:5.139: probe with driver hub failed with error -5 [ 452.416118][ T9] usb 4-1: USB disconnect, device number 59 [ 453.847878][ T5959] usb 6-1: USB disconnect, device number 27 [ 454.130988][T11367] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1259'. [ 454.215419][ T31] INFO: task kworker/0:3:5918 blocked for more than 143 seconds. [ 454.223245][ T31] Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 [ 454.241506][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 454.252031][ T31] task:kworker/0:3 state:D stack:21240 pid:5918 tgid:5918 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 454.272030][ T31] Workqueue: usb_hub_wq hub_event [ 454.278390][ T31] Call Trace: [ 454.281805][ T31] [ 454.284858][ T31] __schedule+0x16f5/0x4d00 [ 454.290110][ T31] ? __device_attach+0x2b8/0x400 [ 454.295623][ T31] ? bus_probe_device+0x185/0x260 [ 454.300796][ T31] ? hub_event+0x2941/0x4a00 [ 454.306701][ T31] ? process_scheduled_works+0xae1/0x17b0 [ 454.312555][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 454.320431][ T31] ? schedule+0x165/0x360 [ 454.326007][ T31] ? __lock_acquire+0xab9/0xd20 [ 454.332086][ T31] ? __pfx___schedule+0x10/0x10 [ 454.338318][ T31] ? schedule+0x91/0x360 [ 454.342750][ T31] schedule+0x165/0x360 [ 454.348482][ T31] schedule_timeout+0x9a/0x270 [ 454.354494][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 454.365169][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.379742][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.398886][ T31] ? wait_for_completion+0x267/0x5d0 [ 454.404390][ T31] wait_for_completion+0x2bf/0x5d0 [ 454.427730][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 454.445260][ T5959] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 454.464106][ T31] i2c_del_adapter+0x581/0x6e0 [ 454.477747][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 454.509790][ T31] ? rcu_is_watching+0x15/0xb0 [ 454.517943][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 454.524832][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 454.535021][ T31] dvb_usb_device_exit+0x1be/0x350 [ 454.554760][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 454.569107][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 454.576860][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.587923][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 454.608686][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 454.617996][ T31] cxusb_probe+0x603/0x700 [ 454.629801][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 454.637494][ T5959] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 454.658351][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 454.664225][ T5959] usb 6-1: config 7 has no interface number 0 [ 454.678621][ T31] usb_probe_interface+0x641/0xbc0 [ 454.686027][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 454.696820][ T31] really_probe+0x26a/0x9a0 [ 454.697369][ T5959] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 454.701415][ T31] __driver_probe_device+0x18c/0x2f0 [ 454.718637][ T31] driver_probe_device+0x4f/0x430 [ 454.721571][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.723714][ T31] __device_attach_driver+0x2ce/0x530 [ 454.745694][ T31] bus_for_each_drv+0x251/0x2e0 [ 454.750640][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 454.758119][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 454.763569][ T31] __device_attach+0x2b8/0x400 [ 454.763720][ T5959] usb 6-1: Product: 㯑 [ 454.769600][ T31] ? __pfx___device_attach+0x10/0x10 [ 454.773106][ T5959] usb 6-1: Manufacturer: ë–’ [ 454.802900][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 454.818787][ T31] bus_probe_device+0x185/0x260 [ 454.831157][ T31] device_add+0x7b6/0xb50 [ 454.843103][ T31] usb_set_configuration+0x1a87/0x20e0 [ 454.854365][ T31] usb_generic_driver_probe+0x8d/0x150 [ 454.876078][ T31] usb_probe_device+0x1c4/0x390 [ 454.883448][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 454.891592][ T31] really_probe+0x26a/0x9a0 [ 454.896611][ T31] __driver_probe_device+0x18c/0x2f0 [ 454.902140][ T31] driver_probe_device+0x4f/0x430 [ 454.907813][ T31] __device_attach_driver+0x2ce/0x530 [ 454.913423][ T31] bus_for_each_drv+0x251/0x2e0 [ 454.920093][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 454.927685][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 454.933283][ T31] __device_attach+0x2b8/0x400 [ 454.939184][ T31] ? __pfx___device_attach+0x10/0x10 [ 454.946698][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 454.952178][ T31] bus_probe_device+0x185/0x260 [ 454.957897][ T31] device_add+0x7b6/0xb50 [ 454.962451][ T31] usb_new_device+0xa39/0x16c0 [ 454.967978][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 454.973457][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 454.979931][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.989571][ T31] hub_event+0x2941/0x4a00 [ 455.001677][ T31] ? __pfx_hub_event+0x10/0x10 [ 455.007266][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.028476][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.043863][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.054155][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 455.063979][ T31] process_scheduled_works+0xae1/0x17b0 [ 455.080195][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.087026][ T31] worker_thread+0x8a0/0xda0 [ 455.088379][ T5959] usb 6-1: USB disconnect, device number 28 [ 455.091915][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 455.105023][ T31] ? __kthread_parkme+0x7b/0x200 [ 455.110475][ T31] kthread+0x70e/0x8a0 [ 455.114728][ T31] ? __pfx_worker_thread+0x10/0x10 [ 455.120303][ T31] ? __pfx_kthread+0x10/0x10 [ 455.125283][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.130830][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.136254][ T31] ? __pfx_kthread+0x10/0x10 [ 455.141239][ T31] ret_from_fork+0x3fc/0x770 [ 455.146174][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.151547][ T31] ? __switch_to_asm+0x39/0x70 [ 455.156497][ T31] ? __switch_to_asm+0x33/0x70 [ 455.161451][ T31] ? __pfx_kthread+0x10/0x10 [ 455.166379][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.171522][ T31] [ 455.174899][ T31] INFO: task syz.4.641:9217 blocked for more than 144 seconds. [ 455.182889][ T31] Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 [ 455.190696][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.200124][ T31] task:syz.4.641 state:D stack:26472 pid:9217 tgid:9216 ppid:5865 task_flags:0x400140 flags:0x00004004 [ 455.212409][ T31] Call Trace: [ 455.215890][ T31] [ 455.218874][ T31] __schedule+0x16f5/0x4d00 [ 455.223707][ T31] ? __lock_acquire+0xab9/0xd20 [ 455.228725][ T31] ? schedule+0x165/0x360 [ 455.233127][ T31] ? __pfx___schedule+0x10/0x10 [ 455.238409][ T31] ? schedule+0x91/0x360 [ 455.242730][ T31] schedule+0x165/0x360 [ 455.247007][ T31] schedule_preempt_disabled+0x13/0x30 [ 455.252877][ T31] __mutex_lock+0x724/0xe80 [ 455.257566][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 455.263507][ T31] ? __mutex_lock+0x51b/0xe80 [ 455.268342][ T31] ? usbdev_ioctl+0x140/0x20c0 [ 455.273282][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 455.278599][ T31] usbdev_ioctl+0x140/0x20c0 [ 455.283409][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 455.288556][ T31] ? __fget_files+0x2a/0x420 [ 455.293347][ T31] ? __fget_files+0x3a0/0x420 [ 455.298472][ T31] ? __fget_files+0x2a/0x420 [ 455.303225][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 455.308283][ T31] ? __pfx_usbdev_ioctl+0x10/0x10 [ 455.313568][ T31] __se_sys_ioctl+0xfc/0x170 [ 455.318293][ T31] do_syscall_64+0xfa/0x3b0 [ 455.322839][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.328307][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.334423][ T31] ? clear_bhb_loop+0x60/0xb0 [ 455.339294][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.345808][ T31] RIP: 0033:0x7fd931b8e929 [ 455.350295][ T31] RSP: 002b:00007fd93299a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.358921][ T31] RAX: ffffffffffffffda RBX: 00007fd931db5fa0 RCX: 00007fd931b8e929 [ 455.367231][ T31] RDX: 00002000000001c0 RSI: 000000008108551b RDI: 0000000000000003 [ 455.375519][ T31] RBP: 00007fd931c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 455.383774][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.392087][ T31] R13: 0000000000000000 R14: 00007fd931db5fa0 R15: 00007fd931edfa28 [ 455.400278][ T31] [ 455.403963][ T31] [ 455.403963][ T31] Showing all locks held in the system: [ 455.465385][ T31] 1 lock held by khungtaskd/31: [ 455.470430][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 455.484594][ T31] 2 locks held by getty/5612: [ 455.489457][ T31] #0: ffff888034c020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 455.506872][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 455.520396][ T31] 5 locks held by kworker/0:3/5918: [ 455.526687][ T31] #0: ffff888144686548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 455.538280][ T31] #1: ffffc900043dfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 455.550445][ T31] #2: ffff888144fb7198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 455.568068][ T31] #3: ffff888023fa9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 455.579949][ T31] #4: ffff888023faa160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 455.593487][ T31] 4 locks held by udevd/5941: [ 455.600695][ T31] #0: ffff888028fe89e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 455.613535][ T31] #1: ffff888052c3bc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 455.629264][ T31] #2: ffff888079d81008 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 455.640697][ T31] #3: ffff888023fa9198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 455.654154][ T31] 4 locks held by kworker/1:6/5959: [ 455.676011][ T31] 1 lock held by syz.4.641/9217: [ 455.681040][ T31] #0: ffff888144fb7198 (&dev->mutex){....}-{4:4}, at: usbdev_ioctl+0x140/0x20c0 [ 455.690905][ T31] 3 locks held by kworker/u8:15/9754: [ 455.697410][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 455.712075][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 455.729078][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 455.740854][ T31] 2 locks held by syz.2.1258/11365: [ 455.750884][ T31] #0: ffffffff8f510e10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 455.761551][ T31] #1: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 455.776591][ T31] [ 455.790818][ T31] ============================================= [ 455.790818][ T31] [ 455.810558][ T31] NMI backtrace for cpu 0 [ 455.810581][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 455.810608][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.810622][ T31] Call Trace: [ 455.810631][ T31] [ 455.810641][ T31] dump_stack_lvl+0x189/0x250 [ 455.810672][ T31] ? __wake_up_klogd+0xd9/0x110 [ 455.810707][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.810734][ T31] ? __pfx__printk+0x10/0x10 [ 455.810778][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 455.810812][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 455.810839][ T31] ? _printk+0xcf/0x120 [ 455.810874][ T31] ? __pfx__printk+0x10/0x10 [ 455.810908][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.810933][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 455.810967][ T31] watchdog+0xfee/0x1030 [ 455.810990][ T31] ? watchdog+0x1de/0x1030 [ 455.811019][ T31] kthread+0x70e/0x8a0 [ 455.811054][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.811075][ T31] ? __pfx_kthread+0x10/0x10 [ 455.811109][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.811141][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.811173][ T31] ? __pfx_kthread+0x10/0x10 [ 455.811205][ T31] ret_from_fork+0x3fc/0x770 [ 455.811232][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.811262][ T31] ? __switch_to_asm+0x39/0x70 [ 455.811291][ T31] ? __switch_to_asm+0x33/0x70 [ 455.811318][ T31] ? __pfx_kthread+0x10/0x10 [ 455.811351][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.811405][ T31] [ 455.811416][ T31] Sending NMI from CPU 0 to CPUs 1: [ 455.973233][ C1] NMI backtrace for cpu 1 [ 455.973251][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 455.973274][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.973288][ C1] Workqueue: events_power_efficient gc_worker [ 455.973321][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 455.973347][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 9c 86 7c 00 48 c7 c3 58 7f a1 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 19 23 f9 10 74 11 83 e0 04 c1 e8 02 5b [ 455.973365][ C1] RSP: 0018:ffffc90000b377a0 EFLAGS: 00000806 [ 455.973380][ C1] RAX: 0000000000000000 RBX: ffff8880b8732f58 RCX: c848bbc3809e5300 [ 455.973394][ C1] RDX: 0000000000000000 RSI: ffffffff8be29d60 RDI: ffffffff8be29d20 [ 455.973408][ C1] RBP: ffffffff89a06378 R08: 0000000000000001 R09: 0000000000000000 [ 455.973420][ C1] R10: dffffc0000000000 R11: fffffbfff1f43ebf R12: 0000000000000002 [ 455.973434][ C1] R13: ffffffff8fa29cd8 R14: ffffffff8dbbfc78 R15: dffffc0000000000 [ 455.973449][ C1] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 455.973464][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.973476][ C1] CR2: 000055558cfe15c8 CR3: 0000000078842000 CR4: 00000000003526f0 [ 455.973493][ C1] Call Trace: [ 455.973502][ C1] [ 455.973516][ C1] lock_acquire+0x5f/0x360 [ 455.973541][ C1] ? gc_worker+0x308/0x1380 [ 455.973569][ C1] seqcount_lockdep_reader_access+0x10b/0x1c0 [ 455.973595][ C1] ? gc_worker+0x308/0x1380 [ 455.973622][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 455.973655][ C1] gc_worker+0x308/0x1380 [ 455.973687][ C1] ? gc_worker+0x264/0x1380 [ 455.973729][ C1] ? __pfx_gc_worker+0x10/0x10 [ 455.973758][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.973785][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 455.973807][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 455.973829][ C1] process_scheduled_works+0xae1/0x17b0 [ 455.973866][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.973897][ C1] worker_thread+0x8a0/0xda0 [ 455.973932][ C1] kthread+0x70e/0x8a0 [ 455.973960][ C1] ? __pfx_worker_thread+0x10/0x10 [ 455.973981][ C1] ? __pfx_kthread+0x10/0x10 [ 455.974008][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.974034][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.974062][ C1] ? __pfx_kthread+0x10/0x10 [ 455.974088][ C1] ret_from_fork+0x3fc/0x770 [ 455.974109][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 455.974132][ C1] ? __switch_to_asm+0x39/0x70 [ 455.974156][ C1] ? __switch_to_asm+0x33/0x70 [ 455.974180][ C1] ? __pfx_kthread+0x10/0x10 [ 455.974206][ C1] ret_from_fork_asm+0x1a/0x30 [ 455.974240][ C1] [ 455.975488][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 455.975512][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 455.975543][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.975561][ T31] Call Trace: [ 455.975572][ T31] [ 455.975583][ T31] dump_stack_lvl+0x99/0x250 [ 455.975620][ T31] ? __asan_memcpy+0x40/0x70 [ 455.975648][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.975681][ T31] ? __pfx__printk+0x10/0x10 [ 455.975730][ T31] panic+0x2db/0x790 [ 455.975766][ T31] ? __pfx_panic+0x10/0x10 [ 455.975796][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 455.975827][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 455.975865][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 455.975892][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 455.975938][ T31] watchdog+0x102d/0x1030 [ 455.975966][ T31] ? watchdog+0x1de/0x1030 [ 455.976001][ T31] kthread+0x70e/0x8a0 [ 455.976042][ T31] ? __pfx_watchdog+0x10/0x10 [ 455.976066][ T31] ? __pfx_kthread+0x10/0x10 [ 455.976105][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.976143][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.976182][ T31] ? __pfx_kthread+0x10/0x10 [ 455.976220][ T31] ret_from_fork+0x3fc/0x770 [ 455.976251][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 455.976286][ T31] ? __switch_to_asm+0x39/0x70 [ 455.976321][ T31] ? __switch_to_asm+0x33/0x70 [ 455.976355][ T31] ? __pfx_kthread+0x10/0x10 [ 455.976393][ T31] ret_from_fork_asm+0x1a/0x30 [ 455.976445][ T31] [ 456.394249][ T31] Kernel Offset: disabled [ 456.398594][ T31] Rebooting in 86400 seconds..