last executing test programs: 2m42.076398579s ago: executing program 0 (id=775): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000510000009500575b1eb02c0b35000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf177c000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r3, r3, 0x0, 0x5) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) writev(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, 0x0, &(0x7f00000009c0)=0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) socket(0xf, 0x803, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) 2m39.677887883s ago: executing program 0 (id=781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb9", 0xd7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m39.501274104s ago: executing program 0 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x200088c4}, 0x40000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c756e616d653d5e2c6e6f657874656e642c64656275671d3078303030303030303030303030303030362c6163636573733d757365722c"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffff1}}]}}, 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x90}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x40c0) 2m37.985107948s ago: executing program 0 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xb8, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x8c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1d, 0x0, @random="9599dadc644890672b0c27bde53d53c1e2e71c073f6d69e7ba"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="9e8e3a28d5a70c676b8e4e68f53866"}, {0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="526964dfa19f946796a1fa67b5f83e"}, {0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xfff8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x200088c4}, 0x40000) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffff1}}]}}, 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x90}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x40c0) 2m32.717398957s ago: executing program 0 (id=816): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f0000000040)="5cba91a4", 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000280)=0x9, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x4}) read(r4, &(0x7f0000001600)=""/233, 0xe9) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_setup(0x6110, &(0x7f0000000240)={0x0, 0x1d11, 0x1080}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3, 0x10a5, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 2m30.477739803s ago: executing program 0 (id=829): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f00000003c0)='hfsplus\x00', 0x8000, 0x0) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x9, 0x0) 2m15.407572673s ago: executing program 32 (id=829): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f00000003c0)='hfsplus\x00', 0x8000, 0x0) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x9, 0x0) 35.426617939s ago: executing program 4 (id=1644): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x1, 0x7, 0xe000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={r1, 0x2d5}, 0x8) 35.157543346s ago: executing program 4 (id=1647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb9", 0xd7}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da", 0x72}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 35.026766536s ago: executing program 4 (id=1650): r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x60, 0xdd, 0x99, 0x20, 0x5e9, 0x9, 0x73db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb6, 0x7, 0x0, 0x9, 0xbd, 0x2e}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000180)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}]}, {0x2d, 0x6, "a2430351dde8a1da0fae33c4126729090a7bd71e3eaf93e5830f0bc41a518f15b31e929935cc421ed5"}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x20000800) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff}, 0x800) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x400, 0x800, &(0x7f00000003c0)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x808404, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x2b41a842, 0x6}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6e422dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d77957abfa6e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b4ee78d3698fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d35009f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c9f6a382a9d06a219483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba36a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e63c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b66d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba61960df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088544eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647f34c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x800000007ff, {0x1, 0x0, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x8, 0xfffffffffffffff8, 0x8, 0x0, 0x20079, 0xfffffffc, 0xed40, 0x2001, 0xa000, 0x4, r6, r7, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x2000000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '}/['}}, {@msize={'msize', 0x3d, 0x7}}, {@loose}, {@debug={'debug', 0x3d, 0xe}}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@privport}], [{@audit}, {@pcr={'pcr', 0x3d, 0xd}}, {@subj_user={'subj_user', 0x3d, '\xdc'}}]}}) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r8, &(0x7f0000000300), 0x6) syz_emit_vhci(0x0, 0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81107100000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7}, 0x94) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x0, 0x4000}) r9 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)={0x0, 0x9, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x100000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffefffff0000000}, {0xffffffffffffffff, 0x0, 0x8000, 0xfffffffefffee000}, {0xffffffffffffffff, 0x0, 0x10000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x4000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0x1000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x8000, 0x4000}]}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0xc0086202, &(0x7f00000000c0)=0x3) 34.865821591s ago: executing program 4 (id=1651): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffff1}}]}}, 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x90}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x40c0) 34.727227687s ago: executing program 4 (id=1653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 34.495655708s ago: executing program 4 (id=1654): sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x200088c4}, 0x40000) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x7}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffff1}}]}}, 0x0, 0x4a, 0x0, 0x1, 0x2}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x90}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x80401}]}}}]}, 0x4c}}, 0x40c0) 5.735444169s ago: executing program 1 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acd", 0xb8}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38ef", 0xe1}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.652210786s ago: executing program 2 (id=1964): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0xfffffffc, 0x10000000}, 0xc) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8000}, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x804) 4.299254066s ago: executing program 2 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa", 0x7b}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.083442937s ago: executing program 2 (id=1971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.00489404s ago: executing program 5 (id=1973): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0xffffffffffffffff, 0x4, 0x803, 0x0, 0x100002, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x2000000000ffff, 0x3, 0xb0, 0x80000000000000, 0x6a9}, 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8b00}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20084040}, 0x20000000) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x1d) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x84, 0x2e, 0x9, 0x70bd27, 0x2000008, {0x4}, [@typed={0x4, 0x18}, @generic="d1b24f2df306c5d51d7a5b229ae0aa83eb27f05766a28ec32ac824fdfa002c44f1244f2f67617e14959c6034609a0a4d823a0148dad6f586ae528b0167ef7cca78af4298c75c3f9dc0165fe892c7c9c175092327fbd3afe42205c4c28356821604483c4f0587f1a00d"]}, 0x84}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.85437683s ago: executing program 2 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e44", 0xd}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.592066166s ago: executing program 2 (id=1978): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f0000000300)=0x8) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 3.346976789s ago: executing program 1 (id=1982): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) (fail_nth: 1) 3.205213607s ago: executing program 1 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38ef", 0xe1}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.887155591s ago: executing program 5 (id=1986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7", 0x78}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.886406129s ago: executing program 1 (id=1987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e44", 0xd}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.784547477s ago: executing program 5 (id=1990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa", 0x7b}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.656215377s ago: executing program 3 (id=1991): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32, @ANYBLOB="0b1b050000000000440012800b02070069703667726500133400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f00000002c0)='.\x00', 0x141100, 0x50) flock(r2, 0x2) 2.652916127s ago: executing program 1 (id=1992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800", 0xb3}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa", 0x7b}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b", 0xab}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.576900556s ago: executing program 5 (id=1993): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b02070069703667726500133400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) close(r3) r5 = open(&(0x7f00000002c0)='.\x00', 0x141100, 0x50) flock(r5, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r3) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) 2.522045951s ago: executing program 3 (id=1994): mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c4e17e7f7c900f0f5c000f01c466baf80cb8ce1f8588ef66bafc0cb05fee6736f0213d66baf80cb8bc54d18bef66bafc0cec360f01bf50bb25c215002000000f38025149b805000000b90a0000000f01c1", 0x51}], 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c000014}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x20000000, 0xb}, {0xb, 0x5, 0x0, 0xa, 0x6, 0x0, 0x9}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/219, 0xdb}], 0x1}, 0x40012122) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x7fff, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0x1, 0x2000000000000000, 0x80000004000000, 0x10000], 0xeeee8000, 0x2812d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff202000000003000aac14140c", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.27707746s ago: executing program 1 (id=1995): mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xd4f163e6ee09ede3, 0x4c033, 0xffffffffffffffff, 0x8000000) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c4e17e7f7c900f0f5c000f01c466baf80cb8ce1f8588ef66bafc0cb05fee6736f0213d66baf80cb8bc54d18bef66bafc0cec360f01bf50bb25c215002000000f38025149b805000000b90a0000000f01c1", 0x51}], 0x1, 0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c000014}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x2, 0x0, [{0x0, 0x84, 0x4, 0x9, 0x4, 0x20000000, 0xb}, {0xb, 0x5, 0x0, 0xa, 0x6, 0x0, 0x9}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/219, 0xdb}], 0x1}, 0x40012122) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x7fff, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0x1, 0x2000000000000000, 0x80000004000000, 0x10000], 0xeeee8000, 0x2812d1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000000), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1e, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff202000000003000aac14140c", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.204496119s ago: executing program 3 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a0901e8", 0xf5}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2", 0x71}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.941485766s ago: executing program 3 (id=1997): write$dsp(0xffffffffffffffff, &(0x7f0000000040)="5cba91a4", 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000280)=0x9, 0x0, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x4}) read(r3, &(0x7f0000001600)=""/233, 0xe9) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x6110, &(0x7f0000000240)={0x0, 0x1d11, 0x1080}, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3, 0x10a5, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 1.542498784s ago: executing program 5 (id=1998): r0 = syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001800)={{0x8, 0x3, 0x4, 0x1ff, 'syz1\x00', 0x6}, 0x3, 0x1, 0x6, 0x0, 0x2, 0x6, 'syz0\x00', &(0x7f0000000240)=['/d\xb3v/snd/pcmC#K#p\x00\xbce\xb4\xbbJ\xe0~\x1bBh\x87\'\x8c\xd88\xa7\x8c\xc11\xabgl}mR\x92\a<\xba\xde\xe6K2\xd4\x17\xff]\xe2\x92\x19&\xe6\a\x00\x00\x00\xc3\x94\xfb', '@'], 0x44}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02e2ff0004f1ffff030000000400000000000000d317b92ec3e776f33713bf5226bbba0d733003169e6fb77a9b3dc70c10f2bff4c64bf9a551694e4770b0e0711c6a2fe589cd89989be29c62c52cc6854949309360194db981ccebc9d213de801201eb52dbf8ced0099d5db4af86313e6d374558f7f0c57c308d4b0bdd78fc7f4169c949b7759cada47155b8ddf488cace51d7d8aab6c133447033c1fcfd70d7bc9c7a0bf3bbc25ca90c505ecbe1a9a220a64ada64e952da105726880d434b68d870d88045dc42e590ce19982e5fef10bea6a5", @ANYRES32=r0, @ANYBLOB="00000000000000271b055d00faffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04aaff07ab1e00002000000000000000e62b13ce000000fac5230300000000000000ef7300000082a2692eed999fae52ccfe97c70fd9c78b0a522d2203861832d8312f5a7971bb421974d90f17c6f62119892270d16b38030b57"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) getpeername$ax25(r7, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x5, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1, &(0x7f0000000480)=@raw=[@jmp={0x5, 0x0, 0x9, 0x0, 0x3, 0xfffffffffffffe88, 0x8}], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.368180575s ago: executing program 3 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7", 0x78}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x2, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 857.551425ms ago: executing program 3 (id=2000): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000011c0), 0xfffffffffffffffe) (fail_nth: 1) 523.808975ms ago: executing program 5 (id=2001): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0xa, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="160000001d00010027bd70e3fdffff2507"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f0000001c00)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2d023b824", 0x2b}], 0x1, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x20049001) read$FUSE(r1, &(0x7f0000003f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair(0x1, 0x808, 0x9, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x61, 0x1], 0xa7b}, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi4\x00', 0x200040, 0x0) prlimit64(r3, 0xa, &(0x7f0000000040)={0x9, 0x9}, &(0x7f0000000080)) recvfrom$netrom(r4, &(0x7f0000000340)=""/193, 0xc1, 0x0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/39, 0x27}], 0x1}, 0x2) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=2002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x24000040) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa", 0x7b}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}, {&(0x7f0000000cc0)="a659d6cd13b743c3883fa66b26998868e129449c58fe04d445f9c63392ec1473c4e34a11a18e0fa2c3ff1fefe4200a23a2befe7c334b021bbad3522f8f3f36083d885cb29fa1829ff0caa3eb06fcfa1cc00d19092f9d6d93590fd4671bce11ec7b2f3912c5fe0804a2647a4de1f6d804e2da914136a7a4b169f152ec6af9204c3465d58e410029e4f28574ebfef1ac2fc1d17d5133793c9e9fbe4889c2a1427cb84332f6d4dad0f47d084b27c6c5afe46d605c7c33fa61fee2bdf78c16167904fab9a81bbb8a0ee73a56e9a67549a2701def6cc0224db8d147e08f15ec7d6f38efb1ad12", 0xe4}], 0x3, 0x0, 0x0, 0x1}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b", 0x44}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ault+0xaf/0x130 [ 303.921250][ T8278] ? __might_fault+0xaf/0x130 [ 303.921276][ T8278] ? __pfx_do_msgsnd+0x10/0x10 [ 303.921300][ T8278] ? __might_fault+0xaf/0x130 [ 303.921326][ T8278] ? __x64_sys_msgsnd+0xee/0x120 [ 303.921352][ T8278] do_syscall_64+0xe2/0xf80 [ 303.921373][ T8278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.921390][ T8278] ? clear_bhb_loop+0x60/0xb0 [ 303.921410][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.921426][ T8278] RIP: 0033:0x7f8704f8aeb9 [ 303.921442][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.921457][ T8278] RSP: 002b:00007f87031de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 303.921477][ T8278] RAX: ffffffffffffffda RBX: 00007f8705205fa0 RCX: 00007f8704f8aeb9 [ 303.921490][ T8278] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000000 [ 303.921501][ T8278] RBP: 00007f87031de090 R08: 0000000000000000 R09: 0000000000000000 [ 303.921513][ T8278] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 303.921525][ T8278] R13: 00007f8705206038 R14: 00007f8705205fa0 R15: 00007ffc4498d418 [ 303.921552][ T8278] [ 305.316695][ T8295] CIFS mount error: No usable UNC path provided in device string! [ 305.316695][ T8295] [ 305.316709][ T8295] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 306.428047][ T8311] netlink: 496 bytes leftover after parsing attributes in process `syz.1.751'. [ 306.756570][ T5804] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 306.908892][ T5804] usb 1-1: Using ep0 maxpacket: 32 [ 306.922925][ T5804] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 306.922951][ T5804] usb 1-1: config 0 has no interface number 0 [ 306.922981][ T5804] usb 1-1: config 0 interface 182 has no altsetting 0 [ 306.952341][ T8329] openvswitch: netlink: Duplicate key (type 21). [ 306.952583][ T5804] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 306.952610][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.952629][ T5804] usb 1-1: Product: syz [ 306.952643][ T5804] usb 1-1: Manufacturer: syz [ 306.952657][ T5804] usb 1-1: SerialNumber: syz [ 306.956229][ T5804] usb 1-1: config 0 descriptor?? [ 307.018584][ T5804] hub 1-1:0.182: bad descriptor, ignoring hub [ 307.018623][ T5804] hub 1-1:0.182: probe with driver hub failed with error -5 [ 308.026105][ T5804] kaweth 1-1:0.182: Firmware present in device. [ 308.028820][ T5804] kaweth 1-1:0.182: Statistics collection: 0 [ 308.028839][ T5804] kaweth 1-1:0.182: Multicast filter limit: 0 [ 308.028854][ T5804] kaweth 1-1:0.182: MTU: 0 [ 308.028867][ T5804] kaweth 1-1:0.182: Read MAC address 00:00:00:00:00:00 [ 308.650211][ T5804] kaweth 1-1:0.182: Error setting receive filter [ 308.650482][ T5804] kaweth 1-1:0.182: probe with driver kaweth failed with error -5 [ 308.677341][ T5804] usb 1-1: USB disconnect, device number 20 [ 308.896535][ T5796] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 308.999861][ T37] audit: type=1326 audit(1770476121.201:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.002804][ T37] audit: type=1326 audit(1770476121.201:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.002851][ T37] audit: type=1326 audit(1770476121.201:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.003546][ T37] audit: type=1326 audit(1770476121.201:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.003588][ T37] audit: type=1326 audit(1770476121.201:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.003626][ T37] audit: type=1326 audit(1770476121.201:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.004003][ T37] audit: type=1326 audit(1770476121.201:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.004446][ T37] audit: type=1326 audit(1770476121.201:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.005173][ T37] audit: type=1326 audit(1770476121.201:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55cdbaaeb9 code=0x7ffc0000 [ 309.005533][ T37] audit: type=1326 audit(1770476121.201:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8354 comm="syz.3.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55cdb6b78e code=0x7ffc0000 [ 309.026513][ T5796] usb 2-1: device descriptor read/64, error -71 [ 309.266549][ T5796] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 310.506455][ T5796] usb 2-1: device descriptor read/64, error -71 [ 310.706120][ T5796] usb usb2-port1: attempt power cycle [ 312.486679][ T8386] CIFS mount error: No usable UNC path provided in device string! [ 312.486679][ T8386] [ 312.486694][ T8386] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 313.497139][ T8396] FAULT_INJECTION: forcing a failure. [ 313.497139][ T8396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.497171][ T8396] CPU: 1 UID: 0 PID: 8396 Comm: syz.4.789 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 313.497192][ T8396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 313.497203][ T8396] Call Trace: [ 313.497209][ T8396] [ 313.497217][ T8396] dump_stack_lvl+0xe8/0x150 [ 313.497245][ T8396] should_fail_ex+0x46b/0x600 [ 313.497270][ T8396] _copy_from_user+0x2d/0xb0 [ 313.497293][ T8396] ___sys_sendmsg+0x1c6/0x360 [ 313.497312][ T8396] ? __lock_acquire+0x6b5/0x2cf0 [ 313.497335][ T8396] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.497385][ T8396] ? __fget_files+0x2a/0x420 [ 313.497402][ T8396] ? __fget_files+0x3a6/0x420 [ 313.497427][ T8396] __x64_sys_sendmsg+0x1c3/0x2a0 [ 313.497448][ T8396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 313.497475][ T8396] ? __pfx_ksys_write+0x10/0x10 [ 313.497506][ T8396] do_syscall_64+0xe2/0xf80 [ 313.497528][ T8396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.497544][ T8396] ? trace_irq_disable+0x37/0x100 [ 313.497566][ T8396] ? clear_bhb_loop+0x60/0xb0 [ 313.497587][ T8396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.497604][ T8396] RIP: 0033:0x7faf4236aeb9 [ 313.497621][ T8396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.497637][ T8396] RSP: 002b:00007faf405c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.497656][ T8396] RAX: ffffffffffffffda RBX: 00007faf425e5fa0 RCX: 00007faf4236aeb9 [ 313.497670][ T8396] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 313.497682][ T8396] RBP: 00007faf405c6090 R08: 0000000000000000 R09: 0000000000000000 [ 313.497694][ T8396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.497705][ T8396] R13: 00007faf425e6038 R14: 00007faf425e5fa0 R15: 00007ffe229250f8 [ 313.497735][ T8396] [ 313.576446][ T5804] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 313.856464][ T5804] usb 4-1: Using ep0 maxpacket: 32 [ 313.871800][ T5804] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 313.871829][ T5804] usb 4-1: config 0 has no interface number 0 [ 313.871866][ T5804] usb 4-1: config 0 interface 182 has no altsetting 0 [ 313.881298][ T5804] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 313.881329][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.881349][ T5804] usb 4-1: Product: syz [ 313.881363][ T5804] usb 4-1: Manufacturer: syz [ 313.881376][ T5804] usb 4-1: SerialNumber: syz [ 313.933790][ T5804] usb 4-1: config 0 descriptor?? [ 313.947314][ T5804] hub 4-1:0.182: bad descriptor, ignoring hub [ 313.947360][ T5804] hub 4-1:0.182: probe with driver hub failed with error -5 [ 314.162791][ T5804] kaweth 4-1:0.182: Firmware present in device. [ 314.351426][ T5804] kaweth 4-1:0.182: Statistics collection: 0 [ 314.351454][ T5804] kaweth 4-1:0.182: Multicast filter limit: 0 [ 314.351469][ T5804] kaweth 4-1:0.182: MTU: 0 [ 314.351483][ T5804] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 315.486813][ T8426] CIFS mount error: No usable UNC path provided in device string! [ 315.486813][ T8426] [ 315.486827][ T8426] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 316.332408][ T5804] kaweth 4-1:0.182: Error setting receive filter [ 316.332695][ T5804] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 316.397275][ T5804] usb 4-1: USB disconnect, device number 20 [ 316.986022][ T8419] CIFS mount error: No usable UNC path provided in device string! [ 316.986022][ T8419] [ 316.986036][ T8419] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 317.153154][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.153196][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.629718][ T8460] FAULT_INJECTION: forcing a failure. [ 318.629718][ T8460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.629751][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.4.813 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 318.629772][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 318.629783][ T8460] Call Trace: [ 318.629790][ T8460] [ 318.629832][ T8460] dump_stack_lvl+0xe8/0x150 [ 318.629861][ T8460] should_fail_ex+0x46b/0x600 [ 318.629886][ T8460] _copy_from_user+0x2d/0xb0 [ 318.629911][ T8460] __sys_bpf+0x229/0x920 [ 318.629935][ T8460] ? __pfx___sys_bpf+0x10/0x10 [ 318.629954][ T8460] ? rt_mutex_slowunlock+0x1cb/0x300 [ 318.629990][ T8460] ? ksys_write+0x248/0x270 [ 318.630013][ T8460] ? __pfx_ksys_write+0x10/0x10 [ 318.630040][ T8460] __x64_sys_bpf+0x7c/0x90 [ 318.630062][ T8460] do_syscall_64+0xe2/0xf80 [ 318.630084][ T8460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.630102][ T8460] ? trace_irq_disable+0x37/0x100 [ 318.630123][ T8460] ? clear_bhb_loop+0x60/0xb0 [ 318.630145][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.630162][ T8460] RIP: 0033:0x7faf4236aeb9 [ 318.630179][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.630195][ T8460] RSP: 002b:00007faf405c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.630215][ T8460] RAX: ffffffffffffffda RBX: 00007faf425e5fa0 RCX: 00007faf4236aeb9 [ 318.630229][ T8460] RDX: 0000000000000020 RSI: 0000200000004f40 RDI: 0000000000000009 [ 318.630240][ T8460] RBP: 00007faf405c6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.630251][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.630262][ T8460] R13: 00007faf425e6038 R14: 00007faf425e5fa0 R15: 00007ffe229250f8 [ 318.630291][ T8460] [ 319.504825][ T8481] netlink: 64 bytes leftover after parsing attributes in process `syz.2.803'. [ 321.646456][ T5948] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 321.796553][ T6987] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 321.823816][ T5948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 321.824361][ T5948] usb 2-1: not running at top speed; connect to a high speed hub [ 321.825592][ T5948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.825615][ T5948] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.828232][ T5948] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.828257][ T5948] usb 2-1: New USB device strings: Mfr=248, Product=1, SerialNumber=3 [ 321.828276][ T5948] usb 2-1: Product: syz [ 321.828290][ T5948] usb 2-1: Manufacturer: syz [ 321.828304][ T5948] usb 2-1: SerialNumber: syz [ 321.946649][ T6987] usb 4-1: Using ep0 maxpacket: 32 [ 321.962685][ T6987] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 321.962713][ T6987] usb 4-1: config 0 has no interface number 0 [ 321.962743][ T6987] usb 4-1: config 0 interface 182 has no altsetting 0 [ 321.965468][ T6987] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 321.965495][ T6987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.965514][ T6987] usb 4-1: Product: syz [ 321.965527][ T6987] usb 4-1: Manufacturer: syz [ 321.965540][ T6987] usb 4-1: SerialNumber: syz [ 321.972658][ T6987] usb 4-1: config 0 descriptor?? [ 321.980078][ T6987] hub 4-1:0.182: bad descriptor, ignoring hub [ 321.980113][ T6987] hub 4-1:0.182: probe with driver hub failed with error -5 [ 322.203424][ T6987] kaweth 4-1:0.182: Firmware present in device. [ 322.382298][ T6987] kaweth 4-1:0.182: Statistics collection: 0 [ 322.382320][ T6987] kaweth 4-1:0.182: Multicast filter limit: 0 [ 322.382334][ T6987] kaweth 4-1:0.182: MTU: 0 [ 322.382347][ T6987] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 322.384807][ T5948] usb 2-1: USB disconnect, device number 22 [ 322.488401][ T6698] udevd[6698]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.970232][ T8547] snd_aloop snd_aloop.0: control 3:4:511:syz1:6 is already present [ 323.242368][ T6987] kaweth 4-1:0.182: Error setting receive filter [ 323.242636][ T6987] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 324.089661][ T6987] usb 4-1: USB disconnect, device number 21 [ 324.712586][ T8564] netlink: 64 bytes leftover after parsing attributes in process `syz.3.860'. [ 325.469028][ T8572] FAULT_INJECTION: forcing a failure. [ 325.469028][ T8572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.469057][ T8572] CPU: 1 UID: 0 PID: 8572 Comm: syz.4.862 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 325.469069][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 325.469076][ T8572] Call Trace: [ 325.469081][ T8572] [ 325.469085][ T8572] dump_stack_lvl+0xe8/0x150 [ 325.469105][ T8572] should_fail_ex+0x46b/0x600 [ 325.469120][ T8572] _copy_to_user+0x31/0xb0 [ 325.469136][ T8572] simple_read_from_buffer+0xe1/0x170 [ 325.469153][ T8572] proc_fail_nth_read+0x1be/0x230 [ 325.469168][ T8572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.469183][ T8572] ? rw_verify_area+0x2ac/0x4e0 [ 325.469195][ T8572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 325.469208][ T8572] vfs_read+0x212/0xa70 [ 325.469249][ T8572] ? __pfx_vfs_read+0x10/0x10 [ 325.469262][ T8572] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 325.469277][ T8572] ? lockdep_hardirqs_on+0x7a/0x110 [ 325.469291][ T8572] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 325.469305][ T8572] ? mutex_lock_nested+0x152/0x1d0 [ 325.469315][ T8572] ? fdget_pos+0x252/0x320 [ 325.469329][ T8572] ksys_read+0x156/0x270 [ 325.469345][ T8572] ? __pfx_ksys_read+0x10/0x10 [ 325.469364][ T8572] do_syscall_64+0xe2/0xf80 [ 325.469378][ T8572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.469388][ T8572] ? trace_irq_disable+0x37/0x100 [ 325.469403][ T8572] ? clear_bhb_loop+0x60/0xb0 [ 325.469422][ T8572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.469438][ T8572] RIP: 0033:0x7faf4232b78e [ 325.469454][ T8572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.469469][ T8572] RSP: 002b:00007faf405c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.469488][ T8572] RAX: ffffffffffffffda RBX: 00007faf405c66c0 RCX: 00007faf4232b78e [ 325.469501][ T8572] RDX: 000000000000000f RSI: 00007faf405c60a0 RDI: 0000000000000008 [ 325.469512][ T8572] RBP: 00007faf405c6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.469523][ T8572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.469533][ T8572] R13: 00007faf425e6038 R14: 00007faf425e5fa0 R15: 00007ffe229250f8 [ 325.469561][ T8572] [ 326.366550][ T5882] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 326.516632][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 326.522677][ T5882] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 326.522704][ T5882] usb 2-1: config 0 has no interface number 0 [ 326.522756][ T5882] usb 2-1: config 0 interface 182 has no altsetting 0 [ 326.552930][ T5882] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 326.552960][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.552980][ T5882] usb 2-1: Product: syz [ 326.552993][ T5882] usb 2-1: Manufacturer: syz [ 326.553006][ T5882] usb 2-1: SerialNumber: syz [ 326.600593][ T5882] usb 2-1: config 0 descriptor?? [ 326.614072][ T5882] hub 2-1:0.182: bad descriptor, ignoring hub [ 326.614110][ T5882] hub 2-1:0.182: probe with driver hub failed with error -5 [ 326.829584][ T5882] kaweth 2-1:0.182: Firmware present in device. [ 327.014917][ T5882] kaweth 2-1:0.182: Statistics collection: 0 [ 327.014931][ T5882] kaweth 2-1:0.182: Multicast filter limit: 0 [ 327.014940][ T5882] kaweth 2-1:0.182: MTU: 0 [ 327.014946][ T5882] kaweth 2-1:0.182: Read MAC address 00:00:00:00:00:00 [ 327.266471][ T5785] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 327.416455][ T5785] usb 5-1: Using ep0 maxpacket: 32 [ 327.421003][ T5785] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 327.421030][ T5785] usb 5-1: config 2 has no interface number 0 [ 327.421929][ T5785] usb 5-1: config 2 interface 88 has no altsetting 0 [ 327.455288][ T5785] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 327.455318][ T5785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.455567][ T5785] usb 5-1: Product: syz [ 327.455582][ T5785] usb 5-1: Manufacturer: syz [ 327.455597][ T5785] usb 5-1: SerialNumber: syz [ 327.648141][ T5882] kaweth 2-1:0.182: Error setting receive filter [ 327.648860][ T5882] kaweth 2-1:0.182: probe with driver kaweth failed with error -5 [ 327.698784][ T5882] usb 2-1: USB disconnect, device number 23 [ 328.155498][ T5785] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 328.155830][ T5785] asix 5-1:2.88: probe with driver asix failed with error -71 [ 328.186549][ T5785] usb 5-1: USB disconnect, device number 14 [ 328.546480][ T5948] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 328.696521][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 328.704516][ T5948] usb 2-1: config 0 has an invalid descriptor of length 196, skipping remainder of the config [ 328.704573][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.704599][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 328.704625][ T5948] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 328.704649][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.706006][ T5948] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.706032][ T5948] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 328.706051][ T5948] usb 2-1: Manufacturer: syz [ 328.715671][ T5948] usb 2-1: config 0 descriptor?? [ 329.056564][ T5948] rc_core: IR keymap rc-hauppauge not found [ 329.056585][ T5948] Registered IR keymap rc-empty [ 329.057005][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.085268][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.097906][ T5948] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 329.103956][ T5948] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 329.122645][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.138455][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.159914][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.179389][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.198835][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.216801][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.236802][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.257666][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.276875][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.296859][ T5948] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 329.350485][ T5948] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 329.350874][ T5948] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 329.411675][ T5948] usb 2-1: USB disconnect, device number 24 [ 329.966490][ T11] block nbd0: Possible stuck request ffff888024e6e000: control (read@0,1024B). Runtime 180 seconds [ 329.966531][ T11] block nbd0: Possible stuck request ffff888024e6e1c0: control (read@1024,1024B). Runtime 180 seconds [ 329.966556][ T11] block nbd0: Possible stuck request ffff888024e6e380: control (read@2048,1024B). Runtime 180 seconds [ 329.966581][ T11] block nbd0: Possible stuck request ffff888024e6e540: control (read@3072,1024B). Runtime 180 seconds [ 330.339098][ T8689] netlink: 'syz.2.912': attribute type 8 has an invalid length. [ 330.339120][ T8689] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.912'. [ 330.366506][ T5948] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 331.746486][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 331.748908][ T5948] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 331.748936][ T5948] usb 4-1: config 0 has no interface number 0 [ 331.748967][ T5948] usb 4-1: config 0 interface 182 has no altsetting 0 [ 331.751737][ T5948] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 331.751764][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.751783][ T5948] usb 4-1: Product: syz [ 331.751798][ T5948] usb 4-1: Manufacturer: syz [ 331.751812][ T5948] usb 4-1: SerialNumber: syz [ 331.826909][ T5948] usb 4-1: config 0 descriptor?? [ 331.829962][ T5948] hub 4-1:0.182: bad descriptor, ignoring hub [ 331.829998][ T5948] hub 4-1:0.182: probe with driver hub failed with error -5 [ 332.061461][ T5948] kaweth 4-1:0.182: Firmware present in device. [ 332.262385][ T5948] kaweth 4-1:0.182: Statistics collection: 0 [ 332.262409][ T5948] kaweth 4-1:0.182: Multicast filter limit: 0 [ 332.262424][ T5948] kaweth 4-1:0.182: MTU: 0 [ 332.262437][ T5948] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 332.902742][ T5948] kaweth 4-1:0.182: Error setting receive filter [ 332.903015][ T5948] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 332.962596][ T5948] usb 4-1: USB disconnect, device number 22 [ 332.966518][ T5785] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 333.117820][ T5785] usb 3-1: Using ep0 maxpacket: 32 [ 333.119914][ T5785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 333.119952][ T5785] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 333.119974][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.125031][ T5785] usb 3-1: config 0 descriptor?? [ 333.426510][ T6987] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 333.586613][ T6987] usb 2-1: Using ep0 maxpacket: 16 [ 333.591699][ T6987] usb 2-1: config 0 has an invalid interface number: 60 but max is 0 [ 333.591727][ T6987] usb 2-1: config 0 has no interface number 0 [ 333.594257][ T6987] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 333.594284][ T6987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.594372][ T6987] usb 2-1: Product: syz [ 333.594387][ T6987] usb 2-1: Manufacturer: syz [ 333.594402][ T6987] usb 2-1: SerialNumber: syz [ 333.613409][ T6987] usb 2-1: config 0 descriptor?? [ 333.672340][ T6987] gspca_main: spca500-2.14.0 probing 046d:0900 [ 333.741949][ T5785] hid-led 0003:1D34:0004.0005: probe with driver hid-led failed with error -71 [ 333.766736][ T5785] usb 3-1: USB disconnect, device number 16 [ 333.842959][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 333.842981][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 333.843005][ T8770] netlink: 'syz.3.951': attribute type 18 has an invalid length. [ 333.843017][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 335.206511][ T6987] gspca_spca500: reg write: error -71 [ 335.207270][ T6987] gspca_spca500: reg write: error -71 [ 335.209230][ T6987] gspca_spca500: reg write: error -71 [ 335.210659][ T6987] gspca_spca500: reg write: error -71 [ 335.213829][ T6987] gspca_spca500: reg write: error -71 [ 335.214217][ T6987] gspca_spca500: reg write: error -71 [ 335.214760][ T6987] gspca_spca500: reg write: error -71 [ 335.216457][ T6987] gspca_spca500: reg write: error -71 [ 335.223548][ T6987] gspca_spca500: reg write: error -71 [ 335.223931][ T6987] gspca_spca500: reg write: error -71 [ 335.233360][ T6987] gspca_spca500: reg write: error -71 [ 335.233741][ T6987] gspca_spca500: reg write: error -71 [ 335.234113][ T6987] gspca_spca500: reg write: error -71 [ 335.234536][ T6987] gspca_spca500: reg write: error -71 [ 335.274613][ T6987] usb 2-1: USB disconnect, device number 25 [ 335.436460][ T5804] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 335.632434][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 335.632463][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.632488][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.632512][ T5804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 335.632533][ T5804] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 335.634827][ T5804] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 335.634854][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.634873][ T5804] usb 4-1: Product: syz [ 335.634886][ T5804] usb 4-1: Manufacturer: syz [ 335.634901][ T5804] usb 4-1: SerialNumber: syz [ 335.730957][ T5804] usb 4-1: config 0 descriptor?? [ 335.757698][ T5804] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 336.036530][ T5889] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 336.170628][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 336.187073][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 336.191112][ T5889] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 336.191137][ T5889] usb 3-1: config 0 has no interface number 0 [ 336.191168][ T5889] usb 3-1: config 0 interface 182 has no altsetting 0 [ 336.192283][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 336.199017][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 336.204896][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 336.208123][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.239064][ T5889] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 336.239092][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.239111][ T5889] usb 3-1: Product: syz [ 336.239124][ T5889] usb 3-1: Manufacturer: syz [ 336.239137][ T5889] usb 3-1: SerialNumber: syz [ 336.251478][ T5889] usb 3-1: config 0 descriptor?? [ 336.260027][ T5889] hub 3-1:0.182: bad descriptor, ignoring hub [ 336.260062][ T5889] hub 3-1:0.182: probe with driver hub failed with error -5 [ 336.447846][ T809] usb 4-1: USB disconnect, device number 23 [ 336.515023][ T5889] kaweth 3-1:0.182: Firmware present in device. [ 336.668653][ T5889] kaweth 3-1:0.182: Statistics collection: 0 [ 336.668675][ T5889] kaweth 3-1:0.182: Multicast filter limit: 0 [ 336.668691][ T5889] kaweth 3-1:0.182: MTU: 0 [ 336.668742][ T5889] kaweth 3-1:0.182: Read MAC address 00:00:00:00:00:00 [ 337.296726][ T5889] kaweth 3-1:0.182: kaweth interface created at eth1 [ 337.544823][ T8793] chnl_net:caif_netlink_parms(): no params data found [ 337.587419][ T5804] usb 3-1: USB disconnect, device number 17 [ 337.826455][ T931] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 337.976427][ T931] usb 4-1: Using ep0 maxpacket: 16 [ 337.984339][ T931] usb 4-1: config 0 has an invalid interface number: 60 but max is 0 [ 337.984366][ T931] usb 4-1: config 0 has no interface number 0 [ 338.011470][ T931] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 338.011503][ T931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.011524][ T931] usb 4-1: Product: syz [ 338.011538][ T931] usb 4-1: Manufacturer: syz [ 338.011552][ T931] usb 4-1: SerialNumber: syz [ 338.071309][ T931] usb 4-1: config 0 descriptor?? [ 338.107551][ T931] gspca_main: spca500-2.14.0 probing 046d:0900 [ 338.253860][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.258013][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.258236][ T8793] bridge_slave_0: entered allmulticast mode [ 338.260737][ T8793] bridge_slave_0: entered promiscuous mode [ 338.294424][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.294544][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.294740][ T8793] bridge_slave_1: entered allmulticast mode [ 338.313703][ T8793] bridge_slave_1: entered promiscuous mode [ 338.326576][ T5806] Bluetooth: hci5: command tx timeout [ 339.632783][ T931] gspca_spca500: reg write: error -71 [ 339.633531][ T931] gspca_spca500: reg write: error -71 [ 339.633901][ T931] gspca_spca500: reg write: error -71 [ 339.634274][ T931] gspca_spca500: reg write: error -71 [ 339.634655][ T931] gspca_spca500: reg write: error -71 [ 339.635025][ T931] gspca_spca500: reg write: error -71 [ 339.635396][ T931] gspca_spca500: reg write: error -71 [ 339.635759][ T931] gspca_spca500: reg write: error -71 [ 339.636123][ T931] gspca_spca500: reg write: error -71 [ 339.636511][ T931] gspca_spca500: reg write: error -71 [ 339.646457][ T931] gspca_spca500: reg write: error -71 [ 339.708125][ T931] gspca_spca500: reg write: error -71 [ 339.716512][ T931] gspca_spca500: reg write: error -71 [ 339.716920][ T931] gspca_spca500: reg write: error -71 [ 339.756446][ T931] usb 4-1: USB disconnect, device number 24 [ 339.882223][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.911640][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.215702][ T8793] team0: Port device team_slave_0 added [ 340.222625][ T8793] team0: Port device team_slave_1 added [ 340.250713][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 340.250735][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 340.250760][ T8875] netlink: 'syz.1.988': attribute type 18 has an invalid length. [ 340.250774][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 340.323847][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.323865][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.323890][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.369987][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.370004][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.370031][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.406441][ T5806] Bluetooth: hci5: command tx timeout [ 340.626546][ T5889] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 340.662856][ T8793] hsr_slave_0: entered promiscuous mode [ 340.669192][ T8793] hsr_slave_1: entered promiscuous mode [ 340.685694][ T8793] debugfs: 'hsr0' already exists in 'hsr' [ 340.685720][ T8793] Cannot create hsr debugfs directory [ 340.789089][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 340.789120][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.789147][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 340.789173][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 340.789195][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.799532][ T5889] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 340.799562][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.799581][ T5889] usb 2-1: Product: syz [ 340.799594][ T5889] usb 2-1: Manufacturer: syz [ 340.799608][ T5889] usb 2-1: SerialNumber: syz [ 340.838388][ T5889] usb 2-1: config 0 descriptor?? [ 340.861981][ T5889] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 341.690972][ T809] usb 2-1: USB disconnect, device number 26 [ 342.193135][ T8793] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.283063][ T8793] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.383521][ T8793] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.486467][ T5806] Bluetooth: hci5: command tx timeout [ 342.510605][ T8793] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.956447][ T5966] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 342.961645][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.029502][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.039568][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.040164][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.064911][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.073776][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.086557][ T931] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 343.106410][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 343.108492][ T5966] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 343.108516][ T5966] usb 2-1: config 0 has no interface number 0 [ 343.108554][ T5966] usb 2-1: config 0 interface 182 has no altsetting 0 [ 343.111598][ T5966] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 343.111625][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.111662][ T5966] usb 2-1: Product: syz [ 343.111676][ T5966] usb 2-1: Manufacturer: syz [ 343.111689][ T5966] usb 2-1: SerialNumber: syz [ 343.181938][ T5966] usb 2-1: config 0 descriptor?? [ 343.186134][ T5966] hub 2-1:0.182: bad descriptor, ignoring hub [ 343.186169][ T5966] hub 2-1:0.182: probe with driver hub failed with error -5 [ 343.246520][ T931] usb 3-1: Using ep0 maxpacket: 32 [ 343.261973][ T931] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 343.276514][ T931] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 343.276595][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.276617][ T931] usb 3-1: Product: syz [ 343.276638][ T931] usb 3-1: Manufacturer: syz [ 343.276652][ T931] usb 3-1: SerialNumber: syz [ 343.346968][ T931] go7007 3-1:255.0: probe with driver go7007 failed with error -12 [ 343.406190][ T5966] kaweth 2-1:0.182: Firmware present in device. [ 343.538625][ T931] usb 3-1: USB disconnect, device number 18 [ 343.590585][ T5966] kaweth 2-1:0.182: Statistics collection: 0 [ 343.590609][ T5966] kaweth 2-1:0.182: Multicast filter limit: 0 [ 343.590624][ T5966] kaweth 2-1:0.182: MTU: 0 [ 343.590637][ T5966] kaweth 2-1:0.182: Read MAC address 00:00:00:00:00:00 [ 344.070801][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.325565][ T5966] kaweth 2-1:0.182: kaweth interface created at eth1 [ 344.566432][ T5806] Bluetooth: hci5: command tx timeout [ 344.632710][ T6987] usb 2-1: USB disconnect, device number 27 [ 344.861605][ T8793] veth0_vlan: entered promiscuous mode [ 344.945598][ T8793] veth1_vlan: entered promiscuous mode [ 345.021107][ T8793] veth0_macvtap: entered promiscuous mode [ 345.151570][ T8793] veth1_macvtap: entered promiscuous mode [ 345.360180][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.398366][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.588531][ T3515] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.614764][ T3515] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.820018][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.820482][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.320839][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.320859][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.508433][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.508455][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.727699][ T9090] netlink: 'syz.3.1061': attribute type 8 has an invalid length. [ 347.727714][ T9090] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1061'. [ 350.946488][ T931] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 351.106422][ T931] usb 3-1: Using ep0 maxpacket: 32 [ 351.108357][ T931] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 351.110738][ T931] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 351.110765][ T931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.110823][ T931] usb 3-1: Product: syz [ 351.110838][ T931] usb 3-1: Manufacturer: syz [ 351.110852][ T931] usb 3-1: SerialNumber: syz [ 351.179506][ T931] go7007 3-1:255.0: probe with driver go7007 failed with error -12 [ 351.392921][ T5785] usb 3-1: USB disconnect, device number 19 [ 351.596494][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 351.746542][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 351.762658][ T5889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 351.762697][ T5889] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 351.762718][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.826637][ T5889] usb 6-1: config 0 descriptor?? [ 352.116518][ T5785] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 352.266524][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 352.270987][ T5785] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 352.271011][ T5785] usb 4-1: config 0 has no interface number 0 [ 352.271039][ T5785] usb 4-1: config 0 interface 182 has no altsetting 0 [ 352.275063][ T5785] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 352.275081][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.275092][ T5785] usb 4-1: Product: syz [ 352.275099][ T5785] usb 4-1: Manufacturer: syz [ 352.275107][ T5785] usb 4-1: SerialNumber: syz [ 352.310179][ T5785] usb 4-1: config 0 descriptor?? [ 352.372298][ T5785] hub 4-1:0.182: bad descriptor, ignoring hub [ 352.372339][ T5785] hub 4-1:0.182: probe with driver hub failed with error -5 [ 352.537934][ T5889] hid-led 0003:1D34:0004.0006: probe with driver hid-led failed with error -71 [ 352.639601][ T5785] kaweth 4-1:0.182: Firmware present in device. [ 352.640461][ T5889] usb 6-1: USB disconnect, device number 2 [ 352.770726][ T5785] kaweth 4-1:0.182: Statistics collection: 0 [ 352.770743][ T5785] kaweth 4-1:0.182: Multicast filter limit: 0 [ 352.770751][ T5785] kaweth 4-1:0.182: MTU: 0 [ 352.770758][ T5785] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 353.523063][ T5785] kaweth 4-1:0.182: Error setting receive filter [ 353.523328][ T5785] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 353.625033][ T5785] usb 4-1: USB disconnect, device number 25 [ 353.673518][ T9185] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1099'. [ 356.169648][ T9193] netlink: 'syz.5.1101': attribute type 8 has an invalid length. [ 356.169669][ T9193] netlink: 209840 bytes leftover after parsing attributes in process `syz.5.1101'. [ 357.296460][ T5948] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 357.457856][ T5948] usb 6-1: Using ep0 maxpacket: 32 [ 357.461763][ T5948] usb 6-1: config 0 has an invalid interface number: 182 but max is 0 [ 357.461790][ T5948] usb 6-1: config 0 has no interface number 0 [ 357.461825][ T5948] usb 6-1: config 0 interface 182 has no altsetting 0 [ 357.526459][ T5948] usb 6-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 357.526489][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.526508][ T5948] usb 6-1: Product: syz [ 357.526521][ T5948] usb 6-1: Manufacturer: syz [ 357.526534][ T5948] usb 6-1: SerialNumber: syz [ 357.578383][ T5948] usb 6-1: config 0 descriptor?? [ 357.584060][ T5948] hub 6-1:0.182: bad descriptor, ignoring hub [ 357.584081][ T5948] hub 6-1:0.182: probe with driver hub failed with error -5 [ 357.806379][ T5948] kaweth 6-1:0.182: Firmware present in device. [ 357.989175][ T5948] kaweth 6-1:0.182: Statistics collection: 0 [ 357.989199][ T5948] kaweth 6-1:0.182: Multicast filter limit: 0 [ 357.989214][ T5948] kaweth 6-1:0.182: MTU: 0 [ 357.989227][ T5948] kaweth 6-1:0.182: Read MAC address 00:00:00:00:00:00 [ 358.598339][ T5948] kaweth 6-1:0.182: Error setting receive filter [ 358.598600][ T5948] kaweth 6-1:0.182: probe with driver kaweth failed with error -5 [ 358.652809][ T5948] usb 6-1: USB disconnect, device number 3 [ 360.126504][ T11] block nbd0: Possible stuck request ffff888024e6e000: control (read@0,1024B). Runtime 210 seconds [ 360.126613][ T11] block nbd0: Possible stuck request ffff888024e6e1c0: control (read@1024,1024B). Runtime 210 seconds [ 360.126641][ T11] block nbd0: Possible stuck request ffff888024e6e380: control (read@2048,1024B). Runtime 210 seconds [ 360.126668][ T11] block nbd0: Possible stuck request ffff888024e6e540: control (read@3072,1024B). Runtime 210 seconds [ 361.046703][ T9271] CIFS mount error: No usable UNC path provided in device string! [ 361.046703][ T9271] [ 361.046717][ T9271] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 364.863206][ T9300] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1150'. [ 365.460697][ T5966] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 365.606985][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 365.610680][ T5966] usb 2-1: config 0 interface 0 has no altsetting 0 [ 365.610727][ T5966] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 365.610751][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.638148][ T5966] usb 2-1: config 0 descriptor?? [ 366.155200][ T9329] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1159'. [ 366.513839][ T5966] hid-led 0003:1D34:0004.0007: probe with driver hid-led failed with error -71 [ 366.561638][ T5966] usb 2-1: USB disconnect, device number 28 [ 368.076696][ T9339] CIFS mount error: No usable UNC path provided in device string! [ 368.076696][ T9339] [ 368.076710][ T9339] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 370.186692][ T9369] CIFS mount error: No usable UNC path provided in device string! [ 370.186692][ T9369] [ 370.186706][ T9369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 374.877546][ T809] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 375.037628][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 375.039895][ T809] usb 2-1: config 0 has an invalid interface number: 60 but max is 0 [ 375.039920][ T809] usb 2-1: config 0 has no interface number 0 [ 375.043876][ T809] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 375.043904][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.043923][ T809] usb 2-1: Product: syz [ 375.043938][ T809] usb 2-1: Manufacturer: syz [ 375.043953][ T809] usb 2-1: SerialNumber: syz [ 375.114809][ T809] usb 2-1: config 0 descriptor?? [ 375.146610][ T809] gspca_main: spca500-2.14.0 probing 046d:0900 [ 375.663228][ T809] gspca_spca500: reg write: error -32 [ 375.699804][ T809] gspca_spca500: reg write: error -32 [ 375.999221][ T809] gspca_spca500: reg write: error -32 [ 376.028117][ T809] gspca_spca500: reg write: error -32 [ 376.035973][ T809] gspca_spca500: reg write: error -32 [ 376.072318][ T809] gspca_spca500: reg write: error -32 [ 376.091657][ T809] gspca_spca500: reg write: error -32 [ 376.108256][ T809] gspca_spca500: reg write: error -32 [ 376.113270][ T809] gspca_spca500: reg write: error -32 [ 376.149590][ T809] gspca_spca500: reg write: error -32 [ 376.365079][ T809] gspca_spca500: reg write: error -32 [ 376.390575][ T809] gspca_spca500: reg write: error -32 [ 376.390983][ T809] gspca_spca500: reg write: error -32 [ 376.391361][ T809] gspca_spca500: reg write: error -32 [ 377.156855][ T9478] CIFS mount error: No usable UNC path provided in device string! [ 377.156855][ T9478] [ 377.156869][ T9478] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 378.086966][ T5966] usb 2-1: USB disconnect, device number 29 [ 378.577065][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.577131][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.186654][ T9495] CIFS mount error: No usable UNC path provided in device string! [ 379.186654][ T9495] [ 379.186668][ T9495] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 381.656436][ T809] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 382.024054][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 382.026426][ T809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.026463][ T809] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 382.026485][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.032128][ T809] usb 4-1: config 0 descriptor?? [ 383.135297][ T9553] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1252'. [ 383.362649][ T809] hid-led 0003:1D34:0004.0008: probe with driver hid-led failed with error -71 [ 383.379662][ T809] usb 4-1: USB disconnect, device number 26 [ 383.911844][ T9589] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1268'. [ 384.106465][ T5882] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 384.256419][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 384.258942][ T5882] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 384.258958][ T5882] usb 3-1: config 0 has no interface number 0 [ 384.258978][ T5882] usb 3-1: config 0 interface 182 has no altsetting 0 [ 384.261037][ T5882] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 384.261053][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.261063][ T5882] usb 3-1: Product: syz [ 384.261070][ T5882] usb 3-1: Manufacturer: syz [ 384.261078][ T5882] usb 3-1: SerialNumber: syz [ 384.307231][ T5882] usb 3-1: config 0 descriptor?? [ 384.310068][ T5882] hub 3-1:0.182: bad descriptor, ignoring hub [ 384.310102][ T5882] hub 3-1:0.182: probe with driver hub failed with error -5 [ 384.544416][ T5882] kaweth 3-1:0.182: Firmware present in device. [ 385.912045][ T5882] kaweth 3-1:0.182: Error reading configuration (-32), no net device created [ 385.912201][ T5882] kaweth 3-1:0.182: probe with driver kaweth failed with error -5 [ 387.009557][ T44] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 387.175855][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 387.178947][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 387.178985][ T44] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 387.179007][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.183882][ T44] usb 2-1: config 0 descriptor?? [ 387.796627][ T44] hid-led 0003:1D34:0004.0009: probe with driver hid-led failed with error -71 [ 387.817679][ T44] usb 2-1: USB disconnect, device number 30 [ 388.277095][ T5966] usb 3-1: USB disconnect, device number 20 [ 390.037237][ T9651] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1281'. [ 391.326342][ T11] block nbd0: Possible stuck request ffff888024e6e000: control (read@0,1024B). Runtime 240 seconds [ 391.326387][ T11] block nbd0: Possible stuck request ffff888024e6e1c0: control (read@1024,1024B). Runtime 240 seconds [ 391.326415][ T11] block nbd0: Possible stuck request ffff888024e6e380: control (read@2048,1024B). Runtime 240 seconds [ 391.326443][ T11] block nbd0: Possible stuck request ffff888024e6e540: control (read@3072,1024B). Runtime 240 seconds [ 391.594683][ T9663] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1300'. [ 395.096954][ T5785] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 395.246709][ T5785] usb 4-1: Using ep0 maxpacket: 32 [ 395.248945][ T5785] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.248982][ T5785] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 395.249006][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.286881][ T5785] usb 4-1: config 0 descriptor?? [ 395.729248][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 395.729272][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1325'. [ 395.729297][ T9719] netlink: 'syz.1.1325': attribute type 18 has an invalid length. [ 395.729318][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'. [ 395.905131][ T5785] hid-led 0003:1D34:0004.000A: probe with driver hid-led failed with error -71 [ 395.924054][ T5785] usb 4-1: USB disconnect, device number 27 [ 396.147872][ T9733] netlink: 'syz.5.1330': attribute type 8 has an invalid length. [ 396.147887][ T9733] netlink: 209840 bytes leftover after parsing attributes in process `syz.5.1330'. [ 396.296438][ T5966] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 396.451616][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 396.454141][ T5966] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 396.454168][ T5966] usb 3-1: config 0 has no interface number 0 [ 396.454199][ T5966] usb 3-1: config 0 interface 182 has no altsetting 0 [ 396.458423][ T5966] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 396.458450][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.458468][ T5966] usb 3-1: Product: syz [ 396.458482][ T5966] usb 3-1: Manufacturer: syz [ 396.458495][ T5966] usb 3-1: SerialNumber: syz [ 396.463579][ T5966] usb 3-1: config 0 descriptor?? [ 396.493821][ T5966] hub 3-1:0.182: bad descriptor, ignoring hub [ 396.493860][ T5966] hub 3-1:0.182: probe with driver hub failed with error -5 [ 396.731438][ T5966] kaweth 3-1:0.182: Firmware present in device. [ 396.896267][ T5966] kaweth 3-1:0.182: Error reading configuration (-32), no net device created [ 396.899318][ T5966] kaweth 3-1:0.182: probe with driver kaweth failed with error -5 [ 396.956590][ T5796] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 397.426824][ T9758] CIFS mount error: No usable UNC path provided in device string! [ 397.426824][ T9758] [ 397.426838][ T9758] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 398.434648][ T5796] usb 6-1: Using ep0 maxpacket: 16 [ 398.442586][ T5796] usb 6-1: config 0 has an invalid interface number: 60 but max is 0 [ 398.442612][ T5796] usb 6-1: config 0 has no interface number 0 [ 398.444808][ T5796] usb 6-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 398.444834][ T5796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.444853][ T5796] usb 6-1: Product: syz [ 398.444867][ T5796] usb 6-1: Manufacturer: syz [ 398.444881][ T5796] usb 6-1: SerialNumber: syz [ 398.479818][ T5796] usb 6-1: config 0 descriptor?? [ 398.502064][ T5796] gspca_main: spca500-2.14.0 probing 046d:0900 [ 398.702076][ T9769] netlink: 'syz.1.1347': attribute type 8 has an invalid length. [ 398.702090][ T9769] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1347'. [ 399.026776][ T5796] gspca_spca500: reg write: error -32 [ 399.027556][ T5796] gspca_spca500: reg write: error -32 [ 399.027939][ T5796] gspca_spca500: reg write: error -32 [ 399.028325][ T5796] gspca_spca500: reg write: error -32 [ 399.028722][ T5796] gspca_spca500: reg write: error -32 [ 399.029130][ T5796] gspca_spca500: reg write: error -32 [ 399.029532][ T5796] gspca_spca500: reg write: error -32 [ 399.029900][ T5796] gspca_spca500: reg write: error -32 [ 399.030288][ T5796] gspca_spca500: reg write: error -32 [ 399.030664][ T5796] gspca_spca500: reg write: error -32 [ 399.031046][ T5796] gspca_spca500: reg write: error -32 [ 399.031422][ T5796] gspca_spca500: reg write: error -32 [ 399.031790][ T5796] gspca_spca500: reg write: error -32 [ 399.032187][ T5796] gspca_spca500: reg write: error -32 [ 399.633413][ T5948] usb 3-1: USB disconnect, device number 21 [ 399.854967][ T5785] usb 6-1: USB disconnect, device number 4 [ 400.226684][ T5785] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 400.252356][ T9810] netlink: 'syz.3.1345': attribute type 4 has an invalid length. [ 400.386545][ T5785] usb 2-1: Using ep0 maxpacket: 32 [ 400.396424][ T5948] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 400.442470][ T5785] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 400.442504][ T5785] usb 2-1: config 0 has no interface number 0 [ 400.442567][ T5785] usb 2-1: config 0 interface 182 has no altsetting 0 [ 400.477306][ T5785] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 400.477347][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.477367][ T5785] usb 2-1: Product: syz [ 400.477381][ T5785] usb 2-1: Manufacturer: syz [ 400.477394][ T5785] usb 2-1: SerialNumber: syz [ 400.765366][ T5785] usb 2-1: config 0 descriptor?? [ 400.798280][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 400.856679][ T5785] hub 2-1:0.182: bad descriptor, ignoring hub [ 400.856811][ T5785] hub 2-1:0.182: probe with driver hub failed with error -5 [ 401.011471][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 401.011516][ T5948] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 401.011539][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.060271][ T5948] usb 3-1: config 0 descriptor?? [ 401.156488][ T5785] kaweth 2-1:0.182: Firmware present in device. [ 402.358984][ T5785] kaweth 2-1:0.182: Statistics collection: 0 [ 402.359000][ T5785] kaweth 2-1:0.182: Multicast filter limit: 0 [ 402.359010][ T5785] kaweth 2-1:0.182: MTU: 0 [ 402.359017][ T5785] kaweth 2-1:0.182: Read MAC address 00:00:00:00:00:00 [ 402.940622][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 402.941027][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 402.941578][ T5948] usbhid 3-1:0.0: can't add hid device: -71 [ 402.941686][ T5948] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 402.987278][ T5948] usb 3-1: USB disconnect, device number 22 [ 403.182841][ T5785] kaweth 2-1:0.182: Error setting receive filter [ 403.183099][ T5785] kaweth 2-1:0.182: probe with driver kaweth failed with error -5 [ 403.228021][ T5785] usb 2-1: USB disconnect, device number 31 [ 403.461553][ T9829] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1374'. [ 404.617188][ T9849] netlink: 'syz.3.1384': attribute type 8 has an invalid length. [ 404.617210][ T9849] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1384'. [ 404.776412][ T44] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 404.927420][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 404.931022][ T44] usb 3-1: config 0 has an invalid interface number: 60 but max is 0 [ 404.931135][ T44] usb 3-1: config 0 has no interface number 0 [ 404.933899][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 404.933926][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.933945][ T44] usb 3-1: Product: syz [ 404.933960][ T44] usb 3-1: Manufacturer: syz [ 404.933973][ T44] usb 3-1: SerialNumber: syz [ 405.013118][ T44] usb 3-1: config 0 descriptor?? [ 405.026244][ T44] gspca_main: spca500-2.14.0 probing 046d:0900 [ 405.249124][ T9868] netlink: 'syz.3.1392': attribute type 8 has an invalid length. [ 405.249145][ T9868] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1392'. [ 405.452778][ T9873] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1394'. [ 405.537196][ T44] gspca_spca500: reg write: error -32 [ 405.538021][ T44] gspca_spca500: reg write: error -32 [ 405.538479][ T44] gspca_spca500: reg write: error -32 [ 405.542006][ T44] gspca_spca500: reg write: error -32 [ 405.542385][ T44] gspca_spca500: reg write: error -32 [ 405.542757][ T44] gspca_spca500: reg write: error -32 [ 405.543171][ T44] gspca_spca500: reg write: error -32 [ 405.544047][ T44] gspca_spca500: reg write: error -32 [ 405.576555][ T44] gspca_spca500: reg write: error -32 [ 405.586752][ T44] gspca_spca500: reg write: error -32 [ 405.626464][ T44] gspca_spca500: reg write: error -32 [ 405.639206][ T44] gspca_spca500: reg write: error -32 [ 405.644893][ T44] gspca_spca500: reg write: error -32 [ 405.659854][ T44] gspca_spca500: reg write: error -32 [ 405.710979][ T9876] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1395'. [ 407.689711][ T5948] usb 3-1: USB disconnect, device number 23 [ 408.299435][ T9920] FAULT_INJECTION: forcing a failure. [ 408.299435][ T9920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.299480][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.5.1415 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.299502][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 408.299517][ T9920] Call Trace: [ 408.299524][ T9920] [ 408.299536][ T9920] dump_stack_lvl+0xe8/0x150 [ 408.299565][ T9920] should_fail_ex+0x46b/0x600 [ 408.299590][ T9920] _copy_from_user+0x2d/0xb0 [ 408.299614][ T9920] alg_setkey_by_key_serial+0x116/0x5c0 [ 408.299641][ T9920] ? __local_bh_enable+0x1e1/0x2f0 [ 408.299662][ T9920] ? __pfx_alg_setkey_by_key_serial+0x10/0x10 [ 408.299686][ T9920] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 408.299704][ T9920] ? lockdep_hardirqs_on+0x7a/0x110 [ 408.299731][ T9920] alg_setsockopt+0x284/0x4a0 [ 408.299755][ T9920] ? __pfx_alg_setsockopt+0x10/0x10 [ 408.299779][ T9920] do_sock_setsockopt+0x17c/0x1b0 [ 408.299802][ T9920] __x64_sys_setsockopt+0x143/0x1b0 [ 408.299826][ T9920] do_syscall_64+0xe2/0xf80 [ 408.299847][ T9920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.299865][ T9920] ? trace_irq_disable+0x37/0x100 [ 408.299886][ T9920] ? clear_bhb_loop+0x60/0xb0 [ 408.299908][ T9920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.299925][ T9920] RIP: 0033:0x7f710d56aeb9 [ 408.299942][ T9920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.299958][ T9920] RSP: 002b:00007f710b7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.299978][ T9920] RAX: ffffffffffffffda RBX: 00007f710d7e5fa0 RCX: 00007f710d56aeb9 [ 408.299991][ T9920] RDX: 0000000000000007 RSI: 0000000000000117 RDI: 0000000000000006 [ 408.300003][ T9920] RBP: 00007f710b7c6090 R08: 0000000000000004 R09: 0000000000000000 [ 408.300014][ T9920] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 408.300026][ T9920] R13: 00007f710d7e6038 R14: 00007f710d7e5fa0 R15: 00007ffdbfb9ce88 [ 408.300057][ T9920] [ 408.621400][ T9928] netlink: 'syz.1.1419': attribute type 8 has an invalid length. [ 408.621414][ T9928] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1419'. [ 409.333161][ T9966] FAULT_INJECTION: forcing a failure. [ 409.333161][ T9966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.333194][ T9966] CPU: 0 UID: 0 PID: 9966 Comm: syz.2.1432 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 409.333222][ T9966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 409.333233][ T9966] Call Trace: [ 409.333239][ T9966] [ 409.333247][ T9966] dump_stack_lvl+0xe8/0x150 [ 409.333274][ T9966] should_fail_ex+0x46b/0x600 [ 409.333298][ T9966] _copy_from_user+0x2d/0xb0 [ 409.333321][ T9966] ___sys_sendmsg+0x1c6/0x360 [ 409.333340][ T9966] ? __lock_acquire+0x6b5/0x2cf0 [ 409.333364][ T9966] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.333415][ T9966] ? __fget_files+0x2a/0x420 [ 409.333431][ T9966] ? __fget_files+0x3a6/0x420 [ 409.333455][ T9966] __x64_sys_sendmsg+0x1c3/0x2a0 [ 409.333475][ T9966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.333501][ T9966] ? __pfx_ksys_write+0x10/0x10 [ 409.333533][ T9966] do_syscall_64+0xe2/0xf80 [ 409.333554][ T9966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.333571][ T9966] ? trace_irq_disable+0x37/0x100 [ 409.333590][ T9966] ? clear_bhb_loop+0x60/0xb0 [ 409.333611][ T9966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.333627][ T9966] RIP: 0033:0x7f8704f8aeb9 [ 409.333644][ T9966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.333660][ T9966] RSP: 002b:00007f870319c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.333680][ T9966] RAX: ffffffffffffffda RBX: 00007f8705206180 RCX: 00007f8704f8aeb9 [ 409.333693][ T9966] RDX: 00000000040000c0 RSI: 0000200000000240 RDI: 0000000000000005 [ 409.333705][ T9966] RBP: 00007f870319c090 R08: 0000000000000000 R09: 0000000000000000 [ 409.333716][ T9966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.333727][ T9966] R13: 00007f8705206218 R14: 00007f8705206180 R15: 00007ffc4498d418 [ 409.333757][ T9966] [ 410.569064][T10010] netlink: 'syz.3.1455': attribute type 8 has an invalid length. [ 410.569084][T10010] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.1455'. [ 411.056410][ T5796] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 411.236439][ T5796] usb 3-1: Using ep0 maxpacket: 32 [ 411.238673][ T5796] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 411.238697][ T5796] usb 3-1: config 0 has no interface number 0 [ 411.238752][ T5796] usb 3-1: config 0 interface 182 has no altsetting 0 [ 411.242180][ T5796] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 411.242206][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.242225][ T5796] usb 3-1: Product: syz [ 411.242239][ T5796] usb 3-1: Manufacturer: syz [ 411.242253][ T5796] usb 3-1: SerialNumber: syz [ 411.285336][ T5796] usb 3-1: config 0 descriptor?? [ 411.294241][ T5796] hub 3-1:0.182: bad descriptor, ignoring hub [ 411.294278][ T5796] hub 3-1:0.182: probe with driver hub failed with error -5 [ 411.541377][ T5796] kaweth 3-1:0.182: Firmware present in device. [ 411.694026][ T5796] kaweth 3-1:0.182: Statistics collection: 0 [ 411.694049][ T5796] kaweth 3-1:0.182: Multicast filter limit: 0 [ 411.694063][ T5796] kaweth 3-1:0.182: MTU: 0 [ 411.694077][ T5796] kaweth 3-1:0.182: Read MAC address 00:00:00:00:00:00 [ 412.323940][ T5796] kaweth 3-1:0.182: kaweth interface created at eth1 [ 412.577533][T10040] CIFS mount error: No usable UNC path provided in device string! [ 412.577533][T10040] [ 412.577547][T10040] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 412.657055][ T5796] usb 3-1: USB disconnect, device number 24 [ 412.838142][T10081] FAULT_INJECTION: forcing a failure. [ 412.838142][T10081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.838164][T10081] CPU: 1 UID: 0 PID: 10081 Comm: syz.5.1484 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.838177][T10081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 412.838183][T10081] Call Trace: [ 412.838187][T10081] [ 412.838192][T10081] dump_stack_lvl+0xe8/0x150 [ 412.838212][T10081] should_fail_ex+0x46b/0x600 [ 412.838226][T10081] _copy_from_user+0x2d/0xb0 [ 412.838241][T10081] do_sock_getsockopt+0x165/0x3f0 [ 412.838254][T10081] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 412.838265][T10081] ? __fget_files+0x3a6/0x420 [ 412.838275][T10081] ? __fget_files+0x2a/0x420 [ 412.838287][T10081] __x64_sys_getsockopt+0x1aa/0x250 [ 412.838302][T10081] do_syscall_64+0xe2/0xf80 [ 412.838316][T10081] ? rcu_is_watching+0x15/0xb0 [ 412.838328][T10081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.838339][T10081] ? clear_bhb_loop+0x60/0xb0 [ 412.838351][T10081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.838361][T10081] RIP: 0033:0x7f710d56aeb9 [ 412.838371][T10081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.838380][T10081] RSP: 002b:00007f710b7c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 412.838392][T10081] RAX: ffffffffffffffda RBX: 00007f710d7e5fa0 RCX: 00007f710d56aeb9 [ 412.838399][T10081] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 412.838405][T10081] RBP: 00007f710b7c6090 R08: 00002000000010c0 R09: 0000000000000000 [ 412.838412][T10081] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 412.838418][T10081] R13: 00007f710d7e6038 R14: 00007f710d7e5fa0 R15: 00007ffdbfb9ce88 [ 412.838433][T10081] [ 413.527528][T10096] FAULT_INJECTION: forcing a failure. [ 413.527528][T10096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.529475][T10096] CPU: 1 UID: 0 PID: 10096 Comm: syz.4.1490 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 413.529498][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 413.529510][T10096] Call Trace: [ 413.529517][T10096] [ 413.529525][T10096] dump_stack_lvl+0xe8/0x150 [ 413.529553][T10096] should_fail_ex+0x46b/0x600 [ 413.529578][T10096] _copy_from_user+0x2d/0xb0 [ 413.529601][T10096] ___sys_recvmsg+0x175/0x590 [ 413.529627][T10096] ? __pfx____sys_recvmsg+0x10/0x10 [ 413.529651][T10096] ? __fget_files+0x2a/0x420 [ 413.529685][T10096] ? __fget_files+0x3a6/0x420 [ 413.529710][T10096] do_recvmmsg+0x33a/0x800 [ 413.529738][T10096] ? __pfx_do_recvmmsg+0x10/0x10 [ 413.529769][T10096] ? rt_mutex_slowunlock+0x1cb/0x300 [ 413.529804][T10096] __x64_sys_recvmmsg+0x198/0x250 [ 413.529827][T10096] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 413.529857][T10096] do_syscall_64+0xe2/0xf80 [ 413.529879][T10096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.529896][T10096] ? trace_irq_disable+0x37/0x100 [ 413.529917][T10096] ? clear_bhb_loop+0x60/0xb0 [ 413.529939][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.529957][T10096] RIP: 0033:0x7faf4236aeb9 [ 413.529979][T10096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.529995][T10096] RSP: 002b:00007faf405c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 413.530015][T10096] RAX: ffffffffffffffda RBX: 00007faf425e5fa0 RCX: 00007faf4236aeb9 [ 413.530028][T10096] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: 0000000000000003 [ 413.530040][T10096] RBP: 00007faf405c6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.530052][T10096] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 413.530064][T10096] R13: 00007faf425e6038 R14: 00007faf425e5fa0 R15: 00007ffe229250f8 [ 413.530093][T10096] [ 414.634549][T10114] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1495'. [ 416.104244][T10133] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1503'. [ 416.796416][ T5889] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 416.986409][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 416.996907][ T5889] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 416.996923][ T5889] usb 4-1: config 0 has no interface number 0 [ 416.996943][ T5889] usb 4-1: config 0 interface 182 has no altsetting 0 [ 417.000106][ T5889] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 417.000133][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.000152][ T5889] usb 4-1: Product: syz [ 417.000165][ T5889] usb 4-1: Manufacturer: syz [ 417.000172][ T5889] usb 4-1: SerialNumber: syz [ 417.083408][ T5889] usb 4-1: config 0 descriptor?? [ 417.258041][ T5889] hub 4-1:0.182: bad descriptor, ignoring hub [ 417.258080][ T5889] hub 4-1:0.182: probe with driver hub failed with error -5 [ 418.049391][ T5889] kaweth 4-1:0.182: Firmware present in device. [ 418.222509][ T5889] kaweth 4-1:0.182: Statistics collection: 0 [ 418.222523][ T5889] kaweth 4-1:0.182: Multicast filter limit: 0 [ 418.222532][ T5889] kaweth 4-1:0.182: MTU: 0 [ 418.222540][ T5889] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 418.441320][T10138] CIFS mount error: No usable UNC path provided in device string! [ 418.441320][T10138] [ 418.448075][T10138] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 418.967104][ T5889] kaweth 4-1:0.182: kaweth interface created at eth1 [ 419.056993][ T5806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 419.127665][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 419.261462][ T5796] usb 4-1: USB disconnect, device number 28 [ 420.937314][ T37] kauditd_printk_skb: 180 callbacks suppressed [ 420.937326][ T37] audit: type=1800 audit(1770476233.131:223): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1536" name="bus" dev="tmpfs" ino=1353 res=0 errno=0 [ 421.208847][ T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 421.396500][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 421.399319][ T44] usb 6-1: config 0 has an invalid interface number: 182 but max is 0 [ 421.399342][ T44] usb 6-1: config 0 has no interface number 0 [ 421.399372][ T44] usb 6-1: config 0 interface 182 has no altsetting 0 [ 421.417431][ T44] usb 6-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 421.417457][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.417475][ T44] usb 6-1: Product: syz [ 421.417495][ T44] usb 6-1: Manufacturer: syz [ 421.417509][ T44] usb 6-1: SerialNumber: syz [ 421.422464][ T44] usb 6-1: config 0 descriptor?? [ 421.472312][ T44] hub 6-1:0.182: bad descriptor, ignoring hub [ 421.472351][ T44] hub 6-1:0.182: probe with driver hub failed with error -5 [ 421.486481][ T11] block nbd0: Possible stuck request ffff888024e6e000: control (read@0,1024B). Runtime 270 seconds [ 421.486521][ T11] block nbd0: Possible stuck request ffff888024e6e1c0: control (read@1024,1024B). Runtime 270 seconds [ 421.486547][ T11] block nbd0: Possible stuck request ffff888024e6e380: control (read@2048,1024B). Runtime 270 seconds [ 421.486574][ T11] block nbd0: Possible stuck request ffff888024e6e540: control (read@3072,1024B). Runtime 270 seconds [ 421.697497][ T44] kaweth 6-1:0.182: Firmware present in device. [ 421.833558][ T44] kaweth 6-1:0.182: Statistics collection: 0 [ 421.833581][ T44] kaweth 6-1:0.182: Multicast filter limit: 0 [ 421.833595][ T44] kaweth 6-1:0.182: MTU: 0 [ 421.833608][ T44] kaweth 6-1:0.182: Read MAC address 00:00:00:00:00:00 [ 421.986472][ T5796] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 422.147984][ T5796] usb 3-1: Using ep0 maxpacket: 32 [ 422.150529][ T5796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 422.150565][ T5796] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 422.150595][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.198666][ T5796] usb 3-1: config 0 descriptor?? [ 422.518038][ T44] kaweth 6-1:0.182: kaweth interface created at eth1 [ 422.629006][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 422.629949][ T5796] usbhid 3-1:0.0: can't add hid device: -71 [ 422.630059][ T5796] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 422.728093][ T5796] usb 3-1: USB disconnect, device number 25 [ 422.857242][ T5785] usb 6-1: USB disconnect, device number 5 [ 423.599800][T10312] FAULT_INJECTION: forcing a failure. [ 423.599800][T10312] name failslab, interval 1, probability 0, space 0, times 0 [ 423.599832][T10312] CPU: 0 UID: 0 PID: 10312 Comm: syz.4.1562 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 423.599852][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 423.599861][T10312] Call Trace: [ 423.599868][T10312] [ 423.599875][T10312] dump_stack_lvl+0xe8/0x150 [ 423.599904][T10312] should_fail_ex+0x46b/0x600 [ 423.599927][T10312] should_failslab+0xa8/0x100 [ 423.599954][T10312] __kmalloc_noprof+0xdf/0x7c0 [ 423.599976][T10312] ? inotify_handle_inode_event+0x1cc/0x6b0 [ 423.599997][T10312] ? fsnotify+0x74c/0x1b00 [ 423.600018][T10312] inotify_handle_inode_event+0x1cc/0x6b0 [ 423.600048][T10312] fsnotify+0x184c/0x1b00 [ 423.600067][T10312] ? do_sys_openat2+0x168/0x220 [ 423.600098][T10312] ? fsnotify+0x74c/0x1b00 [ 423.600115][T10312] ? __pfx_fsnotify+0x10/0x10 [ 423.600147][T10312] __fsnotify_parent+0x4a1/0x620 [ 423.600174][T10312] ? __pfx___fsnotify_parent+0x10/0x10 [ 423.600201][T10312] ? import_iovec+0x73/0xa0 [ 423.600227][T10312] vfs_readv+0x6c2/0x850 [ 423.600252][T10312] ? __pfx_vfs_readv+0x10/0x10 [ 423.600283][T10312] ? __fget_files+0x2a/0x420 [ 423.600304][T10312] ? __fget_files+0x3a6/0x420 [ 423.600320][T10312] ? __fget_files+0x2a/0x420 [ 423.600345][T10312] __se_sys_preadv2+0x187/0x2b0 [ 423.600370][T10312] ? __pfx___se_sys_preadv2+0x10/0x10 [ 423.600399][T10312] ? __x64_sys_preadv2+0x20/0xc0 [ 423.600423][T10312] do_syscall_64+0xe2/0xf80 [ 423.600445][T10312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.600462][T10312] ? trace_irq_disable+0x37/0x100 [ 423.600483][T10312] ? clear_bhb_loop+0x60/0xb0 [ 423.600505][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.600523][T10312] RIP: 0033:0x7faf4236aeb9 [ 423.600540][T10312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.600555][T10312] RSP: 002b:00007faf405c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 423.600576][T10312] RAX: ffffffffffffffda RBX: 00007faf425e5fa0 RCX: 00007faf4236aeb9 [ 423.600590][T10312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 423.600601][T10312] RBP: 00007faf405c6090 R08: 0000000000000003 R09: 0000000000000000 [ 423.600620][T10312] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 423.600631][T10312] R13: 00007faf425e6038 R14: 00007faf425e5fa0 R15: 00007ffe229250f8 [ 423.600661][T10312] [ 424.230737][T10326] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1568'. [ 426.396442][ T5804] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 426.608277][ T5804] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 426.608308][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.608328][ T5804] usb 2-1: Product: syz [ 426.608341][ T5804] usb 2-1: Manufacturer: syz [ 426.608355][ T5804] usb 2-1: SerialNumber: syz [ 426.660278][ T5804] usb 2-1: config 0 descriptor?? [ 426.967919][ T5785] usb 2-1: USB disconnect, device number 32 [ 427.196397][ T5804] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 428.716376][ T5804] usb 6-1: Using ep0 maxpacket: 32 [ 428.720593][ T5804] usb 6-1: config 0 has an invalid interface number: 182 but max is 0 [ 428.720616][ T5804] usb 6-1: config 0 has no interface number 0 [ 428.720649][ T5804] usb 6-1: config 0 interface 182 has no altsetting 0 [ 428.723605][ T5804] usb 6-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 428.723632][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.723649][ T5804] usb 6-1: Product: syz [ 428.723663][ T5804] usb 6-1: Manufacturer: syz [ 428.723676][ T5804] usb 6-1: SerialNumber: syz [ 428.733000][ T5804] usb 6-1: config 0 descriptor?? [ 428.735542][ T5804] hub 6-1:0.182: bad descriptor, ignoring hub [ 428.735576][ T5804] hub 6-1:0.182: probe with driver hub failed with error -5 [ 428.911985][T10384] FAULT_INJECTION: forcing a failure. [ 428.911985][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.912017][T10384] CPU: 1 UID: 0 PID: 10384 Comm: syz.4.1590 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 428.912049][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 428.912061][T10384] Call Trace: [ 428.912068][T10384] [ 428.912076][T10384] dump_stack_lvl+0xe8/0x150 [ 428.912104][T10384] should_fail_ex+0x46b/0x600 [ 428.912129][T10384] _copy_from_user+0x2d/0xb0 [ 428.912152][T10384] do_sock_getsockopt+0x165/0x3f0 [ 428.912174][T10384] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 428.912194][T10384] ? __fget_files+0x3a6/0x420 [ 428.912210][T10384] ? __fget_files+0x2a/0x420 [ 428.912233][T10384] __x64_sys_getsockopt+0x1aa/0x250 [ 428.912261][T10384] do_syscall_64+0xe2/0xf80 [ 428.912283][T10384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.912301][T10384] ? trace_irq_disable+0x37/0x100 [ 428.912321][T10384] ? clear_bhb_loop+0x60/0xb0 [ 428.912342][T10384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.912360][T10384] RIP: 0033:0x7faf4236aeb9 [ 428.912377][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.912392][T10384] RSP: 002b:00007faf405c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 428.912411][T10384] RAX: ffffffffffffffda RBX: 00007faf425e5fa0 RCX: 00007faf4236aeb9 [ 428.912424][T10384] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 428.912435][T10384] RBP: 00007faf405c6090 R08: 0000200000000480 R09: 0000000000000000 [ 428.912446][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.912456][T10384] R13: 00007faf425e6038 R14: 00007faf425e5fa0 R15: 00007ffe229250f8 [ 428.912483][T10384] [ 429.170949][ T5804] kaweth 6-1:0.182: Firmware present in device. [ 429.318504][ T5804] kaweth 6-1:0.182: Statistics collection: 0 [ 429.318526][ T5804] kaweth 6-1:0.182: Multicast filter limit: 0 [ 429.318542][ T5804] kaweth 6-1:0.182: MTU: 0 [ 429.318555][ T5804] kaweth 6-1:0.182: Read MAC address 00:00:00:00:00:00 [ 429.951204][ T5804] kaweth 6-1:0.182: kaweth interface created at eth1 [ 430.246752][ T44] usb 6-1: USB disconnect, device number 6 [ 430.895674][T10439] FAULT_INJECTION: forcing a failure. [ 430.895674][T10439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.895705][T10439] CPU: 0 UID: 0 PID: 10439 Comm: syz.3.1614 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.895727][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 430.895738][T10439] Call Trace: [ 430.895745][T10439] [ 430.895753][T10439] dump_stack_lvl+0xe8/0x150 [ 430.895780][T10439] should_fail_ex+0x46b/0x600 [ 430.895805][T10439] _copy_to_user+0x31/0xb0 [ 430.895829][T10439] simple_read_from_buffer+0xe1/0x170 [ 430.895857][T10439] proc_fail_nth_read+0x1be/0x230 [ 430.895881][T10439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.895905][T10439] ? rw_verify_area+0x2ac/0x4e0 [ 430.895924][T10439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.895945][T10439] vfs_read+0x212/0xa70 [ 430.895972][T10439] ? __pfx_vfs_read+0x10/0x10 [ 430.895990][T10439] ? lockdep_hardirqs_on+0x7a/0x110 [ 430.896013][T10439] ? do_sys_openat2+0x168/0x220 [ 430.896031][T10439] ? kmem_cache_free+0x18d/0x8c0 [ 430.896053][T10439] ? do_sys_openat2+0x168/0x220 [ 430.896081][T10439] ksys_read+0x156/0x270 [ 430.896104][T10439] ? __pfx_ksys_read+0x10/0x10 [ 430.896134][T10439] do_syscall_64+0xe2/0xf80 [ 430.896156][T10439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.896182][T10439] ? trace_irq_disable+0x37/0x100 [ 430.896203][T10439] ? clear_bhb_loop+0x60/0xb0 [ 430.896224][T10439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.896241][T10439] RIP: 0033:0x7f55cdb6b78e [ 430.896261][T10439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.896276][T10439] RSP: 002b:00007f55cbdfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.896294][T10439] RAX: ffffffffffffffda RBX: 00007f55cbdfe6c0 RCX: 00007f55cdb6b78e [ 430.896307][T10439] RDX: 000000000000000f RSI: 00007f55cbdfe0a0 RDI: 0000000000000004 [ 430.896317][T10439] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 430.896328][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.896338][T10439] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 430.896367][T10439] [ 431.446596][T10440] CIFS mount error: No usable UNC path provided in device string! [ 431.446596][T10440] [ 431.446610][T10440] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 433.846614][T10472] CIFS mount error: No usable UNC path provided in device string! [ 433.846614][T10472] [ 433.846628][T10472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 435.486609][T10498] mmap: syz.2.1637 (10498): VmData 37601280 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 436.316402][ T5889] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 436.436411][ T5785] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 436.486439][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 436.488672][ T5889] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 436.516811][ T5889] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 436.516838][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.516859][ T5889] usb 3-1: Product: syz [ 436.516873][ T5889] usb 3-1: Manufacturer: syz [ 436.516886][ T5889] usb 3-1: SerialNumber: syz [ 436.564112][ T5889] go7007 3-1:255.0: probe with driver go7007 failed with error -12 [ 436.596378][ T5785] usb 4-1: Using ep0 maxpacket: 8 [ 436.660954][ T5785] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 436.660983][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.661001][ T5785] usb 4-1: Product: syz [ 436.661014][ T5785] usb 4-1: Manufacturer: syz [ 436.661028][ T5785] usb 4-1: SerialNumber: syz [ 436.706634][ T5785] usb 4-1: config 0 descriptor?? [ 436.712752][ T5785] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 436.713395][ T5785] dvb-usb: bulk message failed: -22 (2/0) [ 436.768598][ T5804] usb 3-1: USB disconnect, device number 26 [ 436.795687][ T5785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 436.807062][ T5785] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 436.807156][ T5785] usb 4-1: media controller created [ 436.860031][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 436.929180][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.929717][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.932080][ T5785] dvb-usb: bulk message failed: -22 (1/0) [ 437.046530][ T5785] DVB: Unable to find symbol mt352_attach() [ 437.046554][ T5785] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 437.377308][ T5785] rc_core: IR keymap rc-dvico-portable not found [ 437.377328][ T5785] Registered IR keymap rc-empty [ 437.384363][ T5785] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 437.388997][ T5785] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 437.424466][ T5785] dvb-usb: schedule remote query interval to 100 msecs. [ 437.424486][ T5785] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 437.455092][ T5785] usb 4-1: USB disconnect, device number 29 [ 437.511180][ T5115] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.524810][ T5115] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.538781][ T5115] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.584150][ T5115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.606182][ T5115] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.500734][ T5785] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 440.126603][T10562] CIFS mount error: No usable UNC path provided in device string! [ 440.126603][T10562] [ 440.126618][T10562] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 440.880788][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.880881][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.906434][ T5806] Bluetooth: hci6: command tx timeout [ 441.793697][T10568] chnl_net:caif_netlink_parms(): no params data found [ 442.691192][T10632] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 442.774911][ T3555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.966534][ T5806] Bluetooth: hci6: command tx timeout [ 443.025449][T10645] netlink: 'syz.2.1688': attribute type 4 has an invalid length. [ 443.244365][ T3555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.300889][T10568] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.301075][T10568] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.301321][T10568] bridge_slave_0: entered allmulticast mode [ 443.330881][T10568] bridge_slave_0: entered promiscuous mode [ 443.343549][T10568] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.343737][T10568] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.344222][T10568] bridge_slave_1: entered allmulticast mode [ 443.368033][T10568] bridge_slave_1: entered promiscuous mode [ 443.752172][ T3555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.819720][T10568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.858283][T10568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.946549][ T44] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 444.067678][ T3555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.116373][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 444.119084][ T44] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 444.119142][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.119169][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 444.119193][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 444.119216][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.128401][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 444.128427][ T44] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 444.128447][ T44] usb 3-1: Manufacturer: syz [ 444.221257][ T44] usb 3-1: config 0 descriptor?? [ 444.230374][T10568] team0: Port device team_slave_0 added [ 444.251031][T10568] team0: Port device team_slave_1 added [ 444.472420][T10568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.472431][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.472445][T10568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.475652][T10568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.475662][T10568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.475676][T10568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.565066][ T44] rc_core: IR keymap rc-hauppauge not found [ 444.565084][ T44] Registered IR keymap rc-empty [ 444.573723][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.586733][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.608069][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 444.611147][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 444.647957][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.669647][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.687403][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.710565][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.730176][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.746741][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.757215][T10568] hsr_slave_0: entered promiscuous mode [ 444.768932][T10568] hsr_slave_1: entered promiscuous mode [ 444.769042][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.771129][T10568] debugfs: 'hsr0' already exists in 'hsr' [ 444.771144][T10568] Cannot create hsr debugfs directory [ 444.802049][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.818103][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.846615][ T44] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 444.893194][ T44] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 444.893218][ T44] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 444.940563][ T44] usb 3-1: USB disconnect, device number 27 [ 445.046471][ T5806] Bluetooth: hci6: command tx timeout [ 445.418982][T10710] FAULT_INJECTION: forcing a failure. [ 445.418982][T10710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.419075][T10710] CPU: 0 UID: 0 PID: 10710 Comm: syz.3.1715 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 445.419097][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 445.419108][T10710] Call Trace: [ 445.419116][T10710] [ 445.419124][T10710] dump_stack_lvl+0xe8/0x150 [ 445.419153][T10710] should_fail_ex+0x46b/0x600 [ 445.419178][T10710] _copy_from_user+0x2d/0xb0 [ 445.419201][T10710] ___sys_sendmsg+0x1c6/0x360 [ 445.419227][T10710] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.419250][T10710] ? preempt_schedule_thunk+0x16/0x30 [ 445.419294][T10710] ? __fget_files+0x2a/0x420 [ 445.419310][T10710] ? __fget_files+0x3a6/0x420 [ 445.419337][T10710] __x64_sys_sendmsg+0x1c3/0x2a0 [ 445.419358][T10710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.419399][T10710] do_syscall_64+0xe2/0xf80 [ 445.419422][T10710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.419441][T10710] ? clear_bhb_loop+0x60/0xb0 [ 445.419462][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.419479][T10710] RIP: 0033:0x7f55cdbaaeb9 [ 445.419497][T10710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.419513][T10710] RSP: 002b:00007f55cbddd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.419532][T10710] RAX: ffffffffffffffda RBX: 00007f55cde26090 RCX: 00007f55cdbaaeb9 [ 445.419546][T10710] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 445.419558][T10710] RBP: 00007f55cbddd090 R08: 0000000000000000 R09: 0000000000000000 [ 445.419570][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.419581][T10710] R13: 00007f55cde26128 R14: 00007f55cde26090 R15: 00007fff5fc779f8 [ 445.419611][T10710] [ 445.862946][T10714] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1717'. [ 445.949996][T10716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1718'. [ 446.983247][ T3555] bridge_slave_1: left allmulticast mode [ 446.983377][ T3555] bridge_slave_1: left promiscuous mode [ 447.008966][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.126448][ T5806] Bluetooth: hci6: command tx timeout [ 447.345263][ T3555] bridge_slave_0: left allmulticast mode [ 447.345290][ T3555] bridge_slave_0: left promiscuous mode [ 447.345491][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.207028][ T5806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 449.219004][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 451.326968][T10851] FAULT_INJECTION: forcing a failure. [ 451.326968][T10851] name failslab, interval 1, probability 0, space 0, times 0 [ 451.326988][T10851] CPU: 0 UID: 0 PID: 10851 Comm: syz.3.1781 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 451.327001][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 451.327008][T10851] Call Trace: [ 451.327011][T10851] [ 451.327016][T10851] dump_stack_lvl+0xe8/0x150 [ 451.327035][T10851] should_fail_ex+0x46b/0x600 [ 451.327049][T10851] ? getname_flags+0xb7/0x540 [ 451.327064][T10851] should_failslab+0xa8/0x100 [ 451.327080][T10851] ? getname_flags+0xb7/0x540 [ 451.327093][T10851] kmem_cache_alloc_noprof+0x83/0x6a0 [ 451.327107][T10851] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 451.327121][T10851] ? lockdep_hardirqs_on+0x7a/0x110 [ 451.327137][T10851] getname_flags+0xb7/0x540 [ 451.327154][T10851] do_sys_openat2+0xca/0x220 [ 451.327165][T10851] ? __pfx_do_sys_openat2+0x10/0x10 [ 451.327176][T10851] ? ksys_write+0x248/0x270 [ 451.327190][T10851] ? __pfx_ksys_write+0x10/0x10 [ 451.327204][T10851] __x64_sys_open+0x11e/0x150 [ 451.327217][T10851] do_syscall_64+0xe2/0xf80 [ 451.327230][T10851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.327239][T10851] ? trace_irq_disable+0x37/0x100 [ 451.327253][T10851] ? clear_bhb_loop+0x60/0xb0 [ 451.327266][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.327281][T10851] RIP: 0033:0x7f55cdbaaeb9 [ 451.327291][T10851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.327300][T10851] RSP: 002b:00007f55cbdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 451.327312][T10851] RAX: ffffffffffffffda RBX: 00007f55cde25fa0 RCX: 00007f55cdbaaeb9 [ 451.327319][T10851] RDX: 0000000000000092 RSI: 000000000025637e RDI: 0000200000000000 [ 451.327326][T10851] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 451.327332][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.327338][T10851] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 451.327353][T10851] [ 451.566563][ T11] block nbd0: Possible stuck request ffff888024e6e000: control (read@0,1024B). Runtime 300 seconds [ 451.566604][ T11] block nbd0: Possible stuck request ffff888024e6e1c0: control (read@1024,1024B). Runtime 300 seconds [ 451.566632][ T11] block nbd0: Possible stuck request ffff888024e6e380: control (read@2048,1024B). Runtime 300 seconds [ 451.566667][ T11] block nbd0: Possible stuck request ffff888024e6e540: control (read@3072,1024B). Runtime 300 seconds [ 452.127241][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.216524][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.277131][ T3555] bond0 (unregistering): Released all slaves [ 453.016496][ T5804] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 453.017617][T10906] FAULT_INJECTION: forcing a failure. [ 453.017617][T10906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.017643][T10906] CPU: 1 UID: 0 PID: 10906 Comm: syz.3.1808 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 453.017659][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 453.017668][T10906] Call Trace: [ 453.017674][T10906] [ 453.017680][T10906] dump_stack_lvl+0xe8/0x150 [ 453.017704][T10906] should_fail_ex+0x46b/0x600 [ 453.017723][T10906] _copy_to_user+0x31/0xb0 [ 453.017743][T10906] simple_read_from_buffer+0xe1/0x170 [ 453.017767][T10906] proc_fail_nth_read+0x1be/0x230 [ 453.017787][T10906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.017805][T10906] ? rw_verify_area+0x2ac/0x4e0 [ 453.017833][T10906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.017853][T10906] vfs_read+0x212/0xa70 [ 453.017880][T10906] ? __pfx_vfs_read+0x10/0x10 [ 453.017899][T10906] ? fdget+0x13f/0x1f0 [ 453.017913][T10906] ? __sys_bind+0x17b/0x410 [ 453.017933][T10906] ? __pfx___sys_bind+0x10/0x10 [ 453.017955][T10906] ksys_read+0x156/0x270 [ 453.017972][T10906] ? __pfx_ksys_read+0x10/0x10 [ 453.017996][T10906] do_syscall_64+0xe2/0xf80 [ 453.018015][T10906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.018030][T10906] ? trace_irq_disable+0x37/0x100 [ 453.018050][T10906] ? clear_bhb_loop+0x60/0xb0 [ 453.018066][T10906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.018079][T10906] RIP: 0033:0x7f55cdb6b78e [ 453.018092][T10906] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 453.018104][T10906] RSP: 002b:00007f55cbdfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.018120][T10906] RAX: ffffffffffffffda RBX: 00007f55cbdfe6c0 RCX: 00007f55cdb6b78e [ 453.018130][T10906] RDX: 000000000000000f RSI: 00007f55cbdfe0a0 RDI: 0000000000000004 [ 453.018138][T10906] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 453.018147][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.018155][T10906] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 453.018178][T10906] [ 453.166411][ T5804] usb 3-1: Using ep0 maxpacket: 32 [ 453.207166][ T5804] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 453.207192][ T5804] usb 3-1: config 0 has no interface number 0 [ 453.207223][ T5804] usb 3-1: config 0 interface 182 has no altsetting 0 [ 453.210046][ T5804] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 453.210072][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.210091][ T5804] usb 3-1: Product: syz [ 453.210105][ T5804] usb 3-1: Manufacturer: syz [ 453.210118][ T5804] usb 3-1: SerialNumber: syz [ 453.227479][ T5804] usb 3-1: config 0 descriptor?? [ 453.238561][ T5804] hub 3-1:0.182: bad descriptor, ignoring hub [ 453.238596][ T5804] hub 3-1:0.182: probe with driver hub failed with error -5 [ 453.454276][ T5804] kaweth 3-1:0.182: Firmware present in device. [ 453.598426][T10919] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1810'. [ 453.646715][ T5804] kaweth 3-1:0.182: Statistics collection: 0 [ 453.646738][ T5804] kaweth 3-1:0.182: Multicast filter limit: 0 [ 453.646753][ T5804] kaweth 3-1:0.182: MTU: 0 [ 453.646767][ T5804] kaweth 3-1:0.182: Read MAC address 00:00:00:00:00:00 [ 454.292487][ T5804] kaweth 3-1:0.182: Error setting receive filter [ 454.292745][ T5804] kaweth 3-1:0.182: probe with driver kaweth failed with error -5 [ 454.328981][ T5804] usb 3-1: USB disconnect, device number 28 [ 454.351158][ T5796] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 454.506513][ T5796] usb 6-1: Using ep0 maxpacket: 16 [ 454.512371][ T5796] usb 6-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 454.512424][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 454.512452][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 454.512477][ T5796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 454.512499][ T5796] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.513798][ T5796] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 454.513824][ T5796] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 454.513844][ T5796] usb 6-1: Manufacturer: syz [ 454.529545][ T5796] usb 6-1: config 0 descriptor?? [ 454.770523][T10951] FAULT_INJECTION: forcing a failure. [ 454.770523][T10951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.770554][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.3.1822 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.770576][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 454.770587][T10951] Call Trace: [ 454.770593][T10951] [ 454.770601][T10951] dump_stack_lvl+0xe8/0x150 [ 454.770632][T10951] should_fail_ex+0x46b/0x600 [ 454.770658][T10951] _copy_from_user+0x2d/0xb0 [ 454.770681][T10951] ___sys_sendmsg+0x1c6/0x360 [ 454.770700][T10951] ? __lock_acquire+0x6b5/0x2cf0 [ 454.770724][T10951] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.770747][T10951] ? kstrtouint+0x6e/0xe0 [ 454.770788][T10951] ? __fget_files+0x2a/0x420 [ 454.770805][T10951] ? __fget_files+0x3a6/0x420 [ 454.770831][T10951] __sys_sendmmsg+0x282/0x4e0 [ 454.770856][T10951] ? __pfx___sys_sendmmsg+0x10/0x10 [ 454.770883][T10951] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 454.770915][T10951] ? ksys_write+0x248/0x270 [ 454.770939][T10951] ? __pfx_ksys_write+0x10/0x10 [ 454.770966][T10951] __x64_sys_sendmmsg+0xa0/0xc0 [ 454.770988][T10951] do_syscall_64+0xe2/0xf80 [ 454.771009][T10951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.771027][T10951] ? trace_irq_disable+0x37/0x100 [ 454.771048][T10951] ? clear_bhb_loop+0x60/0xb0 [ 454.771069][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.771087][T10951] RIP: 0033:0x7f55cdbaaeb9 [ 454.771104][T10951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.771120][T10951] RSP: 002b:00007f55cbdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 454.771140][T10951] RAX: ffffffffffffffda RBX: 00007f55cde25fa0 RCX: 00007f55cdbaaeb9 [ 454.771153][T10951] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 454.771165][T10951] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 454.771177][T10951] R10: 0000000004000080 R11: 0000000000000246 R12: 0000000000000001 [ 454.771188][T10951] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 454.771218][T10951] [ 454.946403][ T5796] rc_core: IR keymap rc-hauppauge not found [ 454.946422][ T5796] Registered IR keymap rc-empty [ 454.946858][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 454.966790][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 454.990165][ T5796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 455.006775][ T5796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19 [ 455.020838][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.036944][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.056862][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.076912][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.098806][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.181429][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.199170][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.223017][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.329105][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.346737][ T5796] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 455.407544][ T5796] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 455.407570][ T5796] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 455.466071][ T5796] usb 6-1: USB disconnect, device number 7 [ 457.416424][ T3555] hsr_slave_0: left promiscuous mode [ 457.461343][ T3555] hsr_slave_1: left promiscuous mode [ 457.464486][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.464626][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.506408][ T5796] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 457.530006][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.530033][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.656482][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 457.666096][ T5796] usb 2-1: config 0 has an invalid interface number: 182 but max is 0 [ 457.666125][ T5796] usb 2-1: config 0 has no interface number 0 [ 457.666157][ T5796] usb 2-1: config 0 interface 182 has no altsetting 0 [ 457.670938][ T5796] usb 2-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 457.670965][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.670984][ T5796] usb 2-1: Product: syz [ 457.670997][ T5796] usb 2-1: Manufacturer: syz [ 457.671010][ T5796] usb 2-1: SerialNumber: syz [ 457.678566][ T5796] usb 2-1: config 0 descriptor?? [ 457.693352][ T5796] hub 2-1:0.182: bad descriptor, ignoring hub [ 457.693387][ T5796] hub 2-1:0.182: probe with driver hub failed with error -5 [ 457.929819][ T3555] veth1_macvtap: left promiscuous mode [ 457.930095][ T3555] veth0_macvtap: left promiscuous mode [ 457.930374][ T3555] veth1_vlan: left promiscuous mode [ 457.930732][ T3555] veth0_vlan: left promiscuous mode [ 457.934209][ T5796] kaweth 2-1:0.182: Firmware present in device. [ 458.006399][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 458.009953][ T5806] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 458.084685][ T5796] kaweth 2-1:0.182: Statistics collection: 0 [ 458.084700][ T5796] kaweth 2-1:0.182: Multicast filter limit: 0 [ 458.084708][ T5796] kaweth 2-1:0.182: MTU: 0 [ 458.084715][ T5796] kaweth 2-1:0.182: Read MAC address 00:00:00:00:00:00 [ 461.649774][T11154] FAULT_INJECTION: forcing a failure. [ 461.649774][T11154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.649794][T11154] CPU: 1 UID: 0 PID: 11154 Comm: syz.3.1912 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.649807][T11154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 461.649813][T11154] Call Trace: [ 461.649817][T11154] [ 461.649822][T11154] dump_stack_lvl+0xe8/0x150 [ 461.649840][T11154] should_fail_ex+0x46b/0x600 [ 461.649854][T11154] _copy_to_user+0x31/0xb0 [ 461.649870][T11154] simple_read_from_buffer+0xe1/0x170 [ 461.649888][T11154] proc_fail_nth_read+0x1be/0x230 [ 461.649903][T11154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.649917][T11154] ? rw_verify_area+0x2ac/0x4e0 [ 461.649929][T11154] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.649943][T11154] vfs_read+0x212/0xa70 [ 461.649959][T11154] ? __pfx_vfs_read+0x10/0x10 [ 461.649973][T11154] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 461.649988][T11154] ? lockdep_hardirqs_on+0x7a/0x110 [ 461.650002][T11154] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 461.650015][T11154] ? mutex_lock_nested+0x152/0x1d0 [ 461.650025][T11154] ? fdget_pos+0x252/0x320 [ 461.650039][T11154] ksys_read+0x156/0x270 [ 461.650052][T11154] ? __pfx_ksys_read+0x10/0x10 [ 461.650064][T11154] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 461.650077][T11154] ? syscall_user_dispatch+0x4e/0x90 [ 461.650092][T11154] do_syscall_64+0xe2/0xf80 [ 461.650106][T11154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.650115][T11154] ? trace_irq_disable+0x37/0x100 [ 461.650129][T11154] ? clear_bhb_loop+0x60/0xb0 [ 461.650141][T11154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.650151][T11154] RIP: 0033:0x7f55cdb6b78e [ 461.650161][T11154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 461.650171][T11154] RSP: 002b:00007f55cbdfdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.650182][T11154] RAX: ffffffffffffffda RBX: 00007f55cbdfe6c0 RCX: 00007f55cdb6b78e [ 461.650190][T11154] RDX: 000000000000000f RSI: 00007f55cbdfe0a0 RDI: 0000000000000003 [ 461.650196][T11154] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 461.650202][T11154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.650208][T11154] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 461.650223][T11154] [ 461.958922][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 462.216388][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 462.590375][ T5115] Bluetooth: hci5: command 0x0406 tx timeout [ 463.116624][T11180] CIFS mount error: No usable UNC path provided in device string! [ 463.116624][T11180] [ 463.116638][T11180] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 465.236072][T11242] FAULT_INJECTION: forcing a failure. [ 465.236072][T11242] name failslab, interval 1, probability 0, space 0, times 0 [ 465.236093][T11242] CPU: 1 UID: 0 PID: 11242 Comm: syz.3.1954 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.236105][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 465.236112][T11242] Call Trace: [ 465.236116][T11242] [ 465.236121][T11242] dump_stack_lvl+0xe8/0x150 [ 465.236140][T11242] should_fail_ex+0x46b/0x600 [ 465.236155][T11242] should_failslab+0xa8/0x100 [ 465.236171][T11242] __kmalloc_noprof+0xdf/0x7c0 [ 465.236186][T11242] ? kfree+0x4d/0x8f0 [ 465.236198][T11242] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 465.236213][T11242] tomoyo_realpath_from_path+0xe3/0x5d0 [ 465.236224][T11242] ? tomoyo_domain+0xd8/0x130 [ 465.236237][T11242] ? tomoyo_path_number_perm+0x219/0x630 [ 465.236261][T11242] tomoyo_path_number_perm+0x246/0x630 [ 465.236285][T11242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.236305][T11242] ? __lock_acquire+0x6b5/0x2cf0 [ 465.236327][T11242] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.236383][T11242] ? __fget_files+0x2a/0x420 [ 465.236395][T11242] ? __fget_files+0x2a/0x420 [ 465.236404][T11242] ? __fget_files+0x3a6/0x420 [ 465.236412][T11242] ? __fget_files+0x2a/0x420 [ 465.236423][T11242] security_file_ioctl+0xc3/0x2a0 [ 465.236439][T11242] __se_sys_ioctl+0x47/0x170 [ 465.236454][T11242] do_syscall_64+0xe2/0xf80 [ 465.236468][T11242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.236478][T11242] ? trace_irq_disable+0x37/0x100 [ 465.236492][T11242] ? clear_bhb_loop+0x60/0xb0 [ 465.236504][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.236514][T11242] RIP: 0033:0x7f55cdbaaeb9 [ 465.236524][T11242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.236533][T11242] RSP: 002b:00007f55cbdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.236544][T11242] RAX: ffffffffffffffda RBX: 00007f55cde25fa0 RCX: 00007f55cdbaaeb9 [ 465.236552][T11242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 465.236558][T11242] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 465.236564][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.236569][T11242] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 465.236585][T11242] [ 465.236742][T11242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 465.242168][T11242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.616385][ T5796] kaweth 2-1:0.182: kaweth interface created at eth1 [ 465.657012][ T5796] usb 2-1: USB disconnect, device number 33 [ 465.933095][T11249] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1959'. [ 465.994217][T11253] FAULT_INJECTION: forcing a failure. [ 465.994217][T11253] name failslab, interval 1, probability 0, space 0, times 0 [ 465.994250][T11253] CPU: 0 UID: 0 PID: 11253 Comm: syz.3.1960 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.994272][T11253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 465.994283][T11253] Call Trace: [ 465.994290][T11253] [ 465.994298][T11253] dump_stack_lvl+0xe8/0x150 [ 465.994328][T11253] should_fail_ex+0x46b/0x600 [ 465.994354][T11253] should_failslab+0xa8/0x100 [ 465.994380][T11253] __kmalloc_noprof+0xdf/0x7c0 [ 465.994403][T11253] ? kfree+0x4d/0x8f0 [ 465.994421][T11253] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 465.994446][T11253] tomoyo_realpath_from_path+0xe3/0x5d0 [ 465.994466][T11253] ? tomoyo_domain+0xd8/0x130 [ 465.994490][T11253] ? tomoyo_path_number_perm+0x219/0x630 [ 465.994514][T11253] tomoyo_path_number_perm+0x246/0x630 [ 465.994539][T11253] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 465.994562][T11253] ? __lock_acquire+0x6b5/0x2cf0 [ 465.994586][T11253] ? do_raw_spin_lock+0x12b/0x2f0 [ 465.994640][T11253] ? __fget_files+0x2a/0x420 [ 465.994660][T11253] ? __fget_files+0x2a/0x420 [ 465.994676][T11253] ? __fget_files+0x3a6/0x420 [ 465.994691][T11253] ? __fget_files+0x2a/0x420 [ 465.994711][T11253] security_file_ioctl+0xc3/0x2a0 [ 465.994737][T11253] __se_sys_ioctl+0x47/0x170 [ 465.994761][T11253] do_syscall_64+0xe2/0xf80 [ 465.994784][T11253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.994802][T11253] ? trace_irq_disable+0x37/0x100 [ 465.994823][T11253] ? clear_bhb_loop+0x60/0xb0 [ 465.994844][T11253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.994862][T11253] RIP: 0033:0x7f55cdbaaeb9 [ 465.994878][T11253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.994895][T11253] RSP: 002b:00007f55cbdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.994915][T11253] RAX: ffffffffffffffda RBX: 00007f55cde25fa0 RCX: 00007f55cdbaaeb9 [ 465.994932][T11253] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 465.994944][T11253] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 465.994955][T11253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.994966][T11253] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 465.994997][T11253] [ 465.995500][T11253] ERROR: Out of memory at tomoyo_realpath_from_path. [ 466.786592][T11261] netlink: 'syz.2.1964': attribute type 10 has an invalid length. [ 466.796578][T11264] netlink: 'syz.2.1964': attribute type 10 has an invalid length. [ 466.861692][T11261] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 466.969921][T10568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.076979][T10568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.177757][T10568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.242720][T10568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.565579][T11284] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1973'. [ 467.931692][T10568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.979931][T10568] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.988061][T11313] FAULT_INJECTION: forcing a failure. [ 467.988061][T11313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.988092][T11313] CPU: 1 UID: 0 PID: 11313 Comm: syz.1.1982 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 467.988112][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 467.988124][T11313] Call Trace: [ 467.988131][T11313] [ 467.988138][T11313] dump_stack_lvl+0xe8/0x150 [ 467.988168][T11313] should_fail_ex+0x46b/0x600 [ 467.988193][T11313] _copy_from_user+0x2d/0xb0 [ 467.988216][T11313] do_sock_getsockopt+0x165/0x3f0 [ 467.988237][T11313] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 467.988256][T11313] ? __fget_files+0x3a6/0x420 [ 467.988272][T11313] ? __fget_files+0x2a/0x420 [ 467.988294][T11313] __x64_sys_getsockopt+0x1aa/0x250 [ 467.988320][T11313] do_syscall_64+0xe2/0xf80 [ 467.988342][T11313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.988359][T11313] ? trace_irq_disable+0x37/0x100 [ 467.988379][T11313] ? clear_bhb_loop+0x60/0xb0 [ 467.988400][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.988417][T11313] RIP: 0033:0x7f0a60a1aeb9 [ 467.988433][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.988449][T11313] RSP: 002b:00007f0a5ec6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 467.988467][T11313] RAX: ffffffffffffffda RBX: 00007f0a60c95fa0 RCX: 00007f0a60a1aeb9 [ 467.988480][T11313] RDX: 0000000000000080 RSI: 0000000000000084 RDI: 0000000000000004 [ 467.988490][T11313] RBP: 00007f0a5ec6e090 R08: 0000200000001040 R09: 0000000000000000 [ 467.988502][T11313] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.988513][T11313] R13: 00007f0a60c96038 R14: 00007f0a60c95fa0 R15: 00007ffd93abb548 [ 467.988541][T11313] [ 468.029286][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.029475][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.062341][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.065911][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.296402][ T5796] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 468.469066][ T5796] usb 3-1: Using ep0 maxpacket: 16 [ 468.471872][ T5796] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 468.475451][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.475483][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24832, setting to 1024 [ 468.475508][ T5796] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 468.475530][ T5796] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.486205][ T5796] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 468.486232][ T5796] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 468.566442][ T5796] usb 3-1: Manufacturer: syz [ 468.593324][ T5796] usb 3-1: config 0 descriptor?? [ 468.831294][T10568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.889354][T11340] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1993'. [ 469.196415][ T5796] rc_core: IR keymap rc-hauppauge not found [ 469.196435][ T5796] Registered IR keymap rc-empty [ 469.196923][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.216773][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.248073][ T5796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 469.251247][ T5796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 469.324715][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.338644][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.357112][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.378385][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.418150][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.447634][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.466748][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.486739][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.506752][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.530425][ T5796] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 469.552654][ T5796] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 469.552677][ T5796] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.583748][ T5796] usb 3-1: USB disconnect, device number 29 [ 469.784625][T11357] snd_aloop snd_aloop.0: control 3:4:511:syz1:6 is already present [ 470.919336][T11365] FAULT_INJECTION: forcing a failure. [ 470.919336][T11365] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 470.919370][T11365] CPU: 0 UID: 0 PID: 11365 Comm: syz.3.2000 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 470.919391][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 470.919402][T11365] Call Trace: [ 470.919409][T11365] [ 470.919418][T11365] dump_stack_lvl+0xe8/0x150 [ 470.919446][T11365] should_fail_ex+0x46b/0x600 [ 470.919471][T11365] prepare_alloc_pages+0x22a/0x6b0 [ 470.919505][T11365] __alloc_frozen_pages_noprof+0x12f/0x380 [ 470.919528][T11365] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 470.919550][T11365] ? __pfx_policy_nodemask+0x10/0x10 [ 470.919584][T11365] alloc_pages_mpol+0xd1/0x380 [ 470.919612][T11365] alloc_pages_noprof+0xce/0x1e0 [ 470.919639][T11365] __pud_alloc+0x3a/0x6e0 [ 470.919669][T11365] handle_mm_fault+0xe36/0x13c0 [ 470.919691][T11365] ? mt_find+0x186/0x630 [ 470.919723][T11365] ? handle_mm_fault+0xe7/0x13c0 [ 470.919747][T11365] ? __pfx_handle_mm_fault+0x10/0x10 [ 470.919795][T11365] __get_user_pages+0x1679/0x2800 [ 470.919848][T11365] get_user_pages_remote+0x2f6/0xab0 [ 470.919870][T11365] ? __pfx_mtree_load+0x10/0x10 [ 470.919898][T11365] ? __pfx_get_user_pages_remote+0x10/0x10 [ 470.919920][T11365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.919951][T11365] __access_remote_vm+0x226/0x7f0 [ 470.919983][T11365] ? __pfx___access_remote_vm+0x10/0x10 [ 470.920007][T11365] ? rt_spin_unlock+0x160/0x200 [ 470.920033][T11365] generic_ptrace_pokedata+0x1e2/0x240 [ 470.920057][T11365] ? __pfx_generic_ptrace_pokedata+0x10/0x10 [ 470.920088][T11365] ptrace_request+0xa08/0x2380 [ 470.920114][T11365] ? do_raw_spin_lock+0x12b/0x2f0 [ 470.920138][T11365] ? __pfx_ptrace_request+0x10/0x10 [ 470.920158][T11365] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 470.920182][T11365] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 470.920221][T11365] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 470.920248][T11365] ? lockdep_hardirqs_on+0x7a/0x110 [ 470.920270][T11365] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 470.920292][T11365] ? wait_task_inactive+0x455/0x7d0 [ 470.920343][T11365] ? __pfx_wait_task_inactive+0x10/0x10 [ 470.920368][T11365] ? rt_read_unlock+0x16d/0x220 [ 470.920393][T11365] arch_ptrace+0x289/0x410 [ 470.920415][T11365] __se_sys_ptrace+0x150/0x3a0 [ 470.920438][T11365] ? __pfx___se_sys_ptrace+0x10/0x10 [ 470.920469][T11365] do_syscall_64+0xe2/0xf80 [ 470.920490][T11365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.920507][T11365] ? trace_irq_disable+0x37/0x100 [ 470.920529][T11365] ? clear_bhb_loop+0x60/0xb0 [ 470.920550][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.920568][T11365] RIP: 0033:0x7f55cdbaaeb9 [ 470.920584][T11365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.920601][T11365] RSP: 002b:00007f55cbdfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 470.920621][T11365] RAX: ffffffffffffffda RBX: 00007f55cde25fa0 RCX: 00007f55cdbaaeb9 [ 470.920634][T11365] RDX: 00002000000011c0 RSI: 0000000000000505 RDI: 0000000000000004 [ 470.920646][T11365] RBP: 00007f55cbdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 470.920658][T11365] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 470.920670][T11365] R13: 00007f55cde26038 R14: 00007f55cde25fa0 R15: 00007fff5fc779f8 [ 470.920701][T11365] [ 471.338640][T10568] veth0_vlan: entered promiscuous mode [ 471.354334][T10568] veth1_vlan: entered promiscuous mode [ 471.368233][ T38] INFO: task syz.0.829:8494 blocked for more than 144 seconds. [ 471.368253][ T38] Not tainted syzkaller #0 [ 471.368262][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.368272][ T38] task:syz.0.829 state:D stack:28248 pid:8494 tgid:8492 ppid:5799 task_flags:0x400140 flags:0x00080002 [ 471.368330][ T38] Call Trace: [ 471.368337][ T38] [ 471.368348][ T38] __schedule+0x1472/0x4fe0 [ 471.368402][ T38] ? __pfx___schedule+0x10/0x10 [ 471.368422][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 471.368454][ T38] rt_mutex_schedule+0x76/0xf0 [ 471.368478][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 471.368510][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 471.368531][ T38] rt_mutex_slowlock+0x2dc/0x710 [ 471.368552][ T38] ? rt_mutex_slowlock+0x1fd/0x710 [ 471.368573][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 471.368610][ T38] ? lock_acquire+0x221/0x330 [ 471.368635][ T38] ? bdev_open+0xe0/0xcc0 [ 471.368652][ T38] mutex_lock_nested+0x168/0x1d0 [ 471.368677][ T38] bdev_open+0xe0/0xcc0 [ 471.368720][ T38] bdev_file_open_by_dev+0x1be/0x240 [ 471.368743][ T38] setup_bdev_super+0x5a/0x5b0 [ 471.368770][ T38] get_tree_bdev_flags+0x389/0x4f0 [ 471.368793][ T38] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 471.368815][ T38] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 471.368836][ T38] ? cap_capable+0x123/0x440 [ 471.368952][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 471.368997][ T38] vfs_get_tree+0x92/0x2a0 [ 471.369022][ T38] do_new_mount+0x329/0xa50 [ 471.369045][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 471.369073][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 471.369096][ T38] ? ns_capable+0x89/0xe0 [ 471.369120][ T38] ? kmem_cache_free+0x18d/0x8c0 [ 471.369154][ T38] __se_sys_mount+0x31d/0x420 [ 471.369184][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 471.369214][ T38] ? __x64_sys_mount+0x20/0xc0 [ 471.369240][ T38] do_syscall_64+0xe2/0xf80 [ 471.369263][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.369280][ T38] ? trace_irq_disable+0x37/0x100 [ 471.369302][ T38] ? clear_bhb_loop+0x60/0xb0 [ 471.369324][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.369343][ T38] RIP: 0033:0x7f64fc09aeb9 [ 471.369359][ T38] RSP: 002b:00007f64fa2ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 471.369380][ T38] RAX: ffffffffffffffda RBX: 00007f64fc315fa0 RCX: 00007f64fc09aeb9 [ 471.369393][ T38] RDX: 00002000000003c0 RSI: 0000200000000400 RDI: 00002000000000c0 [ 471.369407][ T38] RBP: 00007f64fc108c1f R08: 0000000000000000 R09: 0000000000000000 [ 471.369419][ T38] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 471.369430][ T38] R13: 00007f64fc316038 R14: 00007f64fc315fa0 R15: 00007fff8c2903d8 [ 471.369459][ T38] [ 471.369492][ T38] [ 471.369492][ T38] Showing all locks held in the system: [ 471.369503][ T38] 1 lock held by khungtaskd/38: [ 471.369513][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 471.369589][ T38] 1 lock held by udevd/5165: [ 471.369601][ T38] 2 locks held by getty/5551: [ 471.369611][ T38] #0: ffff88814e4620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 471.369659][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 471.369714][ T38] 3 locks held by kworker/0:3/5796: [ 471.369725][ T38] #0: ffff88813fe55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 471.369768][ T38] #1: ffffc90004ed7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 471.369810][ T38] #2: ffff88803192f260 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 471.369855][ T38] 6 locks held by syz-executor/5798: [ 471.369871][ T38] 1 lock held by udevd/5932: [ 471.369881][ T38] #0: ffff888024d964c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 471.369924][ T38] 2 locks held by syz.0.829/8494: [ 471.369935][ T38] #0: ffff88806a4d60d0 (&type->s_umount_key#64/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0 [ 471.369986][ T38] #1: ffff888024d964c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 471.370028][ T38] 1 lock held by syz-executor/8793: [ 471.370039][ T38] #0: ffffffff8d80c0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 471.370086][ T38] 1 lock held by syz.1.1995/11346: [ 471.370095][ T38] 4 locks held by syz.3.2000/11364: [ 471.370106][ T38] [ 471.370111][ T38] ============================================= [ 471.370111][ T38] [ 471.370126][ T38] NMI backtrace for cpu 1 [ 471.370139][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 471.370160][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 471.370170][ T38] Call Trace: [ 471.370177][ T38] [ 471.370184][ T38] dump_stack_lvl+0xe8/0x150 [ 471.370208][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 471.370227][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 471.370248][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 471.370269][ T38] sys_info+0x135/0x170 [ 471.370286][ T38] watchdog+0xf90/0xfe0 [ 471.370312][ T38] ? watchdog+0x209/0xfe0 [ 471.370341][ T38] kthread+0x726/0x8b0 [ 471.370365][ T38] ? __pfx_watchdog+0x10/0x10 [ 471.370386][ T38] ? __pfx_kthread+0x10/0x10 [ 471.370404][ T38] ? rt_spin_unlock+0x14f/0x200 [ 471.370428][ T38] ? rt_spin_unlock+0x160/0x200 [ 471.370443][ T38] ? __pfx_kthread+0x10/0x10 [ 471.370465][ T38] ret_from_fork+0x51b/0xa40 [ 471.370486][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 471.370504][ T38] ? __switch_to+0xc82/0x1410 [ 471.370532][ T38] ? __pfx_kthread+0x10/0x10 [ 471.370552][ T38] ret_from_fork_asm+0x1a/0x30 [ 471.370589][ T38] [ 471.370595][ T38] Sending NMI from CPU 1 to CPUs 0: [ 471.370624][ C0] NMI backtrace for cpu 0 [ 471.370641][ C0] CPU: 0 UID: 0 PID: 5966 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 471.370659][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 471.370668][ C0] Workqueue: events_power_efficient check_lifetime [ 471.370689][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 471.370708][ C0] Code: e8 ef 8d 24 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 00 19 7d 10 e8 0b 42 65 09 89 c3 83 f8 08 73 65 [ 471.370721][ C0] RSP: 0018:ffffc900059f7940 EFLAGS: 00000293 [ 471.370734][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 471.370744][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8dbc77c0 [ 471.370753][ C0] RBP: ffffffff898a919f R08: 0000000000000000 R09: 0000000000000000 [ 471.370763][ C0] R10: dffffc0000000000 R11: ffffffff898a90e0 R12: 0000000000000002 [ 471.370773][ C0] R13: ffffffff8dbc77c0 R14: 0000000000000000 R15: 0000000000000000 [ 471.370783][ C0] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 471.370796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.370806][ C0] CR2: 00007fcfa43af3d4 CR3: 0000000037d60000 CR4: 00000000003526f0 [ 471.370820][ C0] Call Trace: [ 471.370825][ C0] [ 471.370831][ C0] lock_acquire+0x5f/0x330 [ 471.370850][ C0] ? check_lifetime+0xbf/0x970 [ 471.370869][ C0] check_lifetime+0xe0/0x970 [ 471.370885][ C0] ? check_lifetime+0xbf/0x970 [ 471.370904][ C0] ? check_lifetime+0xbf/0x970 [ 471.370920][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 471.370935][ C0] process_scheduled_works+0xaec/0x17a0 [ 471.370960][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 471.370973][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 471.370993][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.371009][ C0] ? schedule+0x90/0x360 [ 471.371029][ C0] worker_thread+0xda6/0x1360 [ 471.371054][ C0] kthread+0x726/0x8b0 [ 471.371071][ C0] ? __pfx_worker_thread+0x10/0x10 [ 471.371085][ C0] ? __pfx_kthread+0x10/0x10 [ 471.371099][ C0] ? rt_spin_unlock+0x14f/0x200 [ 471.371115][ C0] ? rt_spin_unlock+0x160/0x200 [ 471.371128][ C0] ? __pfx_kthread+0x10/0x10 [ 471.371144][ C0] ret_from_fork+0x51b/0xa40 [ 471.371160][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 471.371174][ C0] ? __switch_to+0xc82/0x1410 [ 471.371193][ C0] ? __pfx_kthread+0x10/0x10 [ 471.371209][ C0] ret_from_fork_asm+0x1a/0x30 [ 471.371234][ C0] [ 471.371626][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 471.371643][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 471.371664][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 471.371675][ T38] Call Trace: [ 471.371697][ T38] [ 471.371704][ T38] vpanic+0x1e0/0x670 [ 471.371731][ T38] panic+0xc5/0xd0 [ 471.371752][ T38] ? __pfx_panic+0x10/0x10 [ 471.371783][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 471.371805][ T38] watchdog+0xfda/0xfe0 [ 471.371831][ T38] ? watchdog+0x209/0xfe0 [ 471.371860][ T38] kthread+0x726/0x8b0 [ 471.371884][ T38] ? __pfx_watchdog+0x10/0x10 [ 471.371905][ T38] ? __pfx_kthread+0x10/0x10 [ 471.371923][ T38] ? rt_spin_unlock+0x14f/0x200 [ 471.371946][ T38] ? rt_spin_unlock+0x160/0x200 [ 471.371963][ T38] ? __pfx_kthread+0x10/0x10 [ 471.371984][ T38] ret_from_fork+0x51b/0xa40 [ 471.372004][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 471.372021][ T38] ? __switch_to+0xc82/0x1410 [ 471.372047][ T38] ? __pfx_kthread+0x10/0x10 [ 471.372069][ T38] ret_from_fork_asm+0x1a/0x30 [ 471.372106][ T38] [ 471.372503][ T38] Kernel Offset: disabled