last executing test programs: 10m28.138431484s ago: executing program 2 (id=1505): connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0x0, &(0x7f0000000100)=0x7d) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000005480)}}, 0x18) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000880)={0x5, 0x2, 0x2, 0x7, 0x8, 0x0, [{0x100, 0x1, 0xb, '\x00', 0x202}, {0x401, 0x7, 0x53, '\x00', 0x301}, {0x1, 0x0, 0x3, '\x00', 0x3402}, {0xd7, 0x163d, 0x7, '\x00', 0x502}, {0x80000001, 0x22b, 0xfffffffffffffff9, '\x00', 0x301}, {0xd, 0x2, 0x6, '\x00', 0x1009}, {0x2, 0x9, 0x7f, '\x00', 0x400}, {0x6, 0x2106, 0x81, '\x00', 0x200}]}) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca5, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@loopback, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in6=@remote, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x5}, {{@in=@loopback, 0x0, 0xff}, 0x0, @in=@multicast1, 0x7ffffc, 0x1}]}]}, 0x178}}, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x3234564e, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) (async) syz_usb_connect$uac1(0x2, 0xf1, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0x1, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x6, 0x1, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0xfd, 0x4, 0x5, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x6, 0x1, 0xfffc, 0x1d, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x8, 0x6, 0x2, 0x5, 0x3], 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x9, 0x3, "9f31"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x80, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x1002}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x6, 0xff, "e2", "13"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x1, 0xd, {0x7, 0x25, 0x1, 0x0, 0xb, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x0, 0xf9, "14", "5ad137"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x9, 0x3, 0x41, 0xdc, "c1942d", "fb5d"}, @as_header={0x7, 0x24, 0x1, 0x24, 0x7f}, @as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x5, 0x9, {0x7, 0x25, 0x1, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x9, 0x82, 0x2, 0x40, 0x4}, 0x2a, &(0x7f00000007c0)={0x5, 0xf, 0x2a, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x90, 0xff, 0x9, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x9, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xc, 0x7f, 0x400}]}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x5c0, 0xffffffff, 0x2e8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [0x0, 0x0, 0xff, 0xffffff00], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0x1fc, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4000000000004, 0x0, 0x40, 0x0, 0x0, 0xf8e74ba, 0xfe8c, 0x0, 0xb440adbb44d53f72}, {0x40}}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@uncond, 0x0, 0x1dc, 0x210, 0x0, {}, [@common=@rt={{0x138}, {0x6, [], 0x0, 0x0, 0x0, [@local, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @empty, @mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @local, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}}]}, @common=@inet=@SET3={0x34}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x61c) (async) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, 0x0) (async) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan0\x00'}) (async) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x487, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x0) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f010000000000000002000724140000000004241300052406000005240000000d240f"], 0x0) 10m19.180737788s ago: executing program 2 (id=1539): syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0x1e82002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a966d35097635122028eb919802534a9e95b3ca9a993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d50000000000000000008cb174a9e54e88c3f536ea498f6fc880ee5d12fb"]) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0x20, r2, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000080)={0xb, @raw_data="4355303869080408cd249ec7efb301198680b5be6e23aeee037757247f8e7cf0314d80d8580d64e14364154a0a387d927cd57e123ba1efbe01652a5f640684fa5e893e897ccc3074465e163176e53cd24bf2af34498cc63505008850dd4c66c27b1a79895f7fd2f1e0808bce73abcfc38c2403597d41733d28f53f05bb06b0d4f2abb107a766aeb4184284d3088a97541741bb90239de08950c97b7a438137b639689d695fd868a1a509524b4a3a3d3e5afbd859c1ec4e282a50c8b1a2d85bdb653a9ce0918200"}) ioctl$FITRIM(r3, 0xc0185879, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, 0x0, 0x2000c050) getrlimit(0xd, &(0x7f0000000100)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0088cfb", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005000000000008000100000000000900020000000000"], 0xc0}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r6, &(0x7f0000000600)=""/4099, 0x1003, 0x0) unshare(0x8040480) unshare(0x2a020480) 10m18.29242044s ago: executing program 2 (id=1541): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x7}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40a03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xa4, 0xec, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xffff0104, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2}, {0x5002, 0x0, 0x0, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x8080000}, {0x11000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0xeeee8000, 0x80a0000, 0x9}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x60000010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0) 10m17.368483884s ago: executing program 2 (id=1549): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa2\xff\xff\xff\xff\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sF\x1b\xb7\xb3\xa2\xc9<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\x10\xf5\xe5\xbas\xf6\xee\xaa\xa8\x9eo\xebF(\x9dL!vRk\xaacB\x04\xa7I\v\x9bEZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xfa\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16+<\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x9afC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03}\x9c\xee\xb3>0\xed~\xd0\xbe\xf5\x05\xda\xab\xb9f;\x1a\xb4\xb7Lu\x9fb0^\f\xb25\xed^s\x9c\xd3\x8b\x97\xc8\xbc&\xfb\x8a\x1f3I\xe0\xa6|I\xffi\x9c\x18\xe6t\xd6e\x1d\x05L_\x817\x85\x95\x13\xc8_\x7f;\x06=\x0e$D\v\xf9a\xe7[\x8c\xa1W\xa2R\x18\x92\xbc\tl\"\xeb\xad\xd8&\x10\xc4\x03\xd8\x7fmY\xb5>8\x98ekr\x1e\x0eU\xcf\x83\x10\x13\x0f\xa0\x9cE-s\x8b', 0x6) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x176d8c31) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x20, r4, 0x200000000007, 0xffffffff) r5 = syz_usb_connect$cdc_ecm(0x0, 0xef, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x1, 0x1, 0x6, 0x0, 0xc6, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "fad53efb"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xa1e6, 0xeef, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x7}, @mdlm_detail={0x56, 0x24, 0x13, 0x94, "37c0e712d6228054ef0945e2f8c48c516f21e07727ca8db9faac09c6eed85642442d6ff11b3f32fe1b74ea18f90fd2c2adddfb9ccf2ae7a182a4411603970819190db499ab2f00cabf9e97f94b3262c67568"}, @mdlm={0x15}, @mdlm={0x15}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x31, 0x8, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x5, 0x1, 0x1, 0x40, 0x81}, 0x108, &(0x7f0000000280)={0x5, 0xf, 0x108, 0x4, [@generic={0xdd, 0x10, 0x4, "23e61619041c68ac1d082128c17253be683630119251d3722394723caf3872187921d8c9f4dc8796aa3d9bf427236945a4400d13e7dd47d9e3f3b8048a1efca75d180ceb7c94510264ba90f7001d8cdd49b4cf75854b00319e10577d263efe550541464a0721dbb5681b23a4bc54e401491b8ef99b6417f69ea86f75a13af64cdb279dccf788ac39ac6997fd778077fd74292eac01e93d028feb8c60b6b9ab063eb16dc61d2313168a81bf1992132ced891988d18e5bffdc8a54db6c90eccba15975aa130feaabf639223f40718b22973e0d5977b8b3eb46a8f2"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "3f35a2d84b5af5d80ddfc52eee44e957"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x3, 0x3, 0x91a7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x8, 0xf51}]}, 0x9, [{0xa4, &(0x7f00000003c0)=@string={0xa4, 0x3, "68ec6c17e16ed093cb255fbab9dbe7f95aedfbf85c7d0db00fbbb7a7d30a726b1f979279e9e9a4a8139aec499e7308590a8a0b2dbc21ddfc860de2c4ad83c374c42260a5ddb3457f9d35ead195d17306c9356164caea332b1e415444d65cebc84731a983f22fe4aebd5b3b04ce823e2d0cd5ce8425430a1b281f299591abdd0dc29448adf2e956701bf80ba310c05a1a51746dd57c62af787f54127a3df78b2e9a7b"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x411}}, {0xd0, &(0x7f0000000700)=@string={0xd0, 0x3, "05a7b97eabe53fec6890653f237d0bf0e4203c662fd01d7923f87bba5a8d5c7d4ffd440c30d5f56e915977f389d2844b9fabd7aad4d25764fa1698c71515b62db4ac46a6fba059376605cb52842b4f047950dc5b27b89a409c93b859025534c7244f3ca18bf5dd2578f1f48bf4744eb74a1db20812ac3164d26ee90c309625d4bcc33cb7907440c053ec3da70cdf43ac7e9b71e52ced7cc7ba652e39571d5fd6d6a034196eb2601787c947f8e9c0aa49d1aedcaa56fa8139eb83c69191432a2cd0d8285e4f83d829aaa07e0d2e63"}}, {0x6, &(0x7f0000000480)=@string={0x6, 0x3, "cfb4dd3d"}}, {0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="80032398105c6e6930b66c604529e6380402d7ea9fc0ea0f1073af8aa01c210a02ea3038973279afc44f761865d39fa8efe5bc0d9671a0a2213b6c7ed5ebd20e083352f0b18f370c3724694473152d0babfd219685b162ff7d24184cfe7c975b8956cee4f61298d685383006236f2de667988d4feebdb7"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x240a}}, {0xb6, &(0x7f0000000d80)=ANY=[@ANYBLOB="b603519b375000c57905ca82fd435a5324815a1e746e3b4f3f03fd0f0a7cab9c91aead810fb4f2c84024be5a89ca0ac43c6795768b293d0d171437b9b6db1262e5a5e3e88df4e7cfe97690e6c131e3e53bccad13d3825a1e78f8f699dac30f1f6503ad96d50544f67995699177a04cfbd200db4b937de715511293442720c84fd76f345728be6848910e16a0201f1d3e3317b47ae12568898c16b7475787d5777b87787b2f812d2425b4fa449ecdcbf460f866eeb377bc1916d5bca1f7064a19b25b6e0e6ae425a693ddfe82db23bbc1c2e71f5042b2fe7807ef387341379722f6c1392816207dfc793af22d21ddcaf89f84b341254ca2a67f9a110d9fb19ab4967f659d7398bd4470590a9e5af2371de3b1b13f94f488d4b58658670399abb79d3d95052c0058a9fddbefde833115bb81e872fab85d5045bcc2bdfab67b80059c92cc25d640daf56373daa239abc973e93d1a4a2c76d5cf7cae"]}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x860}}]}) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000b80)={0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="0010d4000000d400e5411584f93d2af68d95843d7fb93ecc0518720bf386de612c9c98a110f7d5521584695f2e55704f2974d5f9c974d5a0e544728eda2647a01ed75d3d224fa5e2b7cb086e7ae9728185dc8a9fd7a322c6674e4964aae0987bf098dc01f73b3c865755e10b57c257bc866f9f813878e9ae3c722b8275741ce08a3ee12b17dc35813e10458e276b7d2fe9e81766aa098b094f9fc85f7f9769ec818e4f12c76a82b5b6a98137a9c9e87f75c10dc620b7963c92db08bea7693d503b500664740900000083153b2f03f63c50f73d7ff415d34bcde8"], &(0x7f0000000b40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x10, &(0x7f0000000bc0)={0x20, 0x3, 0xcc, "22d229036710a97b8cd5e1f8f8c43920c43d365093ec56eaecd661c24562273ddf0b4f2c355ab9e97f3cb304062f37d01a2b6bfbbdfe3f01e02d222f2f25c16683fedb33f502975110b73db4c21afabf824e1c9bd9dd19bfc642daa8987164ba5df3dae42f7d47830d9cac480f3057d835a87c97a5862096eaca4fa0cde24f1fe7fdd4fac6a95dbd943c97599852c592543b4cf3a42d4890ec8c920eae1ee0823b8b60e93ab054d0c0bb704cb0bd2ed1b98e100a082d36ff2c2d426a8a2c64a97dbedb179f839479f7fe39eb"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xd0}, &(0x7f0000000d00)={0x0, 0x8, 0x1}}) write$char_usb(r3, &(0x7f0000001300)="92", 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) 10m15.641391417s ago: executing program 2 (id=1553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 10m14.967481994s ago: executing program 2 (id=1555): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f00000000c0)) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x5f, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xa2001, 0x0) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) 10m14.481103899s ago: executing program 32 (id=1555): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, &(0x7f00000000c0)) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000040)=0x5f, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xa2001, 0x0) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) 7m5.51638343s ago: executing program 5 (id=2314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 7m5.285351558s ago: executing program 5 (id=2316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r1, 0xffffa28b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80104132, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@host, 0x2}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x10, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}, @NFT_MSG_DELSETELEM={0xf8, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc0, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5c, 0x1, "5416c178ec09c5faf07e0aa1ecba382495bc79dc34d6bbfbc85894937a6a8384444a2d1231bbb7a76ea21bde2815664d5586f325b9a480bfc84473d434711e0627f3b41de2d7d924a17cb4b8abcf5df054b4d97a813299e5"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x40, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x190}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x6f01, 0xf8}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tipc={{0x5, 0x4, 0x3, 0x1, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}}, @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x2, 0x9, 0x0, 0x3, 0x2, 0x2, 0x0, 0xe, 0x4, 0x1, 0x4e22, 0x4e24}}}}}}, 0x3a) 7m4.81718615s ago: executing program 5 (id=2319): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000080)={0x40, 0x21, 0xbb, {0xbb, 0x21, "c46c3215ab468da3ba1285cf24733a397e6d5d096ebfe5fa02ae994c12c5d9d11338a38f8cbc04c1b250f6f3b3ad34367242bea648f539942a5a3a9d81f5a8411af249ddc795738583e7c979308208ccbcbf38718e9070a6bd1dcfbb22b48f40cc2abc56e5e6a5785f01390991ac9309e73fc006833b733750cb7be81a5f78653a53367b41b1164d14f6e0a575cebecc000ac2cc33a7e7d07d5113f55781d44d40ee86f06c9131d50b25a69fb8be61c665e129b3bc8449658c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7m2.880671879s ago: executing program 5 (id=2335): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000006180)='./mnt\x00', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000002d) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) sendto$inet6(r0, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x10162, 0x0) semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff05000700"], 0x6c}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000301010100000000000028000200000008000840000000030c004a5072f020198008000200550a0008"], 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) 7m1.724465062s ago: executing program 5 (id=2343): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x58, &(0x7f0000000480)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x5, @loopback, 0x800}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x8, @empty, 0x5}]}, &(0x7f0000000540)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000840)={r1, @in={{0x2, 0x4e24, @private=0xa010102}}}, 0x84) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="23cd9ae4f31abfe69d0fbfb4996a"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = dup(r3) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x0, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0xc000, 0x0, 0x0, 0x0, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x1000000, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {}, {@allow_other}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7m1.557621283s ago: executing program 5 (id=2346): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x8, 0xfbfe, 0x2e50, 0x2, 0x3, 0xff0b, 0x200, 0x82004, 0x6, 0x2, 0x7, 0x3}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a03fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00d20f030000000000001d440000000000006b0a00fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x400, 0x0, 0x21c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x72, 0x4004, @fd=r5, 0x80000000, 0x0, 0x0, 0x5}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0x1, 0x1}) 6m45.721119138s ago: executing program 33 (id=2346): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0x8, 0xfbfe, 0x2e50, 0x2, 0x3, 0xff0b, 0x200, 0x82004, 0x6, 0x2, 0x7, 0x3}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000540)=""/238, 0xee}], 0x1, 0xfffffffd, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x400, 0x0, 0x21c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x72, 0x4004, @fd=r5, 0x80000000, 0x0, 0x0, 0x5}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0x1, 0x1}) 3m59.777823977s ago: executing program 3 (id=3041): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) pwrite64(r1, &(0x7f0000000140)='AF', 0x2, 0x8be6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x24}, 0x1c) listen(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1, 0x8db3}}, './file0\x00'}) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000100)={0x0, 0x9}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 3m58.666248645s ago: executing program 3 (id=3044): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) ptrace$getenv(0x4201, r3, 0x5, &(0x7f0000000380)) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x178) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x0, 0x5d, 0x4d, 0x0, 0x9, 0xa, 0x8, 0xe4c, 0x3}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c5080000000000000800020008"], 0x160}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r9, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f00000008c0), 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000100)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1, 0x8001, 0x4) 3m56.546475395s ago: executing program 3 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x947}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xbfff, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 3m56.297664591s ago: executing program 3 (id=3051): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x801024, &(0x7f0000000240)=ANY=[@ANYBLOB="e716f5", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00'], 0xfc, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1d0088, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) lseek(r3, 0x7ff, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0xa, {0x2, 0x0, @empty}}, 0x24) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x1, 0xa000, 0x80, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x100000000, 0x50000a}, {0xf4, 0xfffff8fc}, 0x5, [0x3, 0x3, 0x4, 0x6, 0x800000, 0x403, 0xffffffffffff0001, 0x8003, 0x8, 0x7, 0x2, 0x80, 0x2, 0x800000000522586f, 0x1, 0x7]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x4, &(0x7f0000006680)) faccessat2(r4, &(0x7f0000000200)='./file1\x00', 0x21, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) shmget$private(0x0, 0x4000, 0xec9a6abf1b831e26, &(0x7f0000256000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000005500adac2cbd7000fbdbdf2507000000", @ANYRESOCT, @ANYBLOB="330001"], 0x78}}, 0x10) 3m54.616951886s ago: executing program 3 (id=3052): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x2) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) listen(r1, 0x6) ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) listen(r0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) listen(r1, 0x2) (async) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e22, @remote}, 0x10) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) listen(r1, 0x6) (async) ppoll(&(0x7f0000000300)=[{r0, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) (async) 3m54.244976829s ago: executing program 3 (id=3054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x323ec2, 0x1e7) write$binfmt_elf64(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380002"], 0x78) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@private2, r4}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) lchown(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', r6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)={0x2000000b}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) 3m53.625399935s ago: executing program 34 (id=3054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', 0x323ec2, 0x1e7) write$binfmt_elf64(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380002"], 0x78) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r4, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x10}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@private2, r4}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) lchown(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', r6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000c40)={0x2000000b}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) 2m34.302203426s ago: executing program 0 (id=3293): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) syz_extract_tcp_res(&(0x7f00000000c0), 0x7, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@dellink={0x1b0, 0x11, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x80}, [@IFLA_LINKMODE={0x5, 0x11, 0x5b}, @IFLA_VF_PORTS={0x180, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '[/\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcc}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x28}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa8}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "454f9ea6f5b41136403f1a39564e5f78"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "70498c383322bc7c58a4403b94705284"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/vcs\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a05b6d61a3750e01bd8420b123cbfb1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2a25529162169de74adaa9bd01b21139"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4fa21b8794f717db03cd8837db79d985"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a0fe8d93a39ecb7ff01795855b2f894f"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7634d294230157f05e3e788f01c45ff7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x64}, @IFLA_PORT_VF={0x8, 0x1, 0x6e}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b80c15d502bba1080ef08c32e529d8d3"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_PROFILE={0xb, 0x2, '}@(\xd6:(\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "01e9264b3f3e89a06c11238067829946"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "03a140fc6e0552ab5d4401fe0fede874"}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x9f4}]}, 0x1b0}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, 0x0, 0x0, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x100, r1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x101001, 0x0) ioctl$USBDEVFS_BULK(r9, 0xc0105502, &(0x7f00000002c0)={{{0xf}}, 0x82, 0x8, &(0x7f00000001c0)="199166988be0251705a153d489486163a98d7bac1cd30e4179c0b965e5538d5344082fd3dc278a03ce24ff9a73e3d1bca0c86981aec2ed7271a7063df408dada93d851e41438c88f78b12e983e772fb67769357f438d9e883cff575ffa568507664664f3ec6ffda88cb280305c03628d84e123b5d7b4672ae32a5c991eaa5108dfdf"}) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 2m33.134835948s ago: executing program 0 (id=3297): setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x0, 0x10, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0xc000, 0x0, 0x0, 0x0, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000000, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@audit}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m32.832303541s ago: executing program 0 (id=3298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x19) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001009f89d64de0ab0f380010000904b8070096d1ca00e6c9bef6bad70f24bb135988dd4f16bb77a538f73323841b56ab75ba5313477ce6cb4ba3a9687d635ec2ee441b981d418d82b3f3995576d90a1bc0f7214b54744ed2"], 0x0) read$FUSE(r3, &(0x7f0000001b40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000040)={0x2, 0x5, 0x6, 0x6, 'syz1\x00', 0x5}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r5, 0x0, 0x80) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xffff}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_DELTABLE={0x168, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x5a, 0x6, "733672afb44e46ff0dcb1c227e105131fe0a5960c2bf528e6665c1b4550bbdd7d20a44a0aa6e87f69160ff37cf12c75527a4f3384c93b3f594a2da8ea3f6b1e0692723aa1e385b4806360895fccbe211d53d0b6aa5b8"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa6, 0x6, "c17345d7c0625dbeb66a557505fbc71cec53e00404462abc137642dedb130c62cf61ebbd4314a3c493212444bc09a5ffb4b618dd10864cb3c22b3bae01e70634edae0f35ca7864a1b276218683b000e9bdf91d94b13ca8054e0cbc5f712798a622f46f1336c19a4ba37abe26fcb85eea2e5d32e2a752f2c629c90b3fba82c28097758d2a5509577dba4401ef18df23ab77cd85459847b511432bdbc022f6c684cdf0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x3, 0x0, &(0x7f0000000240)="2294a6"}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r8, &(0x7f0000001400)=""/4076, 0xfec) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000280)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r4}}, 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2m29.3716402s ago: executing program 0 (id=3305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x46) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12080, 0x1, {0x3}}) (async) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r8, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x19}) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0xc) io_uring_enter(r5, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) getpeername$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x1100, 0x13, 0x800, 0x70bd25, 0x25dfdbfe, {0x5, 0x8, 0x8, 0x7, {0x4e23, 0x4e21, [0x0, 0x2, 0x9, 0xff], [0x9, 0xfffff05d, 0x3, 0x3], r9, [0x10000, 0x6]}, 0x800, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "6cdd81ae66164717d80546fff4b58e533eac6a5e258ebbbad715eb210ed4ceeec42f12bf2d447fa7f06e0acc0a394f6723583587a10e7baca2bf1060000bc4a3e4b63b18b68b6b11c2a8c975dd4c85f24cce5c578311e75bcc7a5428419ce128eee1309632e37b6a0e6ac6212f9c7627bf5140e812b91557826610dac33b70f110720ebff031686cabd16ba64996b6b0a2ac8fcae901261fb2d36ea999a13a42acacd32525ef5d2557d1da"}]}, 0x1100}, 0x1, 0x0, 0x0, 0xe00c8c0}, 0x8000) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m28.921003471s ago: executing program 0 (id=3307): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) syz_extract_tcp_res(&(0x7f00000000c0), 0x7, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@dellink={0x1b0, 0x11, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20040, 0x80}, [@IFLA_LINKMODE={0x5, 0x11, 0x5b}, @IFLA_VF_PORTS={0x180, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '[/\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xcc}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x28}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa8}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "454f9ea6f5b41136403f1a39564e5f78"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "70498c383322bc7c58a4403b94705284"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/vcs\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a05b6d61a3750e01bd8420b123cbfb1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2a25529162169de74adaa9bd01b21139"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4fa21b8794f717db03cd8837db79d985"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a0fe8d93a39ecb7ff01795855b2f894f"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xff\xff'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7634d294230157f05e3e788f01c45ff7"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x64}, @IFLA_PORT_VF={0x8, 0x1, 0x6e}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b80c15d502bba1080ef08c32e529d8d3"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_PROFILE={0xb, 0x2, '}@(\xd6:(\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "01e9264b3f3e89a06c11238067829946"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "03a140fc6e0552ab5d4401fe0fede874"}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x9f4}]}, 0x1b0}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r7, 0x0, 0x0, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x100, r1}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = openat$vcs(0xffffff9c, &(0x7f0000000180), 0x101001, 0x0) ioctl$USBDEVFS_BULK(r9, 0xc0105502, &(0x7f00000002c0)={{{0xf}}, 0x82, 0x8, &(0x7f00000001c0)="199166988be0251705a153d489486163a98d7bac1cd30e4179c0b965e5538d5344082fd3dc278a03ce24ff9a73e3d1bca0c86981aec2ed7271a7063df408dada93d851e41438c88f78b12e983e772fb67769357f438d9e883cff575ffa568507664664f3ec6ffda88cb280305c03628d84e123b5d7b4672ae32a5c991eaa5108dfdf"}) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 2m28.563012024s ago: executing program 0 (id=3309): shmctl$IPC_RMID(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, &(0x7f0000000100)=ANY=[], 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000000)={0x0, 0x9, 0x2}) 2m27.666814188s ago: executing program 35 (id=3309): shmctl$IPC_RMID(0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x206, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x18, &(0x7f0000000100)=ANY=[], 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000000)={0x0, 0x9, 0x2}) 5.731869525s ago: executing program 4 (id=3863): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 4.96341204s ago: executing program 1 (id=3872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d50}, 0x94) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4a9e, 0x0, 0x3, 0x24d}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 4.783700578s ago: executing program 6 (id=3873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "224427a0094dd132", "327cfef4c63eccd7547ac056f55d976c", '\x00', "ae2762aee2d84113"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/98, 0x62}], 0x1}, 0x4}], 0x2, 0x40000042, 0x0) 4.608287983s ago: executing program 6 (id=3874): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001c00)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x240400d5) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 4.582052442s ago: executing program 1 (id=3875): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x5, {0x1, 0x1, 0x4}, {0x0, 0x0, 0x4}, 0xfe, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 4.424430382s ago: executing program 6 (id=3876): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0xe) 4.288189422s ago: executing program 6 (id=3877): socket$nl_netfilter(0x10, 0x3, 0xc) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) 3.962928568s ago: executing program 4 (id=3878): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="209d"], 0x20}}], 0x2, 0x4000000) 3.850699812s ago: executing program 4 (id=3879): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3.492687727s ago: executing program 7 (id=3880): syz_emit_ethernet(0x3e, &(0x7f0000000400)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x88e5, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x4, 0x0, {0x5, 0x4, 0x3, 0x30, 0xe, 0x64, 0x650, 0xf9, 0x4, 0x7ff, @empty, @loopback}}}}}}, 0x0) 3.473751912s ago: executing program 1 (id=3881): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="45000000060000000000000000000000000000000000000000000000000000001c000004"], 0x45) 3.231537657s ago: executing program 1 (id=3882): syz_open_dev$usbfs(0x0, 0xb, 0x101301) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x737, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) write$binfmt_aout(r0, &(0x7f00000004c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 3.063071717s ago: executing program 7 (id=3884): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x1, 0x5, @vifc_lcl_ifindex=r2, @rand_addr=0x64010101}, 0x10) 3.002342774s ago: executing program 8 (id=3885): r0 = socket(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0xf}, {0xb, 0x1}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xfc, 0x200, 0xa}}, {0x4}}, {{0x1c, 0x1, {0xb5, 0x4, 0x18, 0xd, 0x2, 0xa, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 2.851088842s ago: executing program 8 (id=3886): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x13, 0x0, &(0x7f0000000100)) 2.833298943s ago: executing program 7 (id=3887): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001"], 0x0) getsockopt(r2, 0x8000, 0x9, &(0x7f0000000080)=""/13, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x81000) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x48880, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa0}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.702029462s ago: executing program 8 (id=3888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 2.641104496s ago: executing program 7 (id=3889): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x40045402, 0xfffffffffffffffe) 2.586100374s ago: executing program 4 (id=3890): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix={0x9, 0x41f, 0x50323234, 0x2, 0x6, 0x5, 0x4, 0x7, 0x0, 0x2, 0x1, 0x1}}) 2.491613324s ago: executing program 8 (id=3891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) 2.421498558s ago: executing program 4 (id=3892): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000480)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2.42094306s ago: executing program 7 (id=3893): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20000510) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 2.292453243s ago: executing program 6 (id=3894): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x0) connect$vsock_stream(r3, 0x0, 0x0) 2.202426612s ago: executing program 7 (id=3895): r0 = fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x4000000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20741, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)='H', 0x1}], 0x1) 2.176837814s ago: executing program 1 (id=3896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, &(0x7f00000000c0)=0x20) 1.169970068s ago: executing program 6 (id=3897): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5}, 0x10) 726.227265ms ago: executing program 1 (id=3898): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0xf, 0x0, &(0x7f0000000640)) 482.003916ms ago: executing program 8 (id=3899): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x30, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) 94.543912ms ago: executing program 4 (id=3900): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0, "00ab08653904030401010000000009c5000000efffffffff00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 0s ago: executing program 8 (id=3901): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)) kernel console output (not intermixed with test programs): sing dummy_hcd [ 948.635070][ T5968] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 948.660771][ T5968] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 948.702657][T11403] usb 7-1: Using ep0 maxpacket: 16 [ 948.712733][ T5968] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 948.728474][ T5968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.737641][T11403] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.753474][T11403] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.791327][ T5968] usb 2-1: Product: syz [ 948.796998][T11403] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 948.818498][ T5968] usb 2-1: Manufacturer: syz [ 948.824039][ T5968] usb 2-1: SerialNumber: syz [ 948.830406][T11403] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 948.843317][T11403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.870582][ T5968] usb 2-1: config 0 descriptor?? [ 948.880887][T11403] usb 7-1: config 0 descriptor?? [ 949.122655][T18434] binder: 18429:18434 ioctl 4018620d 0 returned -22 [ 949.131735][T18434] binder: 18429:18434 ioctl c0306201 80000100 returned -11 [ 949.186332][T18433] fuse: Bad value for 'fd' [ 949.497861][ T2936] team0 (unregistering): Port device team_slave_1 removed [ 949.555196][ T2936] team0 (unregistering): Port device team_slave_0 removed [ 949.634417][T18456] random: crng reseeded on system resumption [ 949.912025][T12167] Bluetooth: hci2: command tx timeout [ 950.042216][T18461] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3332'. [ 950.055323][T18461] FAULT_INJECTION: forcing a failure. [ 950.055323][T18461] name failslab, interval 1, probability 0, space 0, times 0 [ 950.084105][T18461] CPU: 1 UID: 0 PID: 18461 Comm: syz.7.3332 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 950.084132][T18461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 950.084144][T18461] Call Trace: [ 950.084153][T18461] [ 950.084162][T18461] dump_stack_lvl+0x189/0x250 [ 950.084190][T18461] ? __pfx____ratelimit+0x10/0x10 [ 950.084220][T18461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 950.084242][T18461] ? __pfx__printk+0x10/0x10 [ 950.084274][T18461] ? __pfx___might_resched+0x10/0x10 [ 950.084296][T18461] ? fs_reclaim_acquire+0x7d/0x100 [ 950.084328][T18461] should_fail_ex+0x414/0x560 [ 950.084360][T18461] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 950.084382][T18461] should_failslab+0xa8/0x100 [ 950.084410][T18461] __kvmalloc_node_noprof+0x161/0x5f0 [ 950.084448][T18461] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 950.084477][T18461] __nf_hook_entries_try_shrink+0x316/0x6e0 [ 950.084513][T18461] __nf_unregister_net_hook+0x4f6/0x700 [ 950.084547][T18461] nf_unregister_net_hooks+0xcb/0x140 [ 950.084569][T18461] ? __pfx_nft_masq_ipv4_destroy+0x10/0x10 [ 950.084594][T18461] nf_ct_netns_put+0x3b9/0x520 [ 950.084618][T18461] ? __pfx_nft_masq_ipv4_destroy+0x10/0x10 [ 950.084643][T18461] nf_tables_rule_destroy+0x119/0x1c0 [ 950.084680][T18461] nf_tables_newrule+0x24ae/0x2890 [ 950.084724][T18461] ? __pfx_nf_tables_newrule+0x10/0x10 [ 950.084753][T18461] ? nfnl_pernet+0x23/0x240 [ 950.084793][T18461] ? __nla_parse+0x40/0x60 [ 950.084818][T18461] nfnetlink_rcv+0x1132/0x2520 [ 950.084882][T18461] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 950.084929][T18461] ? ref_tracker_free+0x63a/0x7d0 [ 950.084991][T18461] ? __netlink_deliver_tap+0x807/0x850 [ 950.085025][T18461] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.085048][T18461] ? netlink_deliver_tap+0x2e/0x1b0 [ 950.085078][T18461] netlink_unicast+0x75b/0x8d0 [ 950.085111][T18461] netlink_sendmsg+0x805/0xb30 [ 950.085146][T18461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.085173][T18461] ? __import_iovec+0x5d4/0x7f0 [ 950.085194][T18461] ? aa_sock_msg_perm+0x94/0x160 [ 950.085225][T18461] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 950.085254][T18461] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.085279][T18461] __sock_sendmsg+0x21c/0x270 [ 950.085314][T18461] ____sys_sendmsg+0x505/0x830 [ 950.085346][T18461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 950.085387][T18461] ___sys_sendmsg+0x21f/0x2a0 [ 950.085415][T18461] ? __pfx____sys_sendmsg+0x10/0x10 [ 950.085482][T18461] ? __fget_files+0x2a/0x420 [ 950.085508][T18461] ? __fget_files+0x3a0/0x420 [ 950.085540][T18461] __sys_sendmsg+0x164/0x220 [ 950.085566][T18461] ? __pfx___sys_sendmsg+0x10/0x10 [ 950.085609][T18461] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 950.085640][T18461] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.085656][T18461] __do_fast_syscall_32+0xb6/0x2b0 [ 950.085668][T18461] ? lockdep_hardirqs_on+0x9c/0x150 [ 950.085685][T18461] do_fast_syscall_32+0x34/0x80 [ 950.085703][T18461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 950.085727][T18461] RIP: 0023:0xf7fc2539 [ 950.085744][T18461] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 950.085762][T18461] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 950.085784][T18461] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 950.085792][T18461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 950.085798][T18461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 950.085804][T18461] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 950.085810][T18461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 950.085826][T18461] [ 950.925043][ T5968] usb 2-1: USB disconnect, device number 45 [ 951.310777][T18391] chnl_net:caif_netlink_parms(): no params data found [ 951.474202][T11403] usbhid 7-1:0.0: can't add hid device: -71 [ 951.481174][T11403] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 951.499706][T11403] usb 7-1: USB disconnect, device number 38 [ 951.707658][T18391] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.734727][T18391] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.769000][T18391] bridge_slave_0: entered allmulticast mode [ 951.824382][T18391] bridge_slave_0: entered promiscuous mode [ 952.031948][T12167] Bluetooth: hci2: command tx timeout [ 952.101670][T18391] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.114363][T18391] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.131894][T18391] bridge_slave_1: entered allmulticast mode [ 952.138852][T18391] bridge_slave_1: entered promiscuous mode [ 952.325928][T18391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.462178][T18480] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 953.058873][T18492] loop6: detected capacity change from 0 to 7 [ 953.070605][T18492] Dev loop6: unable to read RDB block 7 [ 953.086191][T18492] loop6: unable to read partition table [ 953.106962][T18492] loop6: partition table beyond EOD, truncated [ 953.131949][T18492] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 954.270791][T18498] netlink: 'syz.1.3339': attribute type 2 has an invalid length. [ 954.778601][T18391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.818129][T18498] : entered promiscuous mode [ 955.017582][T18391] team0: Port device team_slave_0 added [ 955.030194][T18391] team0: Port device team_slave_1 added [ 955.148539][T18391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.172653][T18391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.222539][T18391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.236336][T18391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.245512][T18391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.319469][T18391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.635525][ T5940] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 955.861969][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 955.874358][ T5940] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 955.885248][ T5940] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 955.901873][ T5940] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 955.911177][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.922388][ T5940] usb 2-1: Product: syz [ 955.926544][ T5940] usb 2-1: Manufacturer: syz [ 955.931113][ T5940] usb 2-1: SerialNumber: syz [ 955.970175][ T5940] usb 2-1: config 0 descriptor?? [ 956.195456][T18526] fuse: Bad value for 'fd' [ 956.490799][T18391] hsr_slave_0: entered promiscuous mode [ 956.514240][T18391] hsr_slave_1: entered promiscuous mode [ 956.654604][T18391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 956.686429][T18391] Cannot create hsr debugfs directory [ 956.769744][T18541] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3347'. [ 957.853676][T18391] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 957.889001][T18559] loop2: detected capacity change from 0 to 7 [ 957.900365][T18559] Dev loop2: unable to read RDB block 7 [ 957.906345][T18559] loop2: AHDI p1 p2 p3 [ 957.910705][T18559] loop2: partition table partially beyond EOD, truncated [ 957.918602][T18559] loop2: p1 start 1601398130 is beyond EOD, truncated [ 957.925660][T18559] loop2: p2 start 1702059890 is beyond EOD, truncated [ 958.011316][T18391] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 958.070454][T18391] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 958.158310][T18391] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 958.298629][T18573] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3355'. [ 958.386262][T18573] FAULT_INJECTION: forcing a failure. [ 958.386262][T18573] name failslab, interval 1, probability 0, space 0, times 0 [ 958.448328][T18573] CPU: 0 UID: 0 PID: 18573 Comm: syz.7.3355 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 958.448355][T18573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 958.448368][T18573] Call Trace: [ 958.448377][T18573] [ 958.448386][T18573] dump_stack_lvl+0x189/0x250 [ 958.448415][T18573] ? __pfx____ratelimit+0x10/0x10 [ 958.448447][T18573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.448472][T18573] ? __pfx__printk+0x10/0x10 [ 958.448506][T18573] ? __pfx___might_resched+0x10/0x10 [ 958.448535][T18573] should_fail_ex+0x414/0x560 [ 958.448569][T18573] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 958.448592][T18573] should_failslab+0xa8/0x100 [ 958.448638][T18573] __kvmalloc_node_noprof+0x161/0x5f0 [ 958.448665][T18573] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 958.448694][T18573] __nf_hook_entries_try_shrink+0x316/0x6e0 [ 958.448733][T18573] __nf_unregister_net_hook+0x4f6/0x700 [ 958.448767][T18573] nf_unregister_net_hooks+0xcb/0x140 [ 958.448792][T18573] ? __pfx_nft_masq_ipv4_destroy+0x10/0x10 [ 958.448818][T18573] nf_defrag_ipv4_disable+0x95/0xe0 [ 958.448841][T18573] nf_ct_netns_put+0x3c1/0x520 [ 958.448866][T18573] ? __pfx_nft_masq_ipv4_destroy+0x10/0x10 [ 958.448891][T18573] nf_tables_rule_destroy+0x119/0x1c0 [ 958.448929][T18573] nf_tables_newrule+0x24ae/0x2890 [ 958.448972][T18573] ? __pfx_nf_tables_newrule+0x10/0x10 [ 958.449001][T18573] ? nfnl_pernet+0x23/0x240 [ 958.449038][T18573] ? __nla_parse+0x40/0x60 [ 958.449064][T18573] nfnetlink_rcv+0x1132/0x2520 [ 958.449128][T18573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 958.449176][T18573] ? ref_tracker_free+0x63a/0x7d0 [ 958.449239][T18573] ? __netlink_deliver_tap+0x807/0x850 [ 958.449274][T18573] ? netlink_deliver_tap+0x2e/0x1b0 [ 958.449297][T18573] ? netlink_deliver_tap+0x2e/0x1b0 [ 958.449330][T18573] netlink_unicast+0x75b/0x8d0 [ 958.449365][T18573] netlink_sendmsg+0x805/0xb30 [ 958.449398][T18573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.449425][T18573] ? __import_iovec+0x5d4/0x7f0 [ 958.449447][T18573] ? aa_sock_msg_perm+0x94/0x160 [ 958.449478][T18573] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 958.449508][T18573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.449533][T18573] __sock_sendmsg+0x21c/0x270 [ 958.449568][T18573] ____sys_sendmsg+0x505/0x830 [ 958.449607][T18573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.449651][T18573] ___sys_sendmsg+0x21f/0x2a0 [ 958.449679][T18573] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.449744][T18573] ? __fget_files+0x2a/0x420 [ 958.449769][T18573] ? __fget_files+0x3a0/0x420 [ 958.449806][T18573] __sys_sendmsg+0x164/0x220 [ 958.449835][T18573] ? __pfx___sys_sendmsg+0x10/0x10 [ 958.449877][T18573] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 958.449909][T18573] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.449941][T18573] __do_fast_syscall_32+0xb6/0x2b0 [ 958.449963][T18573] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.449997][T18573] do_fast_syscall_32+0x34/0x80 [ 958.450018][T18573] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.450042][T18573] RIP: 0023:0xf7fc2539 [ 958.450059][T18573] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 958.450077][T18573] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 958.450097][T18573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 958.450110][T18573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.450122][T18573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.450135][T18573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 958.450147][T18573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.450178][T18573] [ 959.223148][T18391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.375153][T18391] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.558620][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.565837][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.630400][ T5940] usb 2-1: USB disconnect, device number 46 [ 959.751047][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.758182][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.945703][T18391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.105932][T18610] loop2: detected capacity change from 0 to 7 [ 960.142517][T18610] Dev loop2: unable to read RDB block 7 [ 960.148162][T18610] loop2: AHDI p1 p2 p3 [ 960.152786][T18610] loop2: partition table partially beyond EOD, truncated [ 960.160399][T18610] loop2: p1 start 1601398130 is beyond EOD, truncated [ 960.167567][T18610] loop2: p2 start 1702059890 is beyond EOD, truncated [ 960.465075][T18612] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3359'. [ 960.527086][T18391] veth0_vlan: entered promiscuous mode [ 960.688198][T18391] veth1_vlan: entered promiscuous mode [ 960.904954][T18391] veth0_macvtap: entered promiscuous mode [ 961.033589][T18391] veth1_macvtap: entered promiscuous mode [ 961.252067][T18391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.314548][T18391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.380949][T18621] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3362'. [ 961.437334][T18391] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.480295][T18391] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.572620][T18391] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.591075][T18391] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.920858][T18635] loop6: detected capacity change from 0 to 7 [ 961.936236][ T5849] Dev loop6: unable to read RDB block 7 [ 961.953060][ T5849] loop6: unable to read partition table [ 961.977021][ T5849] loop6: partition table beyond EOD, truncated [ 962.468411][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.481629][T18635] Dev loop6: unable to read RDB block 7 [ 962.492224][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.559485][T18635] loop6: unable to read partition table [ 962.582094][T18635] loop6: partition table beyond EOD, truncated [ 962.592128][T18635] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 962.638478][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.667169][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.683475][T18640] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 962.705653][ T5972] IPVS: starting estimator thread 0... [ 962.842180][T18644] IPVS: using max 27 ests per chain, 64800 per kthread [ 963.083209][T18651] loop6: detected capacity change from 0 to 7 [ 963.139275][T18651] Dev loop6: unable to read RDB block 7 [ 963.169727][T18651] loop6: AHDI p3 p4 [ 963.222023][T18651] loop6: partition table partially beyond EOD, truncated [ 963.243533][T18651] loop6: p3 start 1869967406 is beyond EOD, truncated [ 963.912603][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 964.101860][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 964.101864][ T5972] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 964.221944][ T10] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 964.265061][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.290339][ T5972] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.300570][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 964.302682][ T5972] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 964.384043][ T5972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.432340][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 964.464865][ T5972] usb 7-1: config 0 descriptor?? [ 964.508058][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.634665][ T10] usb 2-1: Product: syz [ 964.638881][ T10] usb 2-1: Manufacturer: syz [ 964.749142][ T10] usb 2-1: SerialNumber: syz [ 964.831971][ T5972] usbhid 7-1:0.0: can't add hid device: -71 [ 964.832783][ T10] usb 2-1: config 0 descriptor?? [ 964.837982][ T5972] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 964.987043][ T5972] usb 7-1: USB disconnect, device number 39 [ 965.192266][T18661] fuse: Bad value for 'fd' [ 965.582933][T18708] pimreg: entered allmulticast mode [ 965.633721][T18709] pimreg: left allmulticast mode [ 965.651053][T18688] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3375'. [ 967.440906][ T10] usb 2-1: USB disconnect, device number 47 [ 967.845927][ T5940] IPVS: starting estimator thread 0... [ 967.855251][T18735] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 967.981888][T18740] IPVS: using max 50 ests per chain, 120000 per kthread [ 968.003421][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3385'. [ 968.040449][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3385'. [ 968.302451][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3385'. [ 968.362001][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3385'. [ 968.560945][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3385'. [ 968.580558][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3385'. [ 969.101132][T18755] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 970.082570][T18784] loop6: detected capacity change from 0 to 7 [ 970.117886][T18784] Dev loop6: unable to read RDB block 7 [ 970.211565][T18784] loop6: unable to read partition table [ 970.222252][T18784] loop6: partition table beyond EOD, truncated [ 970.273830][T18784] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 970.326826][T18790] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3397'. [ 970.717607][T18786] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3394'. [ 971.880974][T18816] loop4: detected capacity change from 0 to 7 [ 971.915517][T18816] Dev loop4: unable to read RDB block 7 [ 971.937689][T18816] loop4: unable to read partition table [ 971.963885][T18816] loop4: partition table beyond EOD, truncated [ 971.975929][T18809] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 971.984377][T18816] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 971.991848][ T43] IPVS: starting estimator thread 0... [ 972.141977][T18819] IPVS: using max 28 ests per chain, 67200 per kthread [ 972.822438][ T5972] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 972.963780][T18836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 972.997533][ T5972] usb 2-1: Using ep0 maxpacket: 16 [ 973.009455][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.040779][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.087205][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 973.106738][ T5972] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 973.126138][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.151093][ T5972] usb 2-1: config 0 descriptor?? [ 973.507418][T18845] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.515465][T18845] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.520045][T18849] loop6: detected capacity change from 0 to 7 [ 973.536338][ T5849] Dev loop6: unable to read RDB block 7 [ 973.547452][ T5849] loop6: unable to read partition table [ 973.555028][ T5849] loop6: partition table beyond EOD, truncated [ 973.575131][T18849] Dev loop6: unable to read RDB block 7 [ 973.580759][T18849] loop6: unable to read partition table [ 973.597981][T18849] loop6: partition table beyond EOD, truncated [ 973.614975][T18849] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 973.693536][T18845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.709358][T18845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.889042][T18845] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.899183][T18845] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.908255][T18845] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.917819][T18845] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.088145][ T5972] usbhid 2-1:0.0: can't add hid device: -71 [ 974.096197][ T5972] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 974.133005][ T5972] usb 2-1: USB disconnect, device number 48 [ 974.360140][T18862] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3410'. [ 975.091667][T18878] loop4: detected capacity change from 0 to 7 [ 975.105039][T18878] Dev loop4: unable to read RDB block 7 [ 975.122495][T18878] loop4: unable to read partition table [ 975.132773][T18878] loop4: partition table beyond EOD, truncated [ 975.159185][T18878] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 975.312756][T18885] loop2: detected capacity change from 0 to 7 [ 975.321989][ T43] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 975.325348][T18885] Dev loop2: unable to read RDB block 7 [ 975.337792][T18885] loop2: AHDI p1 p2 p3 [ 975.347487][T18885] loop2: partition table partially beyond EOD, truncated [ 975.356425][T18885] loop2: p1 start 1601398130 is beyond EOD, truncated [ 975.370164][T18885] loop2: p2 start 1702059890 is beyond EOD, truncated [ 975.964115][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 976.320600][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.334677][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.354591][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 976.373179][ T43] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 976.385400][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.415970][ T43] usb 7-1: config 0 descriptor?? [ 976.524276][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 976.524294][ T30] audit: type=1800 audit(1751935508.254:551): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3418" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 976.721018][T18906] loop6: detected capacity change from 0 to 7 [ 976.728565][T18906] Dev loop6: unable to read RDB block 7 [ 976.735409][T18906] loop6: unable to read partition table [ 976.743201][T18906] loop6: partition table beyond EOD, truncated [ 976.752218][T18906] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 976.868302][ T43] usbhid 7-1:0.0: can't add hid device: -71 [ 976.878428][ T43] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 976.918754][ T43] usb 7-1: USB disconnect, device number 40 [ 976.941034][T18908] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 977.366988][ T43] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 977.613476][T18928] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3425'. [ 977.738372][ T43] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 977.748966][ T43] usb 7-1: config 0 has no interface number 0 [ 977.770302][ T43] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.785715][ T43] usb 7-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.811471][ T43] usb 7-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 977.943517][ T43] usb 7-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 977.976043][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.012142][ T43] usb 7-1: config 0 descriptor?? [ 978.428077][ T43] uclogic 0003:28BD:0905.0020: interface is invalid, ignoring [ 978.541935][ T5972] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 978.733536][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.749819][T18911] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 978.758668][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 978.767915][T18948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 978.784237][ T5972] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 978.820653][T11395] usb 7-1: USB disconnect, device number 41 [ 978.835010][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.896840][ T5972] usb 2-1: config 0 descriptor?? [ 979.338763][ T5972] kovaplus 0003:1E7D:2D50.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 979.520143][T18939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.562590][T18939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.836491][T18956] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 979.867720][T18956] FAULT_INJECTION: forcing a failure. [ 979.867720][T18956] name failslab, interval 1, probability 0, space 0, times 0 [ 979.913520][T18956] CPU: 1 UID: 0 PID: 18956 Comm: syz.4.3432 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 979.913546][T18956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.913559][T18956] Call Trace: [ 979.913567][T18956] [ 979.913575][T18956] dump_stack_lvl+0x189/0x250 [ 979.913604][T18956] ? __pfx____ratelimit+0x10/0x10 [ 979.913632][T18956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 979.913655][T18956] ? __pfx__printk+0x10/0x10 [ 979.913686][T18956] ? __pfx___might_resched+0x10/0x10 [ 979.913708][T18956] ? fs_reclaim_acquire+0x7d/0x100 [ 979.913738][T18956] should_fail_ex+0x414/0x560 [ 979.913771][T18956] should_failslab+0xa8/0x100 [ 979.913798][T18956] __kmalloc_node_noprof+0xd1/0x4e0 [ 979.913820][T18956] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 979.913852][T18956] __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 979.913890][T18956] ? percpu_ref_get_many+0x19/0x140 [ 979.913929][T18956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 979.913958][T18956] ? memcpy_and_pad+0x48/0x80 [ 979.913990][T18956] __vmalloc_node_noprof+0xc2/0x110 [ 979.914016][T18956] ? copy_process+0x544/0x3b80 [ 979.914038][T18956] ? copy_process+0x544/0x3b80 [ 979.914064][T18956] dup_task_struct+0x3e7/0x860 [ 979.914093][T18956] copy_process+0x544/0x3b80 [ 979.914146][T18956] ? __pfx_copy_process+0x10/0x10 [ 979.914182][T18956] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 979.914203][T18956] vhost_task_create+0x1c4/0x290 [ 979.914231][T18956] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 979.914253][T18956] ? __pfx_vhost_task_create+0x10/0x10 [ 979.914277][T18956] ? is_bpf_text_address+0x26/0x2b0 [ 979.914308][T18956] ? __pfx_vhost_task_fn+0x10/0x10 [ 979.914360][T18956] kvm_mmu_post_init_vm+0x147/0x2b0 [ 979.914388][T18956] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 979.914423][T18956] ? __mutex_trylock_common+0x153/0x260 [ 979.914450][T18956] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 979.914475][T18956] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.914505][T18956] ? rcu_is_watching+0x15/0xb0 [ 979.914528][T18956] ? look_up_lock_class+0x74/0x170 [ 979.914559][T18956] ? register_lock_class+0x51/0x320 [ 979.914584][T18956] ? __lock_acquire+0xab9/0xd20 [ 979.914632][T18956] kvm_vcpu_ioctl+0x95c/0xe90 [ 979.914663][T18956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 979.914688][T18956] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 979.914734][T18956] ? __lock_acquire+0xab9/0xd20 [ 979.914772][T18956] kvm_vcpu_compat_ioctl+0x203/0x390 [ 979.914801][T18956] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 979.914828][T18956] ? __fget_files+0x3a0/0x420 [ 979.914853][T18956] ? __fget_files+0x2a/0x420 [ 979.914880][T18956] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 979.914904][T18956] __ia32_compat_sys_ioctl+0x540/0x840 [ 979.914929][T18956] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 979.914950][T18956] ? __fget_files+0x3a0/0x420 [ 979.914981][T18956] ? fput+0xa0/0xd0 [ 979.915009][T18956] ? ksys_write+0x22a/0x250 [ 979.915040][T18956] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 979.915071][T18956] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.915102][T18956] __do_fast_syscall_32+0xb6/0x2b0 [ 979.915123][T18956] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.915156][T18956] do_fast_syscall_32+0x34/0x80 [ 979.915176][T18956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.915200][T18956] RIP: 0023:0xf7fa1539 [ 979.915218][T18956] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 979.915235][T18956] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 979.915257][T18956] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae80 [ 979.915271][T18956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 979.915283][T18956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 979.915294][T18956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 979.915307][T18956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 979.915341][T18956] [ 979.918155][T18956] syz.4.3432: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 980.323665][ T5972] kovaplus 0003:1E7D:2D50.0021: couldn't init struct kovaplus_device [ 980.349260][T18956] ,cpuset=/,mems_allowed=0-1 [ 980.358624][ T5972] kovaplus 0003:1E7D:2D50.0021: couldn't install mouse [ 980.365742][T18956] CPU: 1 UID: 0 PID: 18956 Comm: syz.4.3432 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 980.365765][T18956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 980.365778][T18956] Call Trace: [ 980.365787][T18956] [ 980.365796][T18956] dump_stack_lvl+0x189/0x250 [ 980.365825][T18956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.365846][T18956] ? __pfx__printk+0x10/0x10 [ 980.365869][T18956] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 980.365892][T18956] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 980.365916][T18956] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 980.365940][T18956] warn_alloc+0x214/0x310 [ 980.365964][T18956] ? __pfx___might_resched+0x10/0x10 [ 980.365983][T18956] ? fs_reclaim_acquire+0x7d/0x100 [ 980.366008][T18956] ? __pfx_warn_alloc+0x10/0x10 [ 980.366036][T18956] ? rcu_is_watching+0x15/0xb0 [ 980.366057][T18956] ? trace_kmalloc+0x1f/0xd0 [ 980.366073][T18956] ? __kmalloc_node_noprof+0x293/0x4e0 [ 980.366092][T18956] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 980.366120][T18956] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 980.366168][T18956] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 980.366193][T18956] ? memcpy_and_pad+0x48/0x80 [ 980.366221][T18956] __vmalloc_node_noprof+0xc2/0x110 [ 980.366242][T18956] ? copy_process+0x544/0x3b80 [ 980.366262][T18956] ? copy_process+0x544/0x3b80 [ 980.366284][T18956] dup_task_struct+0x3e7/0x860 [ 980.366317][T18956] copy_process+0x544/0x3b80 [ 980.366362][T18956] ? __pfx_copy_process+0x10/0x10 [ 980.366393][T18956] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 980.366413][T18956] vhost_task_create+0x1c4/0x290 [ 980.366437][T18956] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 980.366456][T18956] ? __pfx_vhost_task_create+0x10/0x10 [ 980.366478][T18956] ? is_bpf_text_address+0x26/0x2b0 [ 980.366504][T18956] ? __pfx_vhost_task_fn+0x10/0x10 [ 980.366543][T18956] kvm_mmu_post_init_vm+0x147/0x2b0 [ 980.366567][T18956] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 980.366597][T18956] ? __mutex_trylock_common+0x153/0x260 [ 980.366621][T18956] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 980.366643][T18956] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 980.366668][T18956] ? rcu_is_watching+0x15/0xb0 [ 980.366687][T18956] ? look_up_lock_class+0x74/0x170 [ 980.366715][T18956] ? register_lock_class+0x51/0x320 [ 980.366739][T18956] ? __lock_acquire+0xab9/0xd20 [ 980.366786][T18956] kvm_vcpu_ioctl+0x95c/0xe90 [ 980.366814][T18956] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 980.366836][T18956] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 980.366876][T18956] ? __lock_acquire+0xab9/0xd20 [ 980.366909][T18956] kvm_vcpu_compat_ioctl+0x203/0x390 [ 980.366934][T18956] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 980.366957][T18956] ? __fget_files+0x3a0/0x420 [ 980.366978][T18956] ? __fget_files+0x2a/0x420 [ 980.367003][T18956] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 980.367025][T18956] __ia32_compat_sys_ioctl+0x540/0x840 [ 980.367059][T18956] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 980.367079][T18956] ? __fget_files+0x3a0/0x420 [ 980.367106][T18956] ? fput+0xa0/0xd0 [ 980.367131][T18956] ? ksys_write+0x22a/0x250 [ 980.367156][T18956] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 980.367184][T18956] ? lockdep_hardirqs_on+0x9c/0x150 [ 980.367211][T18956] __do_fast_syscall_32+0xb6/0x2b0 [ 980.367229][T18956] ? lockdep_hardirqs_on+0x9c/0x150 [ 980.367259][T18956] do_fast_syscall_32+0x34/0x80 [ 980.367275][T18956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 980.367296][T18956] RIP: 0023:0xf7fa1539 [ 980.367315][T18956] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 980.367329][T18956] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 980.367347][T18956] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae80 [ 980.367359][T18956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 980.367369][T18956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 980.367379][T18956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 980.367390][T18956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 980.367414][T18956] [ 980.367573][T18956] Mem-Info: [ 980.901157][ T5972] kovaplus 0003:1E7D:2D50.0021: probe with driver kovaplus failed with error -71 [ 980.931204][T18956] active_anon:8124 inactive_anon:0 isolated_anon:0 [ 980.931204][T18956] active_file:19578 inactive_file:40232 isolated_file:0 [ 980.931204][T18956] unevictable:784 dirty:464 writeback:0 [ 980.931204][T18956] slab_reclaimable:11241 slab_unreclaimable:107525 [ 980.931204][T18956] mapped:31077 shmem:1401 pagetables:1684 [ 980.931204][T18956] sec_pagetables:0 bounce:0 [ 980.931204][T18956] kernel_misc_reclaimable:0 [ 980.931204][T18956] free:1285202 free_pcp:14193 free_cma:0 [ 980.990565][ T5972] usb 2-1: USB disconnect, device number 49 [ 981.047960][T18976] loop6: detected capacity change from 0 to 7 [ 981.056067][T18956] Node 0 active_anon:32696kB inactive_anon:0kB active_file:78288kB inactive_file:160724kB unevictable:1600kB isolated(anon):0kB isolated(file):0kB mapped:124284kB dirty:1852kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13416kB pagetables:6680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 981.092398][T18976] Dev loop6: unable to read RDB block 7 [ 981.105442][T18976] loop6: AHDI p3 p4 [ 981.112099][T18976] loop6: partition table partially beyond EOD, truncated [ 981.141253][T18976] loop6: p3 start 1869967406 is beyond EOD, truncated [ 981.181883][T18956] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 981.191469][T18979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3438'. [ 981.282188][T18956] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 981.384529][T18956] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 981.394639][T18956] Node 0 DMA32 free:1214092kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33052kB inactive_anon:0kB active_file:78288kB inactive_file:159144kB unevictable:7100kB writepending:1852kB present:3129332kB managed:2558408kB mlocked:5664kB bounce:0kB free_pcp:43640kB local_pcp:21568kB free_cma:0kB [ 981.488807][T18956] lowmem_reserve[]: 0 0 1 1 1 [ 981.512495][T18956] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 981.692178][T18956] lowmem_reserve[]: 0 0 0 0 0 [ 981.709183][T18956] Node 1 Normal free:3905444kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13344kB local_pcp:13344kB free_cma:0kB [ 981.874253][T18956] lowmem_reserve[]: 0 0 0 0 0 [ 981.889127][T18956] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 981.945186][T18956] Node 0 DMA32: 302*4kB (UME) 383*8kB (UM) 577*16kB (UME) 456*32kB (UME) 232*64kB (UME) 63*128kB (UME) 176*256kB (UM) 89*512kB (UM) 39*1024kB (UME) 1*2048kB (M) 251*4096kB (UM) = 1211712kB [ 982.044442][T18956] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 982.130504][T18956] Node 1 Normal: 167*4kB (UME) 43*8kB (UME) 53*16kB (UME) 239*32kB (UME) 92*64kB (UME) 19*128kB (UME) 10*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3905444kB [ 982.215604][T18991] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3439'. [ 982.259084][T18956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 982.277235][T19001] loop6: detected capacity change from 0 to 7 [ 982.308772][T19001] Dev loop6: unable to read RDB block 7 [ 982.331881][T18956] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 982.334469][T19001] loop6: unable to read partition table [ 982.397468][T19001] loop6: partition table beyond EOD, truncated [ 982.401936][T18956] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 982.448271][T18956] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 982.466045][T19004] loop4: detected capacity change from 0 to 7 [ 982.474372][T18956] 61207 total pagecache pages [ 982.609367][ T6038] Dev loop4: unable to read RDB block 7 [ 982.618899][T19001] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 982.628867][ T6038] loop4: unable to read partition table [ 982.652159][T18956] 0 pages in swap cache [ 982.663964][T18956] Free swap = 124996kB [ 982.677993][ T6038] loop4: partition table beyond EOD, truncated [ 982.685953][T19004] Dev loop4: unable to read RDB block 7 [ 982.691510][T19004] loop4: unable to read partition table [ 982.704604][T19004] loop4: partition table beyond EOD, truncated [ 982.719434][T19004] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 982.740357][T18956] Total swap = 124996kB [ 982.744805][T18956] 2097051 pages RAM [ 982.748625][T18956] 0 pages HighMem/MovableOnly [ 982.789225][T18956] 425407 pages reserved [ 982.797355][T18956] 0 pages cma reserved [ 984.428572][T19036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 984.974421][T19052] loop2: detected capacity change from 0 to 7 [ 985.529646][T19052] Dev loop2: unable to read RDB block 7 [ 985.539750][T19052] loop2: AHDI p1 p2 p3 [ 985.575642][T19052] loop2: partition table partially beyond EOD, truncated [ 985.620831][T19052] loop2: p1 start 1601398130 is beyond EOD, truncated [ 985.903502][T19052] loop2: p2 start 1702059890 is beyond EOD, truncated [ 986.308487][T19075] loop6: detected capacity change from 0 to 7 [ 986.334327][T19075] Dev loop6: unable to read RDB block 7 [ 986.365724][T19075] loop6: unable to read partition table [ 986.397162][T19075] loop6: partition table beyond EOD, truncated [ 986.430115][T19075] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 986.992954][T19081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 987.026063][T19081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 987.424691][T19099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3459'. [ 987.830494][T19103] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3460'. [ 988.269663][T19117] FAULT_INJECTION: forcing a failure. [ 988.269663][T19117] name failslab, interval 1, probability 0, space 0, times 0 [ 988.295707][T19117] CPU: 0 UID: 0 PID: 19117 Comm: syz.4.3466 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 988.295732][T19117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 988.295743][T19117] Call Trace: [ 988.295757][T19117] [ 988.295766][T19117] dump_stack_lvl+0x189/0x250 [ 988.295794][T19117] ? __pfx____ratelimit+0x10/0x10 [ 988.295823][T19117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 988.295847][T19117] ? __pfx__printk+0x10/0x10 [ 988.295879][T19117] ? __pfx___might_resched+0x10/0x10 [ 988.295906][T19117] should_fail_ex+0x414/0x560 [ 988.295938][T19117] should_failslab+0xa8/0x100 [ 988.295965][T19117] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 988.295989][T19117] ? __alloc_skb+0x112/0x2d0 [ 988.296016][T19117] __alloc_skb+0x112/0x2d0 [ 988.296041][T19117] netlink_sendmsg+0x5c6/0xb30 [ 988.296073][T19117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.296098][T19117] ? __import_iovec+0x5d4/0x7f0 [ 988.296118][T19117] ? aa_sock_msg_perm+0x94/0x160 [ 988.296147][T19117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 988.296177][T19117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.296201][T19117] __sock_sendmsg+0x21c/0x270 [ 988.296235][T19117] ____sys_sendmsg+0x505/0x830 [ 988.296266][T19117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 988.296307][T19117] ___sys_sendmsg+0x21f/0x2a0 [ 988.296335][T19117] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.296396][T19117] ? __fget_files+0x2a/0x420 [ 988.296422][T19117] ? __fget_files+0x3a0/0x420 [ 988.296458][T19117] __sys_sendmsg+0x164/0x220 [ 988.296486][T19117] ? __pfx___sys_sendmsg+0x10/0x10 [ 988.296525][T19117] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 988.296558][T19117] ? lockdep_hardirqs_on+0x9c/0x150 [ 988.296591][T19117] __do_fast_syscall_32+0xb6/0x2b0 [ 988.296613][T19117] ? lockdep_hardirqs_on+0x9c/0x150 [ 988.296644][T19117] do_fast_syscall_32+0x34/0x80 [ 988.296663][T19117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 988.296686][T19117] RIP: 0023:0xf7fa1539 [ 988.296701][T19117] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 988.296711][T19117] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 988.296724][T19117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 988.296731][T19117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 988.296738][T19117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 988.296744][T19117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 988.296755][T19117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 988.296770][T19117] [ 988.983888][T19127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 989.449810][T19141] loop6: detected capacity change from 0 to 7 [ 989.490690][T19141] Dev loop6: unable to read RDB block 7 [ 989.588399][T19141] loop6: unable to read partition table [ 989.598719][T19141] loop6: partition table beyond EOD, truncated [ 989.634546][T19141] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 990.264865][T19162] pimreg: entered allmulticast mode [ 990.275745][T19162] pimreg: left allmulticast mode [ 992.120136][T19183] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3478'. [ 992.865190][T19196] usb usb8: usbfs: process 19196 (syz.6.3481) did not claim interface 0 before use [ 992.889916][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.896638][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.441858][T11403] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 993.609974][T11403] usb 7-1: config 0 has no interfaces? [ 993.623636][T11403] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 993.633039][T11403] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.641539][T11403] usb 7-1: Product: syz [ 993.655220][T11403] usb 7-1: Manufacturer: syz [ 993.680523][T11403] usb 7-1: SerialNumber: syz [ 993.705312][T11403] usb 7-1: config 0 descriptor?? [ 994.274862][T19226] pimreg: entered allmulticast mode [ 994.286755][T19226] pimreg: left allmulticast mode [ 994.609243][T19232] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3484'. [ 994.712435][T11395] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 994.872105][T11395] usb 2-1: Using ep0 maxpacket: 16 [ 994.881101][T11395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.894479][T11395] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.920123][T19234] FAULT_INJECTION: forcing a failure. [ 994.920123][T19234] name failslab, interval 1, probability 0, space 0, times 0 [ 994.933231][T19234] CPU: 0 UID: 0 PID: 19234 Comm: syz.8.3485 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 994.933256][T19234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 994.933269][T19234] Call Trace: [ 994.933283][T19234] [ 994.933293][T19234] dump_stack_lvl+0x189/0x250 [ 994.933322][T19234] ? __pfx____ratelimit+0x10/0x10 [ 994.933353][T19234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 994.933378][T19234] ? __pfx__printk+0x10/0x10 [ 994.933407][T19234] ? __pfx___might_resched+0x10/0x10 [ 994.933432][T19234] ? fs_reclaim_acquire+0x7d/0x100 [ 994.933465][T19234] should_fail_ex+0x414/0x560 [ 994.933499][T19234] should_failslab+0xa8/0x100 [ 994.933527][T19234] __kmalloc_noprof+0xcb/0x4f0 [ 994.933551][T19234] ? tomoyo_encode+0x28b/0x550 [ 994.933575][T19234] tomoyo_encode+0x28b/0x550 [ 994.933601][T19234] tomoyo_realpath_from_path+0x58d/0x5d0 [ 994.933624][T19234] ? tomoyo_domain+0xd9/0x130 [ 994.933650][T19234] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 994.933678][T19234] tomoyo_path_number_perm+0x1e8/0x5a0 [ 994.933709][T19234] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 994.933754][T19234] ? __lock_acquire+0xab9/0xd20 [ 994.933796][T19234] ? __fget_files+0x2a/0x420 [ 994.933827][T19234] ? __fget_files+0x3a0/0x420 [ 994.933851][T19234] ? __fget_files+0x2a/0x420 [ 994.933881][T19234] security_file_ioctl_compat+0xcb/0x2d0 [ 994.933910][T19234] __ia32_compat_sys_ioctl+0x128/0x840 [ 994.933936][T19234] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 994.933959][T19234] ? __fget_files+0x3a0/0x420 [ 994.933992][T19234] ? fput+0xa0/0xd0 [ 994.934021][T19234] ? ksys_write+0x22a/0x250 [ 994.934052][T19234] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 994.934085][T19234] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.934117][T19234] __do_fast_syscall_32+0xb6/0x2b0 [ 994.934138][T19234] ? lockdep_hardirqs_on+0x9c/0x150 [ 994.934172][T19234] do_fast_syscall_32+0x34/0x80 [ 994.934192][T19234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 994.934216][T19234] RIP: 0023:0xf7f47539 [ 994.934233][T19234] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 994.934251][T19234] RSP: 002b:00000000f506655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 994.934278][T19234] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 994.934292][T19234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 994.934305][T19234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 994.934317][T19234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 994.934329][T19234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 994.934359][T19234] [ 994.934381][T19234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 995.232123][T11395] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 995.256548][T11395] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 995.274296][T11395] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.318853][T11395] usb 2-1: config 0 descriptor?? [ 995.533346][T19229] FAULT_INJECTION: forcing a failure. [ 995.533346][T19229] name failslab, interval 1, probability 0, space 0, times 0 [ 995.555178][T19229] CPU: 1 UID: 0 PID: 19229 Comm: syz.1.3483 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 995.555199][T19229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 995.555207][T19229] Call Trace: [ 995.555212][T19229] [ 995.555217][T19229] dump_stack_lvl+0x189/0x250 [ 995.555235][T19229] ? __pfx____ratelimit+0x10/0x10 [ 995.555258][T19229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 995.555271][T19229] ? __pfx__printk+0x10/0x10 [ 995.555291][T19229] ? __pfx___might_resched+0x10/0x10 [ 995.555304][T19229] ? fs_reclaim_acquire+0x7d/0x100 [ 995.555321][T19229] should_fail_ex+0x414/0x560 [ 995.555339][T19229] should_failslab+0xa8/0x100 [ 995.555354][T19229] __kmalloc_noprof+0xcb/0x4f0 [ 995.555366][T19229] ? kfree+0x4d/0x440 [ 995.555376][T19229] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 995.555389][T19229] tomoyo_realpath_from_path+0xe3/0x5d0 [ 995.555401][T19229] ? tomoyo_domain+0xd9/0x130 [ 995.555414][T19229] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 995.555428][T19229] tomoyo_path_number_perm+0x1e8/0x5a0 [ 995.555443][T19229] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 995.555467][T19229] ? __lock_acquire+0xab9/0xd20 [ 995.555488][T19229] ? __fget_files+0x2a/0x420 [ 995.555504][T19229] ? __fget_files+0x3a0/0x420 [ 995.555516][T19229] ? __fget_files+0x2a/0x420 [ 995.555532][T19229] security_file_ioctl_compat+0xcb/0x2d0 [ 995.555547][T19229] __ia32_compat_sys_ioctl+0x128/0x840 [ 995.555560][T19229] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 995.555572][T19229] ? __fget_files+0x3a0/0x420 [ 995.555589][T19229] ? fput+0xa0/0xd0 [ 995.555604][T19229] ? ksys_write+0x22a/0x250 [ 995.555620][T19229] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 995.555637][T19229] ? lockdep_hardirqs_on+0x9c/0x150 [ 995.555653][T19229] __do_fast_syscall_32+0xb6/0x2b0 [ 995.555664][T19229] ? lockdep_hardirqs_on+0x9c/0x150 [ 995.555681][T19229] do_fast_syscall_32+0x34/0x80 [ 995.555692][T19229] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 995.555704][T19229] RIP: 0023:0xf7f12539 [ 995.555714][T19229] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 995.555723][T19229] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 995.555736][T19229] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000004148 [ 995.555744][T19229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 995.555749][T19229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 995.555756][T19229] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 995.555763][T19229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 995.555777][T19229] [ 995.555796][T19229] ERROR: Out of memory at tomoyo_realpath_from_path. [ 996.046200][T11395] usbhid 2-1:0.0: can't add hid device: -71 [ 996.060459][T11395] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 996.276886][T11395] usb 2-1: USB disconnect, device number 50 [ 996.613689][T11395] usb 7-1: USB disconnect, device number 42 [ 997.059296][T19253] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3490'. [ 997.953585][T19269] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3496'. [ 997.995809][T19270] loop6: detected capacity change from 0 to 7 [ 998.005185][T19270] Dev loop6: unable to read RDB block 7 [ 998.010753][T19270] loop6: unable to read partition table [ 998.046126][T19270] loop6: partition table beyond EOD, truncated [ 998.070117][T19270] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 998.296937][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3498'. [ 998.340414][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3498'. [ 999.048282][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3501'. [ 999.864111][T19298] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1000.127029][T19300] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3505'. [ 1000.544634][T19310] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3508'. [ 1000.831323][T19314] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3510'. [ 1000.882104][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1001.005945][T19318] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.042421][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1001.076728][ T10] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1001.117309][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1001.162542][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1001.215596][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.261824][ T10] usb 2-1: Product: syz [ 1001.278484][ T10] usb 2-1: Manufacturer: syz [ 1001.290924][ T10] usb 2-1: SerialNumber: syz [ 1001.374043][ T10] usb 2-1: config 0 descriptor?? [ 1001.632724][T19330] FAULT_INJECTION: forcing a failure. [ 1001.632724][T19330] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.648398][T19312] binder: 19307:19312 ioctl c0306201 80000100 returned -11 [ 1001.679582][T19330] CPU: 1 UID: 0 PID: 19330 Comm: syz.7.3515 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1001.679609][T19330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1001.679621][T19330] Call Trace: [ 1001.679630][T19330] [ 1001.679638][T19330] dump_stack_lvl+0x189/0x250 [ 1001.679667][T19330] ? __pfx____ratelimit+0x10/0x10 [ 1001.679697][T19330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1001.679721][T19330] ? __pfx__printk+0x10/0x10 [ 1001.679753][T19330] ? __pfx___might_resched+0x10/0x10 [ 1001.679777][T19330] ? fs_reclaim_acquire+0x7d/0x100 [ 1001.679808][T19330] should_fail_ex+0x414/0x560 [ 1001.679845][T19330] should_failslab+0xa8/0x100 [ 1001.679872][T19330] __kmalloc_cache_noprof+0x70/0x3d0 [ 1001.679896][T19330] ? genl_start+0x1c9/0x6c0 [ 1001.679930][T19330] genl_start+0x1c9/0x6c0 [ 1001.679957][T19330] ? netlink_lookup+0x30/0x200 [ 1001.679985][T19330] __netlink_dump_start+0x469/0x7e0 [ 1001.680017][T19330] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1001.680051][T19330] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1001.680079][T19330] ? genl_get_cmd+0x7d9/0x910 [ 1001.680112][T19330] ? __pfx_genl_start+0x10/0x10 [ 1001.680137][T19330] ? __pfx_genl_dumpit+0x10/0x10 [ 1001.680163][T19330] ? __pfx_genl_done+0x10/0x10 [ 1001.680206][T19330] genl_rcv_msg+0x5da/0x790 [ 1001.680242][T19330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1001.680268][T19330] ? ref_tracker_free+0x63a/0x7d0 [ 1001.680296][T19330] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1001.680317][T19330] ? __pfx_ref_tracker_free+0x10/0x10 [ 1001.680357][T19330] netlink_rcv_skb+0x208/0x470 [ 1001.680382][T19330] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1001.680412][T19330] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1001.680454][T19330] ? down_read+0x1ad/0x2e0 [ 1001.680478][T19330] genl_rcv+0x28/0x40 [ 1001.680503][T19330] netlink_unicast+0x75b/0x8d0 [ 1001.680536][T19330] netlink_sendmsg+0x805/0xb30 [ 1001.680579][T19330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.680606][T19330] ? __import_iovec+0x5d4/0x7f0 [ 1001.680627][T19330] ? aa_sock_msg_perm+0x94/0x160 [ 1001.680657][T19330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1001.680686][T19330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.680711][T19330] __sock_sendmsg+0x21c/0x270 [ 1001.680744][T19330] ____sys_sendmsg+0x505/0x830 [ 1001.680775][T19330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.680815][T19330] ___sys_sendmsg+0x21f/0x2a0 [ 1001.680842][T19330] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.680905][T19330] ? __fget_files+0x2a/0x420 [ 1001.680931][T19330] ? __fget_files+0x3a0/0x420 [ 1001.680969][T19330] __sys_sendmsg+0x164/0x220 [ 1001.680997][T19330] ? __pfx___sys_sendmsg+0x10/0x10 [ 1001.681038][T19330] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1001.681071][T19330] ? lockdep_hardirqs_on+0x9c/0x150 [ 1001.681103][T19330] __do_fast_syscall_32+0xb6/0x2b0 [ 1001.681124][T19330] ? lockdep_hardirqs_on+0x9c/0x150 [ 1001.681157][T19330] do_fast_syscall_32+0x34/0x80 [ 1001.681178][T19330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1001.681202][T19330] RIP: 0023:0xf7fc2539 [ 1001.681220][T19330] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1001.681237][T19330] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1001.681259][T19330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1001.681273][T19330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1001.681285][T19330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1001.681297][T19330] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1001.681309][T19330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1001.681339][T19330] [ 1002.075138][T19312] fuse: Bad value for 'fd' [ 1002.639917][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3517'. [ 1003.181363][T11402] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1003.557593][T11402] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1003.602266][T11402] usb 5-1: USB disconnect, device number 37 [ 1004.014680][T11402] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1004.378016][T11402] usb 5-1: Using ep0 maxpacket: 32 [ 1004.554695][ T10] usb 2-1: USB disconnect, device number 51 [ 1004.574241][T11402] usb 5-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1004.616998][T11402] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1004.742720][ T43] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1004.758007][T11402] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1004.845721][T11402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.925358][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1005.047764][ T43] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1005.056416][T11402] usb 5-1: Product: syz [ 1005.060603][T11402] usb 5-1: Manufacturer: syz [ 1005.113295][ T43] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1005.129928][ T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1005.152204][ T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1005.162512][ T43] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.175936][ T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1005.226763][T11402] usb 5-1: SerialNumber: syz [ 1005.262576][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.415403][T19364] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3526'. [ 1005.513217][T11402] usb 5-1: config 0 descriptor?? [ 1005.697767][ T43] usb 7-1: GET_CAPABILITIES returned 0 [ 1005.712229][ T43] usbtmc 7-1:16.0: can't read capabilities [ 1005.911013][ T43] usb 7-1: USB disconnect, device number 43 [ 1006.246576][T11402] usb 5-1: can't set config #0, error -71 [ 1006.254279][T11402] usb 5-1: USB disconnect, device number 38 [ 1006.831907][T11395] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1007.022037][T11395] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.034542][T11395] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1007.055205][T19380] loop2: detected capacity change from 0 to 7 [ 1007.066145][T11395] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1007.084902][T11395] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1007.158121][T19380] Dev loop2: unable to read RDB block 7 [ 1007.164209][T19380] loop2: AHDI p1 p2 p3 [ 1007.168865][T19380] loop2: partition table partially beyond EOD, truncated [ 1007.176965][T19380] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1007.183880][T19380] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1007.251981][T11395] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1007.267605][T11395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.275927][T11395] usb 5-1: Product: syz [ 1007.284852][T11395] usb 5-1: Manufacturer: syz [ 1007.295915][T11395] usb 5-1: SerialNumber: syz [ 1007.322919][T11395] usb 5-1: config 0 descriptor?? [ 1007.338297][T11395] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 1007.366962][T11395] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1007.464693][T11395] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1007.574490][T11395] usb 5-1: USB disconnect, device number 39 [ 1007.581835][T11395] garmin_gps 5-1:0.0: device disconnected [ 1008.205890][T19395] sock: sock_timestamping_bind_phc: sock not bind to device [ 1008.801899][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1008.986223][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1009.038100][ T10] usb 5-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1009.047257][T19409] loop2: detected capacity change from 0 to 7 [ 1009.056619][ T5849] loop2: [ 1009.059645][ T5849] loop2: partition table partially beyond EOD, truncated [ 1009.097044][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1009.123517][T19409] loop2: [ 1009.131316][T19409] loop2: partition table partially beyond EOD, truncated [ 1009.168888][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1009.502061][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.510844][ T10] usb 5-1: Product: syz [ 1009.536015][ T10] usb 5-1: Manufacturer: syz [ 1009.551466][ T10] usb 5-1: SerialNumber: syz [ 1009.573671][ T10] usb 5-1: config 0 descriptor?? [ 1009.596563][T19416] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3541'. [ 1009.662938][T19414] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3539'. [ 1009.803951][T19404] binder: 19399:19404 ioctl c0306201 80000100 returned -11 [ 1009.827732][T19404] fuse: Bad value for 'fd' [ 1010.625061][T19434] pimreg: entered allmulticast mode [ 1010.638050][T19434] pimreg: left allmulticast mode [ 1011.670233][T19448] loop6: detected capacity change from 0 to 7 [ 1011.679255][ T5849] Dev loop6: unable to read RDB block 7 [ 1011.688345][ T5849] loop6: unable to read partition table [ 1011.699160][ T5849] loop6: partition table beyond EOD, truncated [ 1011.706731][T19448] Dev loop6: unable to read RDB block 7 [ 1011.724765][T19448] loop6: unable to read partition table [ 1011.748248][T19448] loop6: partition table beyond EOD, truncated [ 1011.777932][ T10] usb 5-1: USB disconnect, device number 40 [ 1011.778747][T19448] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1011.919709][T19452] FAULT_INJECTION: forcing a failure. [ 1011.919709][T19452] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.936453][T19452] CPU: 1 UID: 0 PID: 19452 Comm: syz.1.3552 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1011.936478][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1011.936490][T19452] Call Trace: [ 1011.936496][T19452] [ 1011.936502][T19452] dump_stack_lvl+0x189/0x250 [ 1011.936519][T19452] ? __pfx____ratelimit+0x10/0x10 [ 1011.936536][T19452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.936548][T19452] ? __pfx__printk+0x10/0x10 [ 1011.936566][T19452] ? __pfx___might_resched+0x10/0x10 [ 1011.936578][T19452] ? fs_reclaim_acquire+0x7d/0x100 [ 1011.936595][T19452] should_fail_ex+0x414/0x560 [ 1011.936613][T19452] should_failslab+0xa8/0x100 [ 1011.936627][T19452] __kmalloc_cache_noprof+0x70/0x3d0 [ 1011.936640][T19452] ? nl80211_prepare_wdev_dump+0x2c3/0x6a0 [ 1011.936654][T19452] nl80211_prepare_wdev_dump+0x2c3/0x6a0 [ 1011.936670][T19452] nl80211_dump_station+0x123/0x6e0 [ 1011.936679][T19452] ? do_fast_syscall_32+0x34/0x80 [ 1011.936689][T19452] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1011.936710][T19452] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1011.936733][T19452] ? trace_kmalloc+0x1f/0xd0 [ 1011.936744][T19452] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1011.936760][T19452] ? __build_skb_around+0x257/0x3e0 [ 1011.936776][T19452] genl_dumpit+0x10b/0x1b0 [ 1011.936793][T19452] netlink_dump+0x62d/0xe20 [ 1011.936811][T19452] ? __pfx_netlink_dump+0x10/0x10 [ 1011.936842][T19452] ? genl_start+0x499/0x6c0 [ 1011.936861][T19452] __netlink_dump_start+0x5cb/0x7e0 [ 1011.936878][T19452] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1011.936895][T19452] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1011.936910][T19452] ? genl_get_cmd+0x7d9/0x910 [ 1011.936927][T19452] ? __pfx_genl_start+0x10/0x10 [ 1011.936940][T19452] ? __pfx_genl_dumpit+0x10/0x10 [ 1011.936953][T19452] ? __pfx_genl_done+0x10/0x10 [ 1011.936976][T19452] genl_rcv_msg+0x5da/0x790 [ 1011.936994][T19452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.937008][T19452] ? ref_tracker_free+0x63a/0x7d0 [ 1011.937022][T19452] ? __pfx_nl80211_dump_station+0x10/0x10 [ 1011.937033][T19452] ? __pfx_ref_tracker_free+0x10/0x10 [ 1011.937054][T19452] netlink_rcv_skb+0x208/0x470 [ 1011.937067][T19452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.937082][T19452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.937104][T19452] ? down_read+0x1ad/0x2e0 [ 1011.937116][T19452] genl_rcv+0x28/0x40 [ 1011.937130][T19452] netlink_unicast+0x75b/0x8d0 [ 1011.937147][T19452] netlink_sendmsg+0x805/0xb30 [ 1011.937164][T19452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.937178][T19452] ? __import_iovec+0x5d4/0x7f0 [ 1011.937189][T19452] ? aa_sock_msg_perm+0x94/0x160 [ 1011.937205][T19452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1011.937221][T19452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.937234][T19452] __sock_sendmsg+0x21c/0x270 [ 1011.937252][T19452] ____sys_sendmsg+0x505/0x830 [ 1011.937268][T19452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.937290][T19452] ___sys_sendmsg+0x21f/0x2a0 [ 1011.937305][T19452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.937337][T19452] ? __fget_files+0x2a/0x420 [ 1011.937354][T19452] ? __fget_files+0x3a0/0x420 [ 1011.937373][T19452] __sys_sendmsg+0x164/0x220 [ 1011.937387][T19452] ? __pfx___sys_sendmsg+0x10/0x10 [ 1011.937408][T19452] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1011.937424][T19452] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.937441][T19452] __do_fast_syscall_32+0xb6/0x2b0 [ 1011.937451][T19452] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.937468][T19452] do_fast_syscall_32+0x34/0x80 [ 1011.937479][T19452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1011.937491][T19452] RIP: 0023:0xf7f12539 [ 1011.937501][T19452] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1011.937510][T19452] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1011.937523][T19452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1011.937531][T19452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.937537][T19452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1011.937543][T19452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1011.937550][T19452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1011.937565][T19452] [ 1012.782090][T19458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1012.862111][T19463] batman_adv: batadv0: Adding interface: macvlan2 [ 1012.868803][T19463] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1012.899349][T19463] batman_adv: batadv0: Interface activated: macvlan2 [ 1013.181845][ T5927] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1013.531996][ T5927] usb 7-1: Using ep0 maxpacket: 32 [ 1013.543733][ T5927] usb 7-1: config 0 has an invalid interface number: 169 but max is 0 [ 1013.552434][ T5927] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.563844][ T5927] usb 7-1: config 0 has no interface number 0 [ 1013.571129][ T5927] usb 7-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1013.585462][ T5927] usb 7-1: config 0 interface 169 has no altsetting 0 [ 1013.596600][ T5927] usb 7-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49 [ 1013.606838][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.615316][ T5927] usb 7-1: Product: syz [ 1013.627432][ T5927] usb 7-1: Manufacturer: syz [ 1013.633489][ T5927] usb 7-1: SerialNumber: syz [ 1013.641640][ T5927] usb 7-1: config 0 descriptor?? [ 1013.658017][ T5927] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1013.694163][ T5927] snd-usb-audio 7-1:0.169: probe with driver snd-usb-audio failed with error -2 [ 1013.891542][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.916532][ T5927] usb 7-1: USB disconnect, device number 44 [ 1016.592203][ T5927] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1016.661981][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1016.821401][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 1016.848004][ T5927] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.880563][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1016.909511][ T5927] usb 5-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.00 [ 1016.938194][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.977048][ T5927] usb 5-1: config 0 descriptor?? [ 1016.983103][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1017.073871][ T10] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1017.173714][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1017.249106][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1017.261939][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.272936][T19507] netlink: 'syz.4.3569': attribute type 29 has an invalid length. [ 1017.285133][ T10] usb 2-1: Product: syz [ 1017.289305][ T10] usb 2-1: Manufacturer: syz [ 1017.314143][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3569'. [ 1017.333233][ T10] usb 2-1: SerialNumber: syz [ 1017.358757][ T10] usb 2-1: config 0 descriptor?? [ 1017.376939][T19516] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1017.664159][T19509] binder: 19504:19509 ioctl c0306201 80000100 returned -11 [ 1017.713059][T19509] fuse: Bad value for 'fd' [ 1017.904022][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 1017.911590][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1018.125517][ T5927] usb 5-1: USB disconnect, device number 41 [ 1018.677088][T19527] loop4: detected capacity change from 0 to 7 [ 1018.735201][T19527] Dev loop4: unable to read RDB block 7 [ 1018.740798][T19527] loop4: unable to read partition table [ 1018.771491][T19527] loop4: partition table beyond EOD, truncated [ 1018.788111][T19527] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1019.894858][T19538] loop6: detected capacity change from 0 to 7 [ 1019.902118][T19538] Dev loop6: unable to read RDB block 7 [ 1019.916810][T19538] loop6: unable to read partition table [ 1019.965265][T19538] loop6: partition table beyond EOD, truncated [ 1020.052270][ T10] usb 2-1: USB disconnect, device number 52 [ 1020.091849][T19538] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1020.770246][T19551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1020.782003][ T5972] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1020.938858][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1020.957456][ T5972] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.971297][ T5972] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.982086][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3584'. [ 1021.002369][ T5972] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1021.011509][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.023713][ T5972] usb 5-1: Product: syz [ 1021.031550][ T5972] usb 5-1: Manufacturer: syz [ 1021.044418][ T5972] usb 5-1: SerialNumber: syz [ 1021.271222][ T5972] usb 5-1: 0:2 : does not exist [ 1021.290896][ T5972] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1021.479127][ T5972] usb 5-1: USB disconnect, device number 42 [ 1021.541416][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.994630][T19566] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3587'. [ 1022.579720][T19580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1022.661902][ T5972] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1022.804895][T19590] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1022.837687][ T5972] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1022.848688][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.858193][ T5972] usb 2-1: Product: syz [ 1022.863904][ T5972] usb 2-1: Manufacturer: syz [ 1022.868705][ T5972] usb 2-1: SerialNumber: syz [ 1022.880192][ T5972] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1022.886617][ T5972] r8152-cfgselector 2-1: config 0 descriptor?? [ 1023.099671][T19578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.116221][T19578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.341262][ T5972] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1023.370546][ T5972] r8152-cfgselector 2-1: bad CDC descriptors [ 1023.410955][ T5972] r8152-cfgselector 2-1: USB disconnect, device number 53 [ 1023.691317][T19605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3602'. [ 1023.910454][T19614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1025.522301][ T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1025.704867][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1025.718736][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.736207][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.768183][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1025.794075][T19638] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1025.809969][ T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1025.827089][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.850758][ T10] usb 2-1: config 0 descriptor?? [ 1026.285709][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1026.299805][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1026.316673][ T10] usb 2-1: USB disconnect, device number 54 [ 1026.447430][T19643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1027.624096][T19669] loop2: detected capacity change from 0 to 7 [ 1027.764069][T19669] Dev loop2: unable to read RDB block 7 [ 1027.769885][T19669] loop2: AHDI p1 p2 p3 [ 1027.774552][T19669] loop2: partition table partially beyond EOD, truncated [ 1027.784219][T19669] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1027.791473][T19669] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1028.339932][T19674] loop6: detected capacity change from 0 to 7 [ 1028.370925][T19674] Dev loop6: unable to read RDB block 7 [ 1028.404371][T19674] loop6: unable to read partition table [ 1028.410249][T19674] loop6: partition table beyond EOD, truncated [ 1028.481878][T19674] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1028.545705][T19678] loop6: detected capacity change from 0 to 7 [ 1028.588950][T14542] Dev loop6: unable to read RDB block 7 [ 1028.615248][T14542] loop6: unable to read partition table [ 1028.641457][T19680] loop8: detected capacity change from 0 to 6 [ 1028.650528][T14542] loop6: partition table beyond EOD, truncated [ 1028.655094][T19680] Dev loop8: unable to read RDB block 6 [ 1028.668317][T19680] loop8: unable to read partition table [ 1028.677195][T19678] Dev loop6: unable to read RDB block 7 [ 1028.685669][T19678] loop6: unable to read partition table [ 1028.691655][T19680] loop8: partition table beyond EOD, truncated [ 1028.701591][T19678] loop6: partition table beyond EOD, truncated [ 1028.720574][T19680] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1028.741042][T19678] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1029.281949][ T5966] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1029.491960][ T5966] usb 7-1: Using ep0 maxpacket: 16 [ 1029.513742][T19684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.524624][T19684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.565426][T19691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.616734][T19691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.580213][T19698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1031.156747][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1031.574618][T19708] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 1031.874609][ T5972] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1031.930387][ T5966] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1031.944266][ T5966] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1031.966725][ T5966] usb 7-1: can't read configurations, error -71 [ 1032.044897][ T5972] usb 5-1: not running at top speed; connect to a high speed hub [ 1032.054359][ T5972] usb 5-1: config 1 has an invalid interface number: 78 but max is 0 [ 1032.062894][ T5972] usb 5-1: config 1 has no interface number 0 [ 1032.069175][ T5972] usb 5-1: config 1 interface 78 has no altsetting 0 [ 1032.081467][ T5972] usb 5-1: string descriptor 0 read error: -22 [ 1032.091431][ T5972] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1032.166750][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.176291][T19721] loop6: detected capacity change from 0 to 7 [ 1032.189885][T19721] Dev loop6: unable to read RDB block 7 [ 1032.209233][ T5972] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1032.216909][T19721] loop6: unable to read partition table [ 1032.222982][ T5972] usb 5-1: selecting invalid altsetting 0 [ 1032.229006][T19721] loop6: partition table beyond EOD, truncated [ 1032.238402][T19721] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1032.312287][ T5966] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1032.450385][ T5972] usb 5-1: USB disconnect, device number 43 [ 1032.454927][ T2341] pvrusb2: control-write URB failure, status=-71 [ 1032.503642][ T2341] pvrusb2: Device being rendered inoperable [ 1032.510856][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1032.524008][T19729] loop2: detected capacity change from 0 to 7 [ 1032.530910][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1032.541396][T19729] Dev loop2: unable to read RDB block 7 [ 1032.547744][T19729] loop2: AHDI p1 p2 p3 [ 1032.554418][T19729] loop2: partition table partially beyond EOD, truncated [ 1032.561656][ T5966] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1032.582438][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.596716][T19729] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1032.624729][ T5966] usb 7-1: config 0 descriptor?? [ 1032.635494][T19729] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1032.971994][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1033.182546][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1033.195596][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.319212][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.369478][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1033.395956][ T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1033.458969][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.505258][ T10] usb 2-1: config 0 descriptor?? [ 1033.690940][T19743] loop6: detected capacity change from 0 to 7 [ 1033.704233][ T5849] Dev loop6: unable to read RDB block 7 [ 1033.709835][ T5849] loop6: AHDI p3 p4 [ 1033.714000][ T5849] loop6: partition table partially beyond EOD, truncated [ 1033.721588][ T5849] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1033.730045][T19743] Dev loop6: unable to read RDB block 7 [ 1033.731563][T19738] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1033.735710][T19743] loop6: AHDI p3 p4 [ 1033.735744][T19743] loop6: partition table partially beyond EOD, truncated [ 1033.735925][T19743] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1033.978767][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1033.992999][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1034.021579][ T10] usb 2-1: USB disconnect, device number 55 [ 1034.061981][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1034.096792][ T5966] pegasus 7-1:0.0: can't reset MAC [ 1034.102309][ T5966] pegasus 7-1:0.0: probe with driver pegasus failed with error -5 [ 1034.331698][T19757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1034.793660][T19765] pimreg: entered allmulticast mode [ 1035.404073][ T10] usb 7-1: USB disconnect, device number 46 [ 1035.777455][T19769] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1035.942737][T19774] netlink: 'syz.6.3658': attribute type 21 has an invalid length. [ 1035.956818][T19774] netlink: 'syz.6.3658': attribute type 6 has an invalid length. [ 1035.969095][T19774] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3658'. [ 1036.332599][T19779] loop6: detected capacity change from 0 to 7 [ 1036.342351][T19779] Dev loop6: unable to read RDB block 7 [ 1036.369028][T19779] loop6: unable to read partition table [ 1036.458184][T19779] loop6: partition table beyond EOD, truncated [ 1036.501437][T19779] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1037.227117][T19797] loop2: detected capacity change from 0 to 7 [ 1037.355246][T19797] Dev loop2: unable to read RDB block 7 [ 1037.398749][T19797] loop2: AHDI p1 p2 p3 [ 1037.425484][T19797] loop2: partition table partially beyond EOD, truncated [ 1037.479755][T19797] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1037.487159][T19797] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1038.422178][ T10] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1038.442486][ T5927] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1038.490403][T19813] netlink: 'syz.8.3669': attribute type 1 has an invalid length. [ 1038.583291][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1038.590513][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.605226][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 1038.610419][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.620822][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1038.634333][ T10] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1038.644467][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.657890][ T5927] usb 5-1: config 0 has no interfaces? [ 1038.663407][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.674478][ T5927] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1038.683624][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.691623][ T5927] usb 5-1: Product: syz [ 1038.698932][ T10] usb 7-1: config 0 descriptor?? [ 1038.705028][ T5927] usb 5-1: Manufacturer: syz [ 1038.710653][ T5927] usb 5-1: SerialNumber: syz [ 1038.722982][ T5927] usb 5-1: config 0 descriptor?? [ 1038.962117][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1038.968170][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1038.975288][T19817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1039.019305][ T10] usb 7-1: USB disconnect, device number 47 [ 1039.548528][T19820] loop4: detected capacity change from 0 to 7 [ 1039.584670][T19820] Dev loop4: unable to read RDB block 7 [ 1039.612164][T19820] loop4: unable to read partition table [ 1039.620291][T19820] loop4: partition table beyond EOD, truncated [ 1039.635147][T19820] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1039.924460][T19826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1040.091885][ T5927] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1040.241903][ T5927] usb 7-1: Using ep0 maxpacket: 16 [ 1040.249972][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.266029][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.282084][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1040.299595][ T5927] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1040.309708][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.324904][ T5927] usb 7-1: config 0 descriptor?? [ 1040.810355][ T5927] usbhid 7-1:0.0: can't add hid device: -71 [ 1040.831649][ T5927] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1040.866302][ T5927] usb 7-1: USB disconnect, device number 48 [ 1041.113934][ T5927] usb 5-1: USB disconnect, device number 44 [ 1041.601926][ T5927] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1041.749806][ T5927] usb 5-1: device descriptor read/64, error -71 [ 1042.001845][ T5927] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1042.155810][ T5927] usb 5-1: device descriptor read/64, error -71 [ 1042.236452][T19871] loop4: detected capacity change from 0 to 7 [ 1042.253119][T19871] Dev loop4: unable to read RDB block 7 [ 1042.258805][T19871] loop4: unable to read partition table [ 1042.274173][T19871] loop4: partition table beyond EOD, truncated [ 1042.282769][ T5927] usb usb5-port1: attempt power cycle [ 1042.288304][T19871] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1042.510456][T19880] FAULT_INJECTION: forcing a failure. [ 1042.510456][T19880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.542277][T19880] CPU: 1 UID: 0 PID: 19880 Comm: syz.7.3691 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1042.542304][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1042.542317][T19880] Call Trace: [ 1042.542326][T19880] [ 1042.542334][T19880] dump_stack_lvl+0x189/0x250 [ 1042.542363][T19880] ? __pfx____ratelimit+0x10/0x10 [ 1042.542394][T19880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1042.542417][T19880] ? __pfx__printk+0x10/0x10 [ 1042.542456][T19880] should_fail_ex+0x414/0x560 [ 1042.542489][T19880] _copy_to_user+0x31/0xb0 [ 1042.542516][T19880] simple_read_from_buffer+0xe1/0x170 [ 1042.542546][T19880] proc_fail_nth_read+0x1df/0x250 [ 1042.542578][T19880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1042.542609][T19880] ? rw_verify_area+0x258/0x650 [ 1042.542630][T19880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1042.542672][T19880] vfs_read+0x200/0x980 [ 1042.542700][T19880] ? __pfx___mutex_lock+0x10/0x10 [ 1042.542719][T19880] ? __pfx_vfs_read+0x10/0x10 [ 1042.542743][T19880] ? __fget_files+0x2a/0x420 [ 1042.542773][T19880] ? __fget_files+0x3a0/0x420 [ 1042.542797][T19880] ? __fget_files+0x2a/0x420 [ 1042.542831][T19880] ksys_read+0x145/0x250 [ 1042.542851][T19880] ? __pfx_filldir64+0x10/0x10 [ 1042.542875][T19880] ? __pfx_ksys_read+0x10/0x10 [ 1042.542900][T19880] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1042.542937][T19880] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.542967][T19880] __do_fast_syscall_32+0xb6/0x2b0 [ 1042.542987][T19880] ? lockdep_hardirqs_on+0x9c/0x150 [ 1042.543017][T19880] do_fast_syscall_32+0x34/0x80 [ 1042.543035][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1042.543057][T19880] RIP: 0023:0xf7fc2539 [ 1042.543073][T19880] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1042.543091][T19880] RSP: 002b:00000000f50e6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1042.543112][T19880] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50e6620 [ 1042.543126][T19880] RDX: 000000000000000f RSI: 00000000f7453ff4 RDI: 0000000000000000 [ 1042.543139][T19880] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1042.543149][T19880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1042.543161][T19880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1042.543187][T19880] [ 1042.852052][ T5966] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1042.859761][ T5927] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 1042.883728][ T5927] usb 5-1: device descriptor read/8, error -71 [ 1042.916658][T19882] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1043.014740][ T5966] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1043.026356][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1043.041553][ T5966] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1043.050797][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.058989][ T5966] usb 7-1: Product: syz [ 1043.063760][ T5966] usb 7-1: Manufacturer: syz [ 1043.068348][ T5966] usb 7-1: SerialNumber: syz [ 1043.075084][ T5966] usb 7-1: config 0 descriptor?? [ 1043.080616][T19878] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1043.126687][ T5927] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 1043.142184][ T5966] rc_core: IR keymap rc-streamzap not found [ 1043.151211][ T5966] Registered IR keymap rc-empty [ 1043.157346][ T5927] usb 5-1: device descriptor read/8, error -71 [ 1043.164690][ T5966] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1043.177318][ T5966] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input125 [ 1043.282199][ T5927] usb usb5-port1: unable to enumerate USB device [ 1045.521706][T19878] syz.6.3689 (19878): drop_caches: 2 [ 1045.560318][ T5940] usb 7-1: USB disconnect, device number 49 [ 1045.601931][ T5927] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1045.753647][ T5927] usb 2-1: config 0 has no interfaces? [ 1045.784567][ T5927] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=ff.fb [ 1045.824945][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=3 [ 1045.844335][ T5927] usb 2-1: Product: syz [ 1045.848855][ T5927] usb 2-1: SerialNumber: syz [ 1045.859587][ T5927] usb 2-1: config 0 descriptor?? [ 1045.988844][T19913] loop6: detected capacity change from 0 to 7 [ 1045.997368][T19913] Dev loop6: unable to read RDB block 7 [ 1046.007233][T19913] loop6: unable to read partition table [ 1046.013265][T19913] loop6: partition table beyond EOD, truncated [ 1046.019533][T19913] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1046.163767][ T5972] usb 2-1: USB disconnect, device number 56 [ 1046.236772][T19917] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1046.323570][ T5966] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1046.481982][ T5966] usb 7-1: Using ep0 maxpacket: 16 [ 1046.493117][ T5966] usb 7-1: config 0 has an invalid interface number: 217 but max is 0 [ 1046.505571][ T5966] usb 7-1: config 0 has no interface number 0 [ 1046.511852][ T5966] usb 7-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1046.527509][ T5966] usb 7-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1046.558688][ T5966] usb 7-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 1046.567969][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.576273][ T5966] usb 7-1: Product: syz [ 1046.581376][ T5966] usb 7-1: Manufacturer: syz [ 1046.586606][ T5966] usb 7-1: SerialNumber: syz [ 1046.595284][ T5966] usb 7-1: config 0 descriptor?? [ 1046.986657][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1046.997687][T19925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1047.007252][T19925] netlink: 'syz.4.3706': attribute type 18 has an invalid length. [ 1047.088669][T19927] loop6: detected capacity change from 0 to 7 [ 1047.099227][T19927] Dev loop6: unable to read RDB block 7 [ 1047.105102][T19927] loop6: unable to read partition table [ 1047.110916][T19927] loop6: partition table beyond EOD, truncated [ 1047.117926][T19927] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1047.246151][T19929] xt_limit: Overflow, try lower: 9/0 [ 1047.809049][T19933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.868981][T19933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.869039][T19936] loop4: detected capacity change from 0 to 7 [ 1047.888010][T19936] Dev loop4: unable to read RDB block 7 [ 1047.894295][T19936] loop4: unable to read partition table [ 1047.900148][T19936] loop4: partition table beyond EOD, truncated [ 1047.912624][T19936] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1048.041853][ T5972] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1048.204611][ T5972] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1048.218567][ T5972] usb 5-1: config 0 has no interface number 0 [ 1048.225643][ T5972] usb 5-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1048.244191][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.265402][ T5972] usb 5-1: config 0 descriptor?? [ 1048.287182][ T5972] usb 5-1: selecting invalid altsetting 1 [ 1048.299273][ T5972] dvb_ttusb_budget: ttusb_init_controller: error [ 1048.310081][ T5972] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1048.347602][T19943] cgroup: fork rejected by pids controller in /syz8 [ 1048.443009][ T5972] DVB: Unable to find symbol ves1820_attach() [ 1048.507399][ T5972] DVB: Unable to find symbol stv0297_attach() [ 1048.519250][ T5972] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1048.544817][ T5972] usb 5-1: USB disconnect, device number 49 [ 1048.844689][T18095] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.865643][ T5966] udl 7-1:0.217: [drm] Unrecognized vendor firmware descriptor [ 1048.901892][ T5966] [drm:udl_init] *ERROR* Selecting channel failed [ 1048.955313][ T5966] [drm] Initialized udl 0.0.1 for 7-1:0.217 on minor 2 [ 1048.971815][ T5966] [drm] Initialized udl on minor 2 [ 1048.981903][ T5966] udl 7-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1048.998431][ T5966] udl 7-1:0.217: [drm] Cannot find any crtc or sizes [ 1049.008676][ T10] udl 7-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1049.054122][ T10] udl 7-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1049.064753][ T5966] usb 7-1: USB disconnect, device number 50 [ 1049.081977][ T10] udl 7-1:0.217: [drm] Cannot find any crtc or sizes [ 1049.091477][T18095] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.288514][T18095] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.355919][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3719'. [ 1049.380040][T19950] loop6: detected capacity change from 0 to 7 [ 1049.394146][ T5849] Dev loop6: unable to read RDB block 7 [ 1049.409938][ T5849] loop6: AHDI p3 p4 [ 1049.414213][ T5849] loop6: partition table partially beyond EOD, truncated [ 1049.434711][ T5849] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1049.492812][T19950] Dev loop6: unable to read RDB block 7 [ 1049.498547][T19950] loop6: AHDI p3 p4 [ 1049.502869][T19950] loop6: partition table partially beyond EOD, truncated [ 1049.540397][T19950] loop6: p3 start 1869967406 is beyond EOD, truncated [ 1049.555962][T18095] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.602697][ T5966] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1049.846615][ T5966] usb 7-1: Using ep0 maxpacket: 16 [ 1049.875420][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.905914][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.945170][ T5966] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1049.981848][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.025896][ T5966] usb 7-1: config 0 descriptor?? [ 1050.127256][T19971] loop2: detected capacity change from 0 to 7 [ 1050.135251][T19971] Dev loop2: unable to read RDB block 7 [ 1050.148928][T18095] bridge_slave_1: left allmulticast mode [ 1050.164402][T19971] loop2: AHDI p1 p2 p3 [ 1050.211937][T18095] bridge_slave_1: left promiscuous mode [ 1050.217501][T19971] loop2: partition table partially beyond EOD, truncated [ 1050.230379][T18095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.259961][T18095] bridge_slave_0: left allmulticast mode [ 1050.272709][T19971] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1050.299833][T19971] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1050.311664][T18095] bridge_slave_0: left promiscuous mode [ 1050.362187][T18095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.466301][ T5966] hid-multitouch 0003:1FD2:6007.0022: unknown main item tag 0x0 [ 1050.579271][ T5966] hid-multitouch 0003:1FD2:6007.0022: item fetching failed at offset 4/5 [ 1050.596052][ T5966] hid-multitouch 0003:1FD2:6007.0022: probe with driver hid-multitouch failed with error -22 [ 1050.687009][T19956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.702436][T19956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.931866][ T5966] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1050.970373][ T10] usb 7-1: USB disconnect, device number 51 [ 1051.021328][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1051.032283][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1051.041031][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1051.049460][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1051.057224][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1051.081974][ T5966] usb 2-1: Using ep0 maxpacket: 16 [ 1051.096628][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.128117][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.139801][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1051.155594][ T5966] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1051.165690][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.206640][ T5966] usb 2-1: config 0 descriptor?? [ 1052.123500][T18095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.151435][T18095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.182155][T18095] bond0 (unregistering): Released all slaves [ 1052.211848][ T5972] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1052.401954][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 1052.433796][T19991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.453095][T19991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.595813][ T5966] usbhid 2-1:0.0: can't add hid device: -71 [ 1052.640452][ T5966] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1052.707169][ T5966] usb 2-1: USB disconnect, device number 57 [ 1053.112582][T11403] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1053.120428][ T51] Bluetooth: hci2: command tx timeout [ 1053.254395][T18095] hsr_slave_0: left promiscuous mode [ 1053.291973][T11403] usb 7-1: Using ep0 maxpacket: 8 [ 1053.299121][T11403] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.324333][T18095] hsr_slave_1: left promiscuous mode [ 1053.324666][T11403] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1053.340166][T11403] usb 7-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1053.351654][T11403] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.364587][T18095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.414502][T18095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.432848][T11403] usb 7-1: config 0 descriptor?? [ 1053.475603][T18095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.525915][T18095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.696067][T18095] veth1_macvtap: left promiscuous mode [ 1053.717705][T18095] veth0_macvtap: left promiscuous mode [ 1053.741334][T18095] veth1_vlan: left promiscuous mode [ 1053.760443][T18095] veth0_vlan: left promiscuous mode [ 1053.860791][T20003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.870812][T20003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.088373][T11403] usbhid 7-1:0.0: can't add hid device: -71 [ 1054.097043][T11403] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1054.134037][T11403] usb 7-1: USB disconnect, device number 52 [ 1054.329233][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.346610][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.740399][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3736'. [ 1054.977596][T20029] loop2: detected capacity change from 0 to 7 [ 1054.994444][T20029] Dev loop2: unable to read RDB block 7 [ 1055.000238][T20029] loop2: AHDI p1 p2 p3 [ 1055.004637][T20029] loop2: partition table partially beyond EOD, truncated [ 1055.015857][T20029] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1055.022769][T20029] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1055.171304][T18095] team0 (unregistering): Port device team_slave_1 removed [ 1055.192324][ T51] Bluetooth: hci2: command tx timeout [ 1055.343478][T18095] team0 (unregistering): Port device team_slave_0 removed [ 1056.507468][ T5972] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1056.542350][ T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1056.615090][ T5972] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1056.657606][ T5972] usb 5-1: can't read configurations, error -71 [ 1056.714142][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1056.866932][ T10] usb 7-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1056.964521][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.990170][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1057.000671][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.009155][ T10] usb 7-1: Product: syz [ 1057.010007][T20053] loop6: detected capacity change from 0 to 7 [ 1057.013712][ T10] usb 7-1: Manufacturer: syz [ 1057.032176][ T10] usb 7-1: SerialNumber: syz [ 1057.041247][ T10] usb 7-1: config 0 descriptor?? [ 1057.096142][T11395] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1057.113410][ T5849] Dev loop6: unable to read RDB block 7 [ 1057.118988][ T5849] loop6: unable to read partition table [ 1057.140512][ T5849] loop6: partition table beyond EOD, truncated [ 1057.205674][T20053] Dev loop6: unable to read RDB block 7 [ 1057.211864][T20053] loop6: unable to read partition table [ 1057.243509][T20053] loop6: partition table beyond EOD, truncated [ 1057.267866][T20040] binder: 20037:20040 ioctl c0306201 80000100 returned -11 [ 1057.275312][ T51] Bluetooth: hci2: command tx timeout [ 1057.284176][T20053] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1057.402189][ T5972] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1057.476677][T20058] fuse: Bad value for 'fd' [ 1057.532117][T11395] usb 2-1: Using ep0 maxpacket: 32 [ 1057.549258][T11395] usb 2-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1057.577421][T11395] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1057.726752][T11395] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1057.738275][ T5972] usb 5-1: Using ep0 maxpacket: 32 [ 1057.771022][T18095] IPVS: stop unused estimator thread 0... [ 1057.782184][T11395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.909434][ T5972] usb 5-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1057.929135][T11395] usb 2-1: Product: syz [ 1057.955255][T11395] usb 2-1: Manufacturer: syz [ 1057.965846][ T5972] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1058.047741][T19977] chnl_net:caif_netlink_parms(): no params data found [ 1058.079458][T11395] usb 2-1: SerialNumber: syz [ 1058.150595][ T5972] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1058.163156][T11395] usb 2-1: config 0 descriptor?? [ 1058.266438][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.284715][ T5972] usb 5-1: Product: syz [ 1058.304012][ T5972] usb 5-1: Manufacturer: syz [ 1058.309152][ T5972] usb 5-1: SerialNumber: syz [ 1058.325347][ T5972] usb 5-1: config 0 descriptor?? [ 1058.542805][T20048] binder: 20043:20048 ioctl c0306201 80000100 returned -11 [ 1058.556069][T20048] fuse: Bad value for 'fd' [ 1058.594457][T20055] binder: 20049:20055 ioctl c0306201 80000100 returned -11 [ 1058.612830][T20055] fuse: Bad value for 'fd' [ 1058.913771][T19977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.978505][T19977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.212747][T20078] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3747'. [ 1059.381044][ T51] Bluetooth: hci2: command tx timeout [ 1059.381642][T19977] bridge_slave_0: entered allmulticast mode [ 1059.485621][T19977] bridge_slave_0: entered promiscuous mode [ 1059.575838][T19977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.720536][T19977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.741172][T19977] bridge_slave_1: entered allmulticast mode [ 1059.821533][T19977] bridge_slave_1: entered promiscuous mode [ 1059.831438][T11395] usb 2-1: USB disconnect, device number 58 [ 1060.074932][T20084] loop6: detected capacity change from 0 to 7 [ 1060.129553][T19977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.143513][T20084] Dev loop6: unable to read RDB block 7 [ 1060.181521][T19977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.195475][T20084] loop6: unable to read partition table [ 1060.212114][T20084] loop6: partition table beyond EOD, truncated [ 1060.222783][T20084] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1060.352963][ T10] usb 7-1: USB disconnect, device number 53 [ 1060.374459][ T6038] udevd[6038]: setting mode of /dev/bus/usb/007/053 to 020664 failed: No such file or directory [ 1060.448804][ T6038] udevd[6038]: setting owner of /dev/bus/usb/007/053 to uid=0, gid=0 failed: No such file or directory [ 1060.665466][T19977] team0: Port device team_slave_0 added [ 1060.754887][T19977] team0: Port device team_slave_1 added [ 1061.013788][T19977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.029233][T19977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.065896][ T5972] usb 5-1: USB disconnect, device number 51 [ 1061.094068][T19977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.310942][T19977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.338029][T19977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1061.428246][T19977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.707560][T19977] hsr_slave_0: entered promiscuous mode [ 1061.864273][T19977] hsr_slave_1: entered promiscuous mode [ 1061.888314][T19977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.916530][T19977] Cannot create hsr debugfs directory [ 1061.998352][T20114] loop2: detected capacity change from 0 to 7 [ 1062.036276][T20114] Dev loop2: unable to read RDB block 7 [ 1062.042269][T20114] loop2: AHDI p1 p2 p3 [ 1062.046758][T20114] loop2: partition table partially beyond EOD, truncated [ 1062.078592][T20114] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1062.104160][T20114] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1062.611106][T20116] loop6: detected capacity change from 0 to 7 [ 1062.627928][ T5849] Dev loop6: unable to read RDB block 7 [ 1062.660419][ T5849] loop6: unable to read partition table [ 1062.681043][ T5849] loop6: partition table beyond EOD, truncated [ 1062.780224][T20116] Dev loop6: unable to read RDB block 7 [ 1062.804656][T20116] loop6: unable to read partition table [ 1062.840794][T20116] loop6: partition table beyond EOD, truncated [ 1062.898652][T20116] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1063.536130][T20138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1063.549164][T20138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1063.631000][T20138] netlink: 'syz.1.3761': attribute type 18 has an invalid length. [ 1063.645608][ T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1063.832285][T20133] pimreg: entered allmulticast mode [ 1063.846175][T20133] pimreg: left allmulticast mode [ 1063.962353][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1063.970105][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.017698][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1064.121649][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1064.342140][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1064.375921][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.441571][ T10] usb 5-1: config 0 descriptor?? [ 1064.645363][T20152] loop6: detected capacity change from 0 to 7 [ 1064.737372][ T5849] Dev loop6: unable to read RDB block 7 [ 1064.762808][ T5849] loop6: unable to read partition table [ 1064.818474][ T5849] loop6: partition table beyond EOD, truncated [ 1064.857723][T20152] Dev loop6: unable to read RDB block 7 [ 1064.863550][T20152] loop6: unable to read partition table [ 1064.870406][T20152] loop6: partition table beyond EOD, truncated [ 1064.903904][T20127] random: crng reseeded on system resumption [ 1064.943357][T20152] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1065.034823][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 1065.051096][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1065.119325][ T10] usb 5-1: USB disconnect, device number 52 [ 1065.319071][T19977] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1065.450781][T19977] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1065.813356][T19977] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1065.864822][T19977] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1065.914594][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 1066.350493][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'. [ 1066.676369][T19977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.870762][T19977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.903168][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.910371][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.178561][ T2936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.185702][ T2936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.289584][ T5966] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1067.461951][ T5966] usb 7-1: Using ep0 maxpacket: 32 [ 1067.476212][ T5966] usb 7-1: config 0 has an invalid descriptor of length 77, skipping remainder of the config [ 1067.499081][ T5966] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1067.513013][ T5966] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1067.526333][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.538752][ T5966] usb 7-1: Product: syz [ 1067.544046][ T5966] usb 7-1: Manufacturer: syz [ 1067.559255][ T5966] usb 7-1: SerialNumber: syz [ 1067.579678][ T5966] usb 7-1: config 0 descriptor?? [ 1067.705607][T20200] loop4: detected capacity change from 0 to 7 [ 1067.745015][ T5849] Dev loop4: unable to read RDB block 7 [ 1067.750620][ T5849] loop4: unable to read partition table [ 1067.770085][T20202] loop6: detected capacity change from 0 to 7 [ 1067.786850][T20202] Dev loop6: unable to read RDB block 7 [ 1067.795655][T20202] loop6: unable to read partition table [ 1067.810978][T20202] loop6: partition table beyond EOD, truncated [ 1067.831360][T20202] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1067.847324][T19977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.854373][ T5849] loop4: partition table beyond EOD, truncated [ 1067.927983][T20200] Dev loop4: unable to read RDB block 7 [ 1068.013678][T20200] loop4: unable to read partition table [ 1068.021293][T20200] loop4: partition table beyond EOD, truncated [ 1068.030567][T20190] fuse: Bad value for 'fd' [ 1068.035741][T20200] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1068.443187][T19977] veth0_vlan: entered promiscuous mode [ 1068.492124][T20215] loop2: detected capacity change from 0 to 7 [ 1068.521970][T20215] Dev loop2: unable to read RDB block 7 [ 1068.528668][T20215] loop2: AHDI p1 p2 p3 [ 1068.533325][T20215] loop2: partition table partially beyond EOD, truncated [ 1068.541208][T20215] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1068.548221][T20215] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1068.784330][T19977] veth1_vlan: entered promiscuous mode [ 1068.901954][T11403] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1069.121865][T11403] usb 2-1: Using ep0 maxpacket: 16 [ 1069.253229][T19977] veth0_macvtap: entered promiscuous mode [ 1069.292668][T20220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.319929][T20220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1069.334099][T19977] veth1_macvtap: entered promiscuous mode [ 1069.488346][T19977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.541483][T19977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.623068][T19977] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.632055][T19977] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.667053][T19977] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.696140][T19977] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.015680][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.098738][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.218759][T11318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.329151][T11318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.818410][T20237] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1070.961521][ T5966] usb 7-1: USB disconnect, device number 54 [ 1071.072700][ T5906] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1071.541972][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 1071.554484][ T5906] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1071.575434][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.714047][ T5906] usb 5-1: Product: syz [ 1071.783417][ T5906] usb 5-1: Manufacturer: syz [ 1071.800485][ T5906] usb 5-1: SerialNumber: syz [ 1071.801860][ T5966] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1071.859476][ T5906] usb 5-1: config 0 descriptor?? [ 1071.895352][ T5906] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1071.911121][T11403] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1071.949521][T11403] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1071.970478][T11403] usb 2-1: can't read configurations, error -71 [ 1072.151464][ T5966] usb 7-1: config 0 has no interfaces? [ 1072.168508][ T5966] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1072.177655][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.220468][ T5966] usb 7-1: Product: syz [ 1072.250718][ T5966] usb 7-1: Manufacturer: syz [ 1072.257275][ T5966] usb 7-1: SerialNumber: syz [ 1072.273234][ T5966] usb 7-1: config 0 descriptor?? [ 1072.356621][ T5906] gspca_ov534_9: reg_w failed -71 [ 1072.718787][T20246] pimreg: entered allmulticast mode [ 1072.758102][T20245] pimreg: left allmulticast mode [ 1072.832995][ T5906] gspca_ov534_9: Unknown sensor 0000 [ 1072.833092][ T5906] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1072.865930][ T5906] usb 5-1: USB disconnect, device number 53 [ 1072.945089][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3780'. [ 1073.130564][T20279] loop6: detected capacity change from 0 to 7 [ 1073.164248][T20279] Dev loop6: unable to read RDB block 7 [ 1073.194791][T20279] loop6: unable to read partition table [ 1073.281143][T20279] loop6: partition table beyond EOD, truncated [ 1073.302241][T20279] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1074.181073][ T5906] usb 7-1: USB disconnect, device number 55 [ 1074.814174][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3793'. [ 1076.978816][T20357] vlan2: entered allmulticast mode [ 1077.004321][T20357] bond0: entered allmulticast mode [ 1077.028071][T20357] bond_slave_0: entered allmulticast mode [ 1077.055310][T20357] bond_slave_1: entered allmulticast mode [ 1079.621852][ T30] audit: type=1400 audit(1751935611.334:552): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_switch" pid=20393 comm="syz.8.3821" [ 1081.194505][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 1081.267927][T20441] sctp: [Deprecated]: syz.7.3839 (pid 20441) Use of int in max_burst socket option. [ 1081.267927][T20441] Use struct sctp_assoc_value instead [ 1084.589779][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'. [ 1089.085668][T16637] ------------[ cut here ]------------ [ 1089.091404][T16637] WARNING: CPU: 0 PID: 16637 at kernel/softirq.c:387 __local_bh_enable_ip+0x180/0x1c0 [ 1089.100974][T16637] Modules linked in: [ 1089.105085][T16637] CPU: 0 UID: 0 PID: 16637 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1089.115687][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1089.125751][T16637] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1089.131747][T16637] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d e9 82 41 ec 09 cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 17 a2 8f 80 e1 07 80 c1 03 38 [ 1089.151365][T16637] RSP: 0018:ffffc9000e9874c0 EFLAGS: 00010046 [ 1089.157436][T16637] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1089.165401][T16637] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89de65e3 [ 1089.173369][T16637] RBP: ffffc9000e987548 R08: ffff8880b863bf03 R09: 1ffff110170c77e0 [ 1089.181340][T16637] R10: dffffc0000000000 R11: ffffed10170c77e1 R12: ffff8880b863bf00 [ 1089.189314][T16637] R13: ffff888044f7ed70 R14: dffffc0000000000 R15: 1ffff92001d30e98 [ 1089.197290][T16637] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 1089.206220][T16637] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1089.212798][T16637] CR2: 00000000f7454230 CR3: 0000000075b9c000 CR4: 00000000003526f0 [ 1089.220767][T16637] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006 [ 1089.228735][T16637] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1089.236702][T16637] Call Trace: [ 1089.239975][T16637] [ 1089.242903][T16637] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1089.248629][T16637] ? do_raw_spin_unlock+0x122/0x240 [ 1089.253829][T16637] ? rt_set_nexthop+0x693/0xa80 [ 1089.258676][T16637] rt_set_nexthop+0x693/0xa80 [ 1089.263357][T16637] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1089.269439][T16637] ? ip_route_output_key_hash+0xde/0x2e0 [ 1089.275077][T16637] ip_route_output_key_hash+0x1b9/0x2e0 [ 1089.280636][T16637] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1089.286717][T16637] ? make_kuid+0x1d9/0x680 [ 1089.291138][T16637] ? lockdep_unlock+0x89/0x120 [ 1089.295898][T16637] ? __pfx_make_kuid+0x10/0x10 [ 1089.300669][T16637] ip_route_output_flow+0x2a/0x150 [ 1089.305789][T16637] rxrpc_init_peer+0x50a/0xc60 [ 1089.310565][T16637] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1089.315857][T16637] ? __lock_acquire+0xab9/0xd20 [ 1089.320711][T16637] ? do_raw_spin_lock+0x121/0x290 [ 1089.325748][T16637] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1089.331127][T16637] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1089.336597][T16637] rxrpc_new_incoming_call+0x612/0x14f0 [ 1089.342163][T16637] rxrpc_io_thread+0x18b2/0x2cd0 [ 1089.347100][T16637] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1089.352236][T16637] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1089.357527][T16637] ? do_raw_spin_lock+0x121/0x290 [ 1089.362560][T16637] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1089.368475][T16637] ? __kthread_parkme+0x1a1/0x200 [ 1089.373515][T16637] kthread+0x70e/0x8a0 [ 1089.377587][T16637] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1089.382876][T16637] ? __pfx_kthread+0x10/0x10 [ 1089.387476][T16637] ? _raw_spin_unlock_irq+0x23/0x50 [ 1089.392677][T16637] ? lockdep_hardirqs_on+0x9c/0x150 [ 1089.397879][T16637] ? __pfx_kthread+0x10/0x10 [ 1089.402473][T16637] ret_from_fork+0x3fc/0x770 [ 1089.407067][T16637] ? __pfx_ret_from_fork+0x10/0x10 [ 1089.412181][T16637] ? __switch_to_asm+0x39/0x70 [ 1089.416945][T16637] ? __switch_to_asm+0x33/0x70 [ 1089.421709][T16637] ? __pfx_kthread+0x10/0x10 [ 1089.426307][T16637] ret_from_fork_asm+0x1a/0x30 [ 1089.431085][T16637] [ 1089.434110][T16637] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1089.441384][T16637] CPU: 0 UID: 0 PID: 16637 Comm: krxrpcio/7001 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1089.451969][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1089.462021][T16637] Call Trace: [ 1089.465294][T16637] [ 1089.468219][T16637] dump_stack_lvl+0x99/0x250 [ 1089.472808][T16637] ? __asan_memcpy+0x40/0x70 [ 1089.477393][T16637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1089.482594][T16637] ? __pfx__printk+0x10/0x10 [ 1089.487199][T16637] panic+0x2db/0x790 [ 1089.491100][T16637] ? __pfx_panic+0x10/0x10 [ 1089.495520][T16637] ? show_trace_log_lvl+0x4fb/0x550 [ 1089.500725][T16637] ? ret_from_fork_asm+0x1a/0x30 [ 1089.505671][T16637] __warn+0x31b/0x4b0 [ 1089.509650][T16637] ? __local_bh_enable_ip+0x180/0x1c0 [ 1089.515021][T16637] ? __local_bh_enable_ip+0x180/0x1c0 [ 1089.520389][T16637] report_bug+0x2be/0x4f0 [ 1089.524722][T16637] ? __local_bh_enable_ip+0x180/0x1c0 [ 1089.530089][T16637] ? __local_bh_enable_ip+0x180/0x1c0 [ 1089.535460][T16637] ? __local_bh_enable_ip+0x182/0x1c0 [ 1089.540829][T16637] handle_bug+0x84/0x160 [ 1089.545075][T16637] exc_invalid_op+0x1a/0x50 [ 1089.549574][T16637] asm_exc_invalid_op+0x1a/0x20 [ 1089.554422][T16637] RIP: 0010:__local_bh_enable_ip+0x180/0x1c0 [ 1089.560400][T16637] Code: 48 3b 44 24 48 75 57 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d e9 82 41 ec 09 cc 90 0f 0b 90 e9 f9 fe ff ff e8 53 00 00 00 eb 9f 90 <0f> 0b 90 e9 24 ff ff ff 48 c7 c1 30 17 a2 8f 80 e1 07 80 c1 03 38 [ 1089.580001][T16637] RSP: 0018:ffffc9000e9874c0 EFLAGS: 00010046 [ 1089.586075][T16637] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 0000000000000000 [ 1089.594050][T16637] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff89de65e3 [ 1089.602021][T16637] RBP: ffffc9000e987548 R08: ffff8880b863bf03 R09: 1ffff110170c77e0 [ 1089.609989][T16637] R10: dffffc0000000000 R11: ffffed10170c77e1 R12: ffff8880b863bf00 [ 1089.617956][T16637] R13: ffff888044f7ed70 R14: dffffc0000000000 R15: 1ffff92001d30e98 [ 1089.625934][T16637] ? rt_set_nexthop+0x693/0xa80 [ 1089.630790][T16637] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1089.636521][T16637] ? do_raw_spin_unlock+0x122/0x240 [ 1089.641731][T16637] ? rt_set_nexthop+0x693/0xa80 [ 1089.646594][T16637] rt_set_nexthop+0x693/0xa80 [ 1089.651277][T16637] ip_route_output_key_hash_rcu+0x18f6/0x23a0 [ 1089.657365][T16637] ? ip_route_output_key_hash+0xde/0x2e0 [ 1089.663005][T16637] ip_route_output_key_hash+0x1b9/0x2e0 [ 1089.668560][T16637] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1089.674640][T16637] ? make_kuid+0x1d9/0x680 [ 1089.679059][T16637] ? lockdep_unlock+0x89/0x120 [ 1089.683821][T16637] ? __pfx_make_kuid+0x10/0x10 [ 1089.688605][T16637] ip_route_output_flow+0x2a/0x150 [ 1089.693737][T16637] rxrpc_init_peer+0x50a/0xc60 [ 1089.698523][T16637] ? __pfx_rxrpc_init_peer+0x10/0x10 [ 1089.703816][T16637] ? __lock_acquire+0xab9/0xd20 [ 1089.708681][T16637] ? do_raw_spin_lock+0x121/0x290 [ 1089.713717][T16637] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1089.719098][T16637] rxrpc_new_incoming_peer+0x281/0x5a0 [ 1089.724570][T16637] rxrpc_new_incoming_call+0x612/0x14f0 [ 1089.730135][T16637] rxrpc_io_thread+0x18b2/0x2cd0 [ 1089.735075][T16637] ? rxrpc_io_thread+0x1171/0x2cd0 [ 1089.740214][T16637] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1089.745508][T16637] ? do_raw_spin_lock+0x121/0x290 [ 1089.750545][T16637] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1089.756473][T16637] ? __kthread_parkme+0x1a1/0x200 [ 1089.761504][T16637] kthread+0x70e/0x8a0 [ 1089.765587][T16637] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 1089.770893][T16637] ? __pfx_kthread+0x10/0x10 [ 1089.775503][T16637] ? _raw_spin_unlock_irq+0x23/0x50 [ 1089.780711][T16637] ? lockdep_hardirqs_on+0x9c/0x150 [ 1089.785916][T16637] ? __pfx_kthread+0x10/0x10 [ 1089.790515][T16637] ret_from_fork+0x3fc/0x770 [ 1089.795113][T16637] ? __pfx_ret_from_fork+0x10/0x10 [ 1089.800229][T16637] ? __switch_to_asm+0x39/0x70 [ 1089.804998][T16637] ? __switch_to_asm+0x33/0x70 [ 1089.809767][T16637] ? __pfx_kthread+0x10/0x10 [ 1089.814364][T16637] ret_from_fork_asm+0x1a/0x30 [ 1089.819145][T16637] [ 1089.822388][T16637] Kernel Offset: disabled [ 1089.826714][T16637] Rebooting in 86400 seconds..