last executing test programs: 17m11.118013638s ago: executing program 0 (id=2100): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x8000000) (fail_nth: 5) 17m11.008553811s ago: executing program 0 (id=2102): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) socket(0x2b, 0x800, 0x7) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000f1401002abd7000000000000c004500b9e7ff4357636d0041b89893f2eec95a84a3884a267c1f939d8fc01cad39565ac43b67e5d13d6d9a37a063263757e3d5c61eeaf7e14f12fbef763655f971470b8c0b10a4216d2bb5b822d7f7d42c533049f0cc3e4be7f39ad641bbd6a47b77d3f94cbcc4a54402b02fbc8c42f8ae3990b68edc3d98022e0046a827f2ad51ceeaeceedc8520ab5740435f48b7ecd0b52efb6318259e40ef21c7ccafc210ad7e12"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000006f00000001"], 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r7}, 0x38) close_range(r5, r5, 0x0) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000180)=ANY=[@ANYBLOB="30340800080211000001ffffff05ffff505050505050030484adca0001002d1a2000046f000000000000000500060005000000000402000000c0"], 0x3a) 17m9.613551731s ago: executing program 0 (id=2112): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x13ce, 0x0, 0x2, 0x3, 0x0, 0x0, 0x40, 0x800000}}, 0x50) read$FUSE(r2, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) r6 = dup3(r5, r2, 0x0) close(0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r10, 0x107, 0x18, 0xfffffffffffffffe, &(0x7f00000003c0)=0x1a) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x84, 0x522b5bf8}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f00000000c0)={r11, 0x400}, 0x8) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x14, r8, 0x4, 0x70bd2d, 0x20, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) setsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f00000001c0)={@local, @loopback, r13}, 0xc) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)='.', 0x1}], 0x1, &(0x7f0000000740), 0x0, 0x4048800}, 0x10) 17m9.296237483s ago: executing program 0 (id=2114): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000340)={r5, 0x11, 0x6, @random="c35a07306ac9"}, 0xffffffffffffff68) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000300)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2d, 0x100, {0x0, 0x0, 0x0, r5, {0xe, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x4804) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x2a6, [0x200000000280, 0x2, 0x0, 0x2000000002b3, 0x40002000000002e0, 0x1], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r2]}, 0x7c) r8 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x1) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, r8}, 0x2e) 17m8.456723164s ago: executing program 0 (id=2116): syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000600)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @device_a, @random="67f9e2b32463", {0x5, 0x2}, @value=@ver_80211n={0x0, 0x4000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x8800, 0x39, @default, @void, @val={0x2d, 0x1a, {0x20, 0x3, 0x4, 0x0, {0x0, 0x7f, 0x0, 0x12a, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x9, 0xf}}, [{0xdd, 0x89, "d4010d7d7b60a1f7fcf1693bf5e6588f0131c00e22b200346589ef801aabfa362b24931d736991a38e303cb12d32a84d28285d545f3324be257350ec34e0ce5fe049bcc2eab0dd8f87204b439144096e63e2fdeba2c8634c75ebdd9e5c53ce61511324956826fe101863e65a971651979f866266da432d03fa4424b94886ce7f2cf431136303deaf80"}, {0xdd, 0xca, "5fc678ef7f198702cdce226a68c4711ec1a0e8c2eaff75f74f2764316a5bbce1c2be68d97aa8980a8a793123b77b8ee1c78bcd2e159d557b932fc35dd78a504ee48bcde2ae33c000a12e2875404e7df1f0dc3aede33ec4266f625c2a53564c3d439793e997be8637ba62aafd234f7bf1868e046b63395c6628666b7c3c002e841c1422ab9492106c3b21647cc6ecdd2ec198e7e6c27d686a17bc1eef8523850522de6244a98178662ca0edf1eceddf3e762417dd94db39b03b9b9e9a87b124a3b7488f044b06ca54a705"}, {0xdd, 0x45, "fa2ddb3e2a8f4cac42651108ece88f712fc24642dc1c8c3de53c88fff719b5cad55edc75ac7ba1e409fadc4279c72938a887aac1d6e461f43eea978fc510a4e7b2460eddf8"}]}, 0x1dc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chmod(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xf2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x39, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) recvmsg(r0, &(0x7f0000007800)={0x0, 0x0, 0x0}, 0x40010022) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@phonet={0x23, 0xff, 0x4, 0x7}, 0x14, 0x0, 0x0, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}], 0x18}}], 0x1, 0x40001) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x140e, 0x400, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffff046}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000800)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @initial, {0xf, 0x3}}, @random="d673eef55eacd4a6ef35a756cb6c2acbe67982f07ac5577cd3a269b76a0e19de64715ada277bfdeff40558ef76effd72de1c39ec5b6107a657bf10466132db5f027f9e1c4acbe18245ec2c65ff652ee1b1a8ec348860339ea2f8fc65d86203fbcdb101b2157a36dcbdd8783b6274856a182cdcb460d3b656a40476c93e7331d927dec9b8e4a29fdef91717e4ec4eb94f7f4d6e4f02e54e279ae07e9c6305ca2d426e1a5dd25b05b5327887b4ca0f38d036da75ba29da19f87b6060f52b4f4699664709cf0ddee657a7ac4de606e0d3c0e6b8e56ad6ad3396281d3d6ff1630f868b3932649ad68f2aafe6bfa764fb2c84db79d787e6e1bd4776b2a582913fab4ed43f374cadebd4c432a8f759678a91241316d8ff05b683b3e287cd54744047105e85b285220c01e8ce4b933ab102b8412460a72161c8523ec186995c33f1c1cf1bdfa1dfc1767c4e82e7c4c700608bd782199dad49665be52d2cd0b139f60886b4782a3d9c8fd72eab3b497a284733ec8fc27f9d8edd7198f71c9afbcf0b7b32c689083464262e0fb94f597e2fd160bbdd102b0063550e0fc24471b467f70dcc0173642a46000a6445b0cf9f246e53d2646981907e98443f65aa3c1ff3b19b8abdbaaa303bc64928dafbcd0b66799e4ada8075f3bbf2ec1b85e37e3834c33581cfc3a8a80eef3843fc51b02daae839388d23536f1aa2c94f3427734001f8b17ce83d8c136836243d83f4180d842cddfa4de75588d031a258d92e9498ae344c83a7cdec2bdc54c29c0aafb1130bb76620946de8e0b8864462a186165fe78d7f44574ec17d1a52de54791efbbac208c233fdbdb59c37cc2db526b32122e14f34614b710ffb591d0d4a1ad4829c1d63c1eeff3668a402f30caad115f3b3894125985eea9da7198bcc659e500b10eacd7d594eff7564956bcd86cfc996bab00a30623b7c2d76cc44d753fbeeaa701995d8bf74eea8ec8a799ead5c4216a70127692183651c960bb4750117dde59f93781cb3b6996e0b03f21ced2c51c40c7e9853c529a33859965ad0e5329dc76a86ed12b5ce3e13aa8e5d17d2247aed133274167ca7a78025cb2058fbc8bbdb3e503ac8e8565df7b6ee812f9f9de3ea445dcac6434256b76367b789490527149b7981f4333c8c38c2d80febeab9481fa2771a3df15ac6d182b647b0f449602d7a5b13125bbe2fd5a85ed79954071ea08df96e569773350a63870c91605e1e0c88ad72744778237114b2ddd1efd1e829f7dc65732074b2bc8bb103dbdaf6654fa4b641824af8050bfe6f6bca8dec37ad3f02ac9c9938efdf37db12b9506e9391961a3ce2b37cd82a76dc272a0480cba0e366221c8c379e2b447c62a84ae9a5bd3eee3514f8e30302ab737c4d6d1db1d9b4aa0eaae23dbfcdd2313201d63d85cff4dedf5431d655a49baea56a932aa3512f6194b91429336859aa99c15d83f41a128286467ae62838ffbe0f5fbda604dbcef0ebc486a2018e327c37aa099a6bee51befb15a1c3b749725553d30e2d835f495eaf02c4f7e43547b21053e73c6a75c98bb153cb14ae36ec258097e51bbda12f720d8ffa984b423edf82141d49202c24bad768"}, 0x487) 17m7.818691372s ago: executing program 0 (id=2124): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x0, 0x6, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0xb4, 0x5, 0x0, "580ac77f"}, 0x3, 0x2, {0x0}, 0x9}) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, 0x0, 0x0) listen(r2, 0xa) connect$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) sendmsg(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='re', 0x2}], 0x1, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "01000000000000"}], 0x18}, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x82, 0x5e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8000000) 16m52.731632515s ago: executing program 32 (id=2124): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x0, 0x6, {0x0, 0xea60}, {0x5, 0x2, 0x9, 0xb4, 0x5, 0x0, "580ac77f"}, 0x3, 0x2, {0x0}, 0x9}) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, 0x0, 0x0) listen(r2, 0xa) connect$rxrpc(r3, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "02"}], 0x18}, 0x0) sendmsg(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000001300)='re', 0x2}], 0x1, &(0x7f0000001400)=[{0x18, 0x110, 0x1, "01000000000000"}], 0x18}, 0x0) r4 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) writev(r5, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r4, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r6 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214d, 0xc000, 0x82, 0x5e}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r6, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8000000) 5m44.472093546s ago: executing program 2 (id=5739): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000880), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000000180)=[{0xfffc, 0x1, 0x51, &(0x7f0000000040)="2f2ceb5003d55669142273f339282356ad1a2101b4b40fe94d36edf01c60d4450b3b945a749427b36ab2f547b1afd3d6dc24c6275b0b02a3ad1fcc446bc432a50f2d1db40b56a41c8e52722b678481503c"}], 0x1}) syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f7001020301090212000100000000090401"], 0x0) 5m41.108062472s ago: executing program 2 (id=5759): socket$inet_sctp(0x2, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, 0x0, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m40.457471542s ago: executing program 2 (id=5763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffff, 0x2}}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffe, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_SEND_ZC={0x2f, 0x0, 0x28, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0}, 0x5, 0x4800}) sendto$inet6(r1, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x6}, 0x1c) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000000303010000000000000000000a0000000c0002000000230100000001"], 0x54}}, 0x0) 5m39.460012823s ago: executing program 2 (id=5775): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f00000001c0)={0x3, 0x10000, 0x1}) socket(0xa, 0x1, 0x0) r4 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x97, @string={0x97, 0x3, "e7d0c17fca0c64f278d2fbc83411110e157968f8c88f4bdc0b22cb76ac000d60584cd130fd96a84f4b60254af774dfb5fe6169518727569b351168c60b8c460d3254a2f5450481bbe600525d3851e7eb6fc8fd370cb50bb6f3c75f87701304d729f4d2697fbe1e452598c812b500a17394b399ba0f67775b753fcf21092a1f6282d79fdbcc75941010af5dd65b519b25ab1db90018"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0003040000f203034a04"], 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201400000000a01816007214cf1eb84f8f3196078b611d6ac0a7bec00dc86436fd194dda0930a17dd6541641501c1e2b2fcb550f8ca1bcf9fc3bda745ae36972411a1df762079bf6f0259d778d4186416131e4da5275307997e8803771788fe7696b8adc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x8, 0x10, 0x8, 0x5, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x55}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x0) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x1, 0x7, 0x112}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489, 0x10122}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4017}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r3}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x48) 5m37.200081188s ago: executing program 2 (id=5786): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x14) write(r1, &(0x7f0000000280), 0x0) 5m37.183406086s ago: executing program 2 (id=5787): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2b, 0x1, 0x1) r1 = fsopen(&(0x7f0000000780)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000040)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@\xe7\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbe\xf7\xa7N\xf5L.d9\xc3t\x8b]YA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\xfe\x0e1\x9f\xd2\xb2\x81?\x04\x0e\x9a]\x85z\xf4\x7f\x92\xb8\xef\x97a\x86\x17JG2e\x81\x8e\t:\x10\xaf{\xd6b\xceX\xaeb\xf4\x92\xc4m\x02\xef\xe8\'.0h\xcd\xdb\xee\x10\\\xdb\xa8\x86\x83~j\xabTy\xfe\x90a\xae \xe5\xa63\x12\x10\xfdu\x8ey\x9a\x0e\xcd\xf5\xe8y\xd4\xc5\x99\xf6\x93\x1f\x19\x16w\b9\x0fq\xa6 \x0f\xa5{c\x18\x15\x973', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0) r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') preadv(r6, &(0x7f0000001140)=[{&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x1fd, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB="540000000906030000000000000000000000000608000940000000083800078005000300000000000c00168008000140640101000800094000001000080009000800064000000800"/84], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) syz_emit_ethernet(0x66, &(0x7f0000001480)=ANY=[@ANYBLOB="ffffffffffff0180c200000008f56900000000000000002f90780000000000000000248088a80000000010000800000086dd080088be00000000100700800100000000000000080022eb0000d7a2515b0ef18300002000000002000000000000000000000008006558fffffffd2fe31752bbfc476cffa8decc6749431de909a6d90164c66aa0feb7009a0fefc290a80e9724fe939abfc3c3d4c2f68079e1836d1022daeaef0a982bc3"], 0x0) r13 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r13, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x1f, '\x00', @data=0xf3f3, 0x1000}, {0x24, '\x00', @data=0x4, 0x1000002}]}) r14 = dup(r12) syz_ublk_setup_queues(r14, r11, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x317}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200"], 0x48) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004e00010025bd707b1344771301fc"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040010) 5m22.043121748s ago: executing program 33 (id=5787): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2b, 0x1, 0x1) r1 = fsopen(&(0x7f0000000780)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000040)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@\xe7\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbe\xf7\xa7N\xf5L.d9\xc3t\x8b]YA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\xfe\x0e1\x9f\xd2\xb2\x81?\x04\x0e\x9a]\x85z\xf4\x7f\x92\xb8\xef\x97a\x86\x17JG2e\x81\x8e\t:\x10\xaf{\xd6b\xceX\xaeb\xf4\x92\xc4m\x02\xef\xe8\'.0h\xcd\xdb\xee\x10\\\xdb\xa8\x86\x83~j\xabTy\xfe\x90a\xae \xe5\xa63\x12\x10\xfdu\x8ey\x9a\x0e\xcd\xf5\xe8y\xd4\xc5\x99\xf6\x93\x1f\x19\x16w\b9\x0fq\xa6 \x0f\xa5{c\x18\x15\x973', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0) r4 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00') preadv(r6, &(0x7f0000001140)=[{&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x3, 0x1fd, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x368, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000480)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001440)={&(0x7f0000001340), 0xc, &(0x7f0000001400)={&(0x7f0000001380)=ANY=[@ANYBLOB="540000000906030000000000000000000000000608000940000000083800078005000300000000000c00168008000140640101000800094000001000080009000800064000000800"/84], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) syz_emit_ethernet(0x66, &(0x7f0000001480)=ANY=[@ANYBLOB="ffffffffffff0180c200000008f56900000000000000002f90780000000000000000248088a80000000010000800000086dd080088be00000000100700800100000000000000080022eb0000d7a2515b0ef18300002000000002000000000000000000000008006558fffffffd2fe31752bbfc476cffa8decc6749431de909a6d90164c66aa0feb7009a0fefc290a80e9724fe939abfc3c3d4c2f68079e1836d1022daeaef0a982bc3"], 0x0) r13 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r13, 0x40106f52, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x1f, '\x00', @data=0xf3f3, 0x1000}, {0x24, '\x00', @data=0x4, 0x1000002}]}) r14 = dup(r12) syz_ublk_setup_queues(r14, r11, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x186}, &(0x7f00000010c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x317}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x800000, 0x1, 0x0, 0x315}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200"], 0x48) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000004e00010025bd707b1344771301fc"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040010) 56.232877753s ago: executing program 6 (id=7057): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) read$FUSE(r0, &(0x7f0000008080)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x282, 0x0, 0x200}]}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 55.2917096s ago: executing program 6 (id=7059): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r0, &(0x7f0000002140)=[{&(0x7f0000000180)='T', 0x1}], 0x1) (fail_nth: 1) 54.770970411s ago: executing program 6 (id=7061): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={0x0, 0x0, 0x84000, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x7, 0x1010, r1, 0x7c5e000) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000198000/0x3000)=nil, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 54.12217963s ago: executing program 6 (id=7068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = msgget$private(0x0, 0x1f3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x2bb}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b630108", 0x25}], 0x2}, 0x8000) close(r4) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) 53.844345229s ago: executing program 6 (id=7069): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x7, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x7}, 0x8) close(0x3) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x3f, '\x00', @data=0x7, 0x4}, {0x2f, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9827fe704c54bbcd80c0ac8383761", 0x20}, 0x5}, {0x13, '\x00', @data=0x81, 0x3}, {0x13}, {0x3c, '\x00', @data=0x28, 0x1}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) 53.631922791s ago: executing program 6 (id=7070): r0 = socket(0xa, 0x3, 0xff) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2001}], 0x1, 0x40010002, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="311f23690e5065c9d621ebcac92fcfac401d9e68e9bfcec15d36af540c4eb1f74b6e85c47137138edaf082ff4a0dbbe3819109154f2241e726fbb9838c519c7d152f396a50879981c1cb30ffceab96759b7e6190bd8cf6ddf090f01eabc4e44500cfa1059f07f41c5875c45777b898125b467a4f0ab328d72f6d5a275cee24c01ffc9285c45307275e3add1833684f82d8125bc9d685763f0ff36bf1ccccc89d50dcf5c21265b49e9e0e68caf5eacd07b1d5f84792684256d61c14b4558d7407424e696bcd8c58a2", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0], 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x15}, [@FRA_FLOW={0x8, 0xb, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x9) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, 0x0) syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x7, 0x14b}, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00\"'], 0xc) 53.381219943s ago: executing program 1 (id=7073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = msgget$private(0x0, 0x1f3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x2bb}, {&(0x7f0000000100)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae3f95e35b630108", 0x25}], 0x2}, 0x8000) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) 52.262254068s ago: executing program 1 (id=7075): socket$nl_xfrm(0x10, 0x3, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r4 = openat$cgroup_int(r3, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) sendfile(r4, r4, &(0x7f00000000c0)=0x3, 0x85b5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1000000, &(0x7f0000006680)) r5 = semget$private(0x0, 0x6, 0x1b5) semop(r5, &(0x7f0000000180)=[{0x3, 0x8, 0x1000}], 0x1) r6 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5645}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff9c2f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff83050000", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) socket$nl_netfilter(0x10, 0x3, 0xc) 52.096811341s ago: executing program 5 (id=7076): io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0x4178, 0x400, 0x8001002, 0x3d7}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x50007a2) write$binfmt_elf64(r4, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2, 0x7}, [{0x3, 0xf97, 0x8, 0xd, 0x0, 0xe5, 0xffffffffffffffff, 0x4}], "75c064fb248c82455f3d5f7a31b3a8beb0076f11bfb0ab9c186a5ca8c881ba65daba20c5a2aaa07207114753a1d2ea8fe4b520f6035bb8eda72ce8cb9b6afc8577c7d8527bf3ecf6cde00a60"}, 0xc4) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00'}) sendmsg$nl_generic(r6, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000010040), &(0x7f0000010080)=0xc) ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) dup(r0) r9 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r9, 0x0, 0x0, 0x20002040) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) 51.662873161s ago: executing program 5 (id=7079): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03150000000000001c0012800b0001006970766c616e00003f000280060001000200000008000500", @ANYRES32=r1, @ANYBLOB='\b\a\n\x00', @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder-control\x00', 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f0000000640)={0x1, 0x0, @d}, 0x18, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2a, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x28b}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x513000, 0x1000, 0x0, 0x1}, 0x20) 50.988627274s ago: executing program 3 (id=7082): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4020, 0x0, 0x2, 0x3044, 0x9}, 0x30, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r1, 0x6) bind$unix(r3, &(0x7f0000000240)=@file={0x1}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x9, &(0x7f0000000040)=""/55) fcntl$lock(r5, 0x24, &(0x7f0000000240)={0x1, 0x1, 0x2, 0x70000000000000, r6}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a30000000001400000011"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) ptrace(0x11, r7) 50.786530596s ago: executing program 4 (id=7083): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8050) syz_open_dev$dri(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000010c0)=ANY=[], 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000d00)="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", 0x8c2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 50.607931361s ago: executing program 5 (id=7084): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbeb", 0xd) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000200"], 0x190) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2=0xe0000014}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x80, 0x1b, 0xcd, 0x8, 0x102c, 0x6151, 0x1108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x10, 0x6, 0x50, 0xa, "", [{{0x9, 0x4, 0xcb, 0x2, 0x0, 0x99, 0x23, 0xf9, 0xa}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x22081) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) 50.08798479s ago: executing program 3 (id=7085): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000006780)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="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", 0x557}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)="e21c4992316705136e68ff50a786b846fa4627424e2a0d3083c6a71c61f12e7880759839dc5a6d3d9a38287f7f76b8e0eb4dc580c430c650337df6dc65776696767a9d77361b6b2f08557ef0e0e3aa91e15ce4c2e89ad6090ce0ebcf5942eec058e9f41b4bd558927a08", 0x6a}], 0x1}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000001e80)=[{&(0x7f00000003c0)="8640c47febc649ceb851d89c7044ec0681e069d2ce83adcf2a1f324fcf6b78aef3405479af8fca02e9924ab80cc4b47f17f6ac111a5735167834463bd85ed6c9a287722a23a8ecb0aea0a712b72e6671b1caeed0d5fdfedec1e97b51009671c4d7d7a528f8196f95d0b3167bfae50e1d8ac209e262f93b32987f198ae53557", 0x7f}], 0x1) 50.021460895s ago: executing program 3 (id=7086): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x34000}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x40000) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r2}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f00000014c0)='gfs2\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r5], 0x18}, 0x2000c8d0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x7, 0x0, 0x0, 0x9, 0x3, 0x7, 0xc8}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$OCFS2_IOC_REFLINK(r1, 0x40186f04, &(0x7f0000000240)={&(0x7f0000000040)='\x00', &(0x7f0000000200)='\x00', 0x6d}) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080), 0x0, 0x720, 0x0, 0x0) 49.833939007s ago: executing program 4 (id=7087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r3 = msgget$private(0x0, 0x1f3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r4) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) 49.723252666s ago: executing program 1 (id=7088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) 49.190721749s ago: executing program 5 (id=7089): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x1000000, 0x0, r0) 48.945546975s ago: executing program 3 (id=7090): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x29002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x208e, &(0x7f0000000200)={0x0, 0xcb10, 0x10, 0x3, 0x4001c0}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="120100000000087d1e9c3100002100000109c0495e6415079502019f808c808e0286022d0001000030010904005809030002000921090003ed212c00090574b547fb8d10bb08da564370aa4aa1bec4f8beba8ccdcf43936f332be259893db1ddbe663b80683f8557cedb267a9eb88e87c24d7542af513f06f177c519515343cad1e412fd3a6350ff021824af407e382b00909b15c2bd5d590066dfb3c4e62c542e2fc984efc69daead62963cdba7ad4d"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="050f05b682bc2fde0c070ac3474487ecfbb21f3b7adc939d26628aca6975002cc1f4e843f943d37b54decb4a64c0e2b43db0da9f4422e79fb2f9e85ffd778a1262066eb2db3065a8b62eead0b427542a02e5a8ee08dfcc80c360ae09938b6076b0dbcbebb5be15bf0a177ab33f39de5b7496e684807436e8d44d7a1951e19dfa4f954a0deaa3bba2d3a70cbdd3ce5e90972d48110256e38d32141b02c6cbfdd1573111f3667d35372bfcbe264d239851a86fe174963e09b7bd9475597a918e4ab639de0b585665f8eacd"], 0x2, [{0x0, 0x0}, {0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00']}]}) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20242e0000002e068307b530f0184b4f32f2d180569a374066cf8a507c201accebfae0b96488538fb103d392c712478f4607b7063ab7db2fdc96fa"], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) pselect6(0x40, &(0x7f0000003d00)={0xfffffffffffffffc, 0xe1c8, 0xffffffffffffff7f, 0x4, 0xbcb, 0x8000000000f5, 0x40, 0x10}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @multicast2}, 0x10) listen(r3, 0x8) unshare(0x8030000) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x4d) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff1, 0xc}, {0x5, 0xc}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x9}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 48.647699312s ago: executing program 5 (id=7091): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001480)={&(0x7f0000000080), 0xc, &(0x7f0000001440)={&(0x7f0000001bc0)={0x2e0, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x218, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ipcomp\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8319}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'TEE\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_team\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb9, 0x4, "77d6f9bcafa9e3ed4c2a0dbbce06dd1cf392c997e1b79c19bb348db5f16b2d2a12ef12b488e78fffa176c2d1bb733c3e59f490a3ca68a98dd974fb45d9262fbd3a411b06bbf7e9b7a0ed655c7693c17a81a212482a84bc1eb3e27e553854700943ad76e07db32b985369412e9b94d51bf0cea3c7c5da2552f2a7e539cf2fe428a8b65218b4bf07b7583ef7faf4aee26faf83ec8941b0ba0e281f5a021bd7c9acd99fd6943e18814bb2bb79197e60854587b395842d"}, @ETHTOOL_A_BITSET_VALUE={0x6c, 0x4, "23500717c75c03277f19fcdeb554cbd154668be6722fe3efd42c978fe07299785a60ea6db6e40d3cc2305670a817ce5c6b666c938f266621feefed6b1d2793b7dbe6c386aabaa2273561387c413bdadfdcb0badeda9532bc9435f28e83f3e306f46160bf16525a4f"}, @ETHTOOL_A_BITSET_MASK={0x30, 0x5, "d70718adacad790345562ccdaf79bbbfa79c1b6c5a80b3d6a7bf558683b3a5a03fd7b4b3e19db4c2154b375f"}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ' \x01\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%#\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r7, 0x7, 0xffffffff, 0xff1f0000}, 0x14}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) 48.51004664s ago: executing program 4 (id=7092): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001f1401002abd7000000000000c004500"], 0x1c}}, 0x0) 48.187250099s ago: executing program 4 (id=7093): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x18, 0x4) 47.971983688s ago: executing program 1 (id=7094): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040001000000", @ANYBLOB="c35388833c7edf8f0fd9a411c52369bd1e173bdf48991433c276eceedcfa8bee3015b79c79dc9576fd77f0e526aa2dd8949df40ff79b5cfae2951a374ae60eb77e602e88661a10ae6a96748d465981937467e95824fd35f5fbaebc2fe9197dc513c8805f082a6dfe19512368460aefa92203b99783b078ea7bf26042bd4fa7a7759f6c4c88eba34f9ad4d58b8386dbf835201bd43a81134ef913875e8cf812c6413eeded44d24801de8a576471852f45a4451c020b0f961b8aaeb70b68a484c86d70ab182eec", @ANYBLOB='\x00'/20, @ANYRES64=r0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000004000000000000020000000181100", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c0001000000001c000000010c00020000000000000000010800040000000001"], 0xbc}, 0x1, 0x0, 0x0, 0x40000851}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}}) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 47.765840209s ago: executing program 1 (id=7095): syz_io_uring_setup(0x75e, &(0x7f00000000c0)={0x0, 0x4fb0, 0x80000, 0x1, 0x1b8}, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x641, 0x8000026, r0, 0x0) fanotify_mark(r1, 0x1, 0x40000010, r0, 0x0) r2 = epoll_create1(0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002b39a400000000001400000018000180140002006e657464657673696d30000000001b000500190001000000"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x24000840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f00000001c0)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r10, 0xc0386447, &(0x7f0000000300)={{0x8, 0x1, &(0x7f0000000240)=[{0x45, 0x0, 0x7}]}, 0x7, 0x1, 0x1, 0x0, 0x0, 0x10001, 0xfffffffffffffffa, 0xe0, r11}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r9, 0xc0386447, &(0x7f0000000180)={{0x8, 0x1, &(0x7f0000000140)=[{0x4, 0x0, 0xbd}]}, 0xf2, 0x43, 0xc, 0x2, 0x0, 0x5, 0x3, 0x5, r11}) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(r6) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RLOCK(r9, &(0x7f00000002c0)={0x8, 0x35, 0x2}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x430600, 0x0) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2f) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000480)={0x30000010}) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="700000000e06010100000000000000000000000a0900020073797a32000000000900020073797a30000000000900020073797a310000000005000100070000000900020073797a31000000000900020073797a3000000000050001000700000005000100070000000500010007000000ffcaa93328a340de1c7467809ea9bed0e8550f22447dd46348553bc661bbc61d810024cad52b98c01559a91fa863e62d2f061e0ba0accd01d25b736144d94ad2a1f0a2ae8b31ac9ebe9dadd7ae012dec507f88cfab5a82b0b387a642f81e3d731fefd56873e0f10e30a363c7d375bbfbfbbcc6d0"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x1) 46.883911833s ago: executing program 4 (id=7096): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000006780)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast2}, 0x10, &(0x7f0000003680)=[{&(0x7f00000008c0)="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", 0x557}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)="e21c4992316705136e68ff50a786b846fa4627424e2a0d3083c6a71c61f12e7880759839dc5a6d3d9a38287f7f76b8e0eb4dc580c430c650337df6dc65776696767a9d77361b6b2f08557ef0e0e3aa91e15ce4c2e89ad6090ce0ebcf5942eec058e9f41b4bd558927a08", 0x6a}], 0x1}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000001e80)=[{&(0x7f00000003c0)="8640c47febc649ceb851d89c7044ec0681e069d2ce83adcf2a1f324fcf6b78aef3405479af8fca02e9924ab80cc4b47f17f6ac111a5735167834463bd85ed6c9a287722a23a8ecb0aea0a712b72e6671b1caeed0d5fdfedec1e97b51009671c4d7d7a528f8196f95d0b3167bfae50e1d8ac209e262f93b32987f198ae53557", 0x7f}], 0x1) 46.531241108s ago: executing program 4 (id=7097): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01010000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002e780000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c000b80140001800c000100636f756e746572000400f780140001800c000100636f756e7465720004000280100001800c0001006e6f747261636b00140000001000010000000000000000000084000a"], 0xfc}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x50400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x2d) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x6) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) fsopen(&(0x7f0000000000)='virtiofs\x00', 0x1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) r5 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53049cc) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff000000070501"], 0x0) r6 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000540)={'virt_wifi0\x00', {0x2, 0x0, @private=0xf30a4000}}) sendmsg$tipc(r5, 0x0, 0x20008000) 46.24560778s ago: executing program 5 (id=7098): socket$nl_xfrm(0x10, 0x3, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r4 = openat$cgroup_int(r3, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) sendfile(r4, r4, &(0x7f00000000c0)=0x3, 0x85b5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xc, 0x1000000, &(0x7f0000006680)) r5 = semget$private(0x0, 0x6, 0x1b5) semop(r5, &(0x7f0000000180)=[{0x3, 0x8, 0x1000}], 0x1) r6 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r8, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5645}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff9c2f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff83050000", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) socket$nl_netfilter(0x10, 0x3, 0xc) 45.380089806s ago: executing program 3 (id=7099): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000234009f47cc16771a6802cf230cfe9b10b21d23e930a585521bbb1e40a6b9bf348abdbc3aaab8929fc320cb2cbb1e1432cb4f78db97ba54956cbcd507966716f521765d38534f643b61d8c6965af1d2cd1eb59e4f62449ddf"], 0x38}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000010) 44.972289216s ago: executing program 3 (id=7100): syz_emit_ethernet(0x8e, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x1b, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x22, 0xc, "733bfdf0f350d37ef2dc"}, @window={0x3, 0x3, 0xf}, @exp_fastopen={0xfe, 0x8, 0xf989, "685e71d2"}, @timestamp={0x8, 0xa, 0x18}, @md5sig={0x13, 0x12, "4e605bf25192a300c2efcb6d690c8f93"}, @fastopen={0x22, 0x12, "cace3fadc05de3e28b3f3259a382f94d"}, @md5sig={0x13, 0x12, "1d84e6a66d55953b1f80f150d3d20782"}]}}}}}}}, 0x0) 44.473563855s ago: executing program 1 (id=7101): socket$unix(0x1, 0x1, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d35596f010030303030303030303030303030303030303130303030302c757365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) utime(&(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r1, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000000040)={&(0x7f0000006400)={0x50, 0xfffffffffffffff5, 0x1ff, {0x7, 0x29, 0x1, 0x40220401, 0xdd1, 0x4005, 0x20000d, 0x40800, 0x0, 0x0, 0x2, 0xb3a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000008000/0x7000)=nil, 0x7000, 0x1, 0x0, 0x2, 0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000780)={&(0x7f0000000100)={0xa, 0x4e21, 0xa1, @private2, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000008700000000000000580000000000000029000000360000003a00"/48], 0x30}, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$pptp(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000780)="5505ae09", 0x4}, {0x0}], 0x2}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 0s ago: executing program 34 (id=7070): r0 = socket(0xa, 0x3, 0xff) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2001}], 0x1, 0x40010002, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="311f23690e5065c9d621ebcac92fcfac401d9e68e9bfcec15d36af540c4eb1f74b6e85c47137138edaf082ff4a0dbbe3819109154f2241e726fbb9838c519c7d152f396a50879981c1cb30ffceab96759b7e6190bd8cf6ddf090f01eabc4e44500cfa1059f07f41c5875c45777b898125b467a4f0ab328d72f6d5a275cee24c01ffc9285c45307275e3add1833684f82d8125bc9d685763f0ff36bf1ccccc89d50dcf5c21265b49e9e0e68caf5eacd07b1d5f84792684256d61c14b4558d7407424e696bcd8c58a2", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES64=r0], 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x15}, [@FRA_FLOW={0x8, 0xb, 0xf7}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x9) ioctl$PPPIOCGIDLE32(r3, 0x8008743f, 0x0) syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x7, 0x14b}, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$UHID_INPUT2(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00\"'], 0xc) kernel console output (not intermixed with test programs): 03c9 [ 1438.015653][T28521] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 1438.015670][T28521] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1438.015686][T28521] R13: 0000200000000890 R14: 00007f75dec23fd8 R15: 0000000000000000 [ 1438.015719][T28521] [ 1438.039420][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.118408][T28354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1438.244881][ T5680] gspca_vc032x: reg_r err -110 [ 1438.244940][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.244971][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245011][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245033][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245059][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245080][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245107][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245136][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245176][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245203][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245231][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245267][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245288][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245315][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245340][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245360][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245387][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245407][ T5680] gspca_vc032x: I2c Bus Busy Wait 00 [ 1438.245432][ T5680] gspca_vc032x: Unknown sensor... [ 1438.245617][ T5680] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1438.343642][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1438.372558][T28354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1438.417330][T28525] FAULT_INJECTION: forcing a failure. [ 1438.417330][T28525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1438.417372][T28525] CPU: 1 UID: 0 PID: 28525 Comm: syz.3.6801 Tainted: G L syzkaller #0 PREEMPT(full) [ 1438.417403][T28525] Tainted: [L]=SOFTLOCKUP [ 1438.417412][T28525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1438.417427][T28525] Call Trace: [ 1438.417436][T28525] [ 1438.417447][T28525] dump_stack_lvl+0xe8/0x150 [ 1438.417486][T28525] should_fail_ex+0x410/0x560 [ 1438.417520][T28525] _copy_from_user+0x2d/0xb0 [ 1438.417553][T28525] __copy_msghdr+0x390/0x590 [ 1438.417593][T28525] ___sys_sendmsg+0x213/0x360 [ 1438.417627][T28525] ? __lock_acquire+0x747/0x2de0 [ 1438.417658][T28525] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.417758][T28525] ? __fget_files+0x2a/0x420 [ 1438.417791][T28525] ? __fget_files+0x3a2/0x420 [ 1438.417835][T28525] __x64_sys_sendmsg+0x1b1/0x290 [ 1438.417872][T28525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1438.417928][T28525] do_syscall_64+0x166/0x520 [ 1438.417959][T28525] ? trace_irq_disable+0x3b/0x140 [ 1438.417983][T28525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.418007][T28525] ? clear_bhb_loop+0x70/0xc0 [ 1438.418035][T28525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.418058][T28525] RIP: 0033:0x7fb7a4d9e159 [ 1438.418079][T28525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.418099][T28525] RSP: 002b:00007fb7a5d0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.418123][T28525] RAX: ffffffffffffffda RBX: 00007fb7a5025fa0 RCX: 00007fb7a4d9e159 [ 1438.418140][T28525] RDX: 0000000000048054 RSI: 0000200000000000 RDI: 0000000000000003 [ 1438.418155][T28525] RBP: 00007fb7a5d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.418170][T28525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.418184][T28525] R13: 00007fb7a5026038 R14: 00007fb7a5025fa0 R15: 00007fb7a514fa48 [ 1438.418218][T28525] [ 1438.459453][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1438.488925][T28354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1438.531284][T28354] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1438.757185][T28528] netlink: 'syz.1.6802': attribute type 49 has an invalid length. [ 1438.922231][ T31] kauditd_printk_skb: 287 callbacks suppressed [ 1438.922255][ T31] audit: type=1326 audit(1790719760.106:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.922311][ T31] audit: type=1326 audit(1790719760.106:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.922361][ T31] audit: type=1326 audit(1790719760.106:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.923587][ T31] audit: type=1326 audit(1790719760.106:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.923809][ T31] audit: type=1326 audit(1790719760.106:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.925993][ T31] audit: type=1326 audit(1790719760.106:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.926048][ T31] audit: type=1326 audit(1790719760.106:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.941085][ T5619] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1438.947973][ T31] audit: type=1326 audit(1790719760.116:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.948159][ T31] audit: type=1326 audit(1790719760.116:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1438.948320][ T31] audit: type=1326 audit(1790719760.126:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.3.6804" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a4d9e159 code=0x7ffc0000 [ 1439.038352][T26334] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1439.203285][T28545] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1439.247093][T26334] usb 2-1: Using ep0 maxpacket: 8 [ 1439.250916][T26334] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1439.252250][T26334] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 1439.252276][T26334] usb 2-1: config 0 has no interface number 0 [ 1439.252307][T26334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.285544][T26334] usb 2-1: config 0 descriptor?? [ 1439.334307][T26334] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1439.334425][T26334] cxusb: set interface failed [ 1439.380438][T26334] dvb-usb: bulk message failed: -22 (1/0) [ 1439.407976][T26334] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1439.422597][T26334] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1439.422658][T26334] usb 2-1: media controller created [ 1439.493932][T26334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1439.565737][T28546] bond0: (slave bond_slave_1): Releasing backup interface [ 1439.704373][T28354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1439.789857][T28354] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.799410][T26334] DVB: Unable to find symbol lgdt330x_attach() [ 1439.799464][T26334] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1439.813828][T26334] dvb-usb: bulk message failed: -22 (1/0) [ 1439.813897][T26334] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1439.842948][T26334] usb 2-1: USB disconnect, device number 2 [ 1439.855379][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.855493][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1439.900514][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.900592][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1440.057922][T26334] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1440.257673][T26328] usb 7-1: USB disconnect, device number 36 [ 1440.404376][T28354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1440.594548][T28354] veth0_vlan: entered promiscuous mode [ 1440.755741][T28354] veth1_vlan: entered promiscuous mode [ 1440.942895][T28354] veth0_macvtap: entered promiscuous mode [ 1440.992307][T28354] veth1_macvtap: entered promiscuous mode [ 1441.081293][T28354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1441.130282][T28354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.209359][T19418] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.316488][T26330] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1441.384972][T19412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.397764][T15742] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1441.398286][ T6324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.463870][T26330] usb 7-1: device descriptor read/64, error -71 [ 1441.477678][ T6324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.576749][T15742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1441.577288][T15742] usb 4-1: not running at top speed; connect to a high speed hub [ 1441.577321][T15742] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1441.578288][T15742] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1441.578314][T15742] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1441.578336][T15742] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.578357][T15742] usb 4-1: config 14 has no interface number 0 [ 1441.578375][T15742] usb 4-1: config 14 has no interface number 1 [ 1441.578439][T15742] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1441.578466][T15742] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1441.578494][T15742] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1441.578524][T15742] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.578547][T15742] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1441.578567][T15742] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1441.580823][T15742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.580868][T15742] usb 4-1: Product: syz [ 1441.580885][T15742] usb 4-1: Manufacturer: syz [ 1441.580901][T15742] usb 4-1: SerialNumber: syz [ 1441.738599][T26330] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1441.779221][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.779246][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.867478][T26330] usb 7-1: device descriptor read/64, error -71 [ 1441.929385][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.929411][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.977240][T26330] usb usb7-port1: attempt power cycle [ 1442.210397][T15742] legousbtower 4-1:14.57: interrupt endpoints not found [ 1442.279954][T28584] FAULT_INJECTION: forcing a failure. [ 1442.279954][T28584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1442.279993][T28584] CPU: 1 UID: 0 PID: 28584 Comm: syz.4.6764 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.280024][T28584] Tainted: [L]=SOFTLOCKUP [ 1442.280032][T28584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1442.280046][T28584] Call Trace: [ 1442.280055][T28584] [ 1442.280066][T28584] dump_stack_lvl+0xe8/0x150 [ 1442.280103][T28584] should_fail_ex+0x410/0x560 [ 1442.280136][T28584] _copy_to_user+0x31/0xb0 [ 1442.280170][T28584] simple_read_from_buffer+0xe1/0x170 [ 1442.280211][T28584] proc_fail_nth_read+0x1bb/0x230 [ 1442.280234][T28584] ? common_file_perm+0x20e/0x2b0 [ 1442.280266][T28584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1442.280294][T28584] ? rw_verify_area+0x24a/0x4c0 [ 1442.280331][T28584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1442.280354][T28584] vfs_read+0x213/0xa80 [ 1442.280397][T28584] ? __pfx_vfs_read+0x10/0x10 [ 1442.280432][T28584] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1442.280474][T28584] ? do_sys_openat2+0x14e/0x200 [ 1442.280502][T28584] ? kmem_cache_free+0x182/0x650 [ 1442.280545][T28584] ksys_read+0x150/0x270 [ 1442.280569][T28584] ? __pfx_ksys_read+0x10/0x10 [ 1442.280590][T28584] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1442.280633][T28584] do_syscall_64+0x166/0x520 [ 1442.280663][T28584] ? trace_irq_disable+0x3b/0x140 [ 1442.280691][T28584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.280715][T28584] ? clear_bhb_loop+0x70/0xc0 [ 1442.280743][T28584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.280767][T28584] RIP: 0033:0x7fa01cb5e98e [ 1442.280787][T28584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1442.280806][T28584] RSP: 002b:00007fa01dadffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1442.280831][T28584] RAX: ffffffffffffffda RBX: 00007fa01dae06c0 RCX: 00007fa01cb5e98e [ 1442.280847][T28584] RDX: 000000000000000f RSI: 00007fa01dae00a0 RDI: 0000000000000004 [ 1442.280861][T28584] RBP: 00007fa01dae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.280875][T28584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.280889][T28584] R13: 00007fa01ce26038 R14: 00007fa01ce25fa0 R15: 00007fa01cf4fa48 [ 1442.280924][T28584] [ 1442.319466][T26330] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1442.361886][T26330] usb 7-1: device descriptor read/8, error -71 [ 1442.557638][T15742] legousbtower 4-1:14.228: get version request failed: -71 [ 1442.557812][T15742] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 1442.595361][T15742] usb 4-1: USB disconnect, device number 6 [ 1442.618525][T26330] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1442.642999][T26330] usb 7-1: device descriptor read/8, error -71 [ 1442.691691][T28587] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6810'. [ 1442.759136][T26330] usb usb7-port1: unable to enumerate USB device [ 1443.045250][T28599] netlink: 'syz.1.6814': attribute type 21 has an invalid length. [ 1443.047276][T26330] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1443.205149][T26330] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1443.212462][T26330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1443.212556][T26330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1443.212669][T26330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.259150][T26330] usb 5-1: config 0 descriptor?? [ 1443.563646][T28590] vivid-003: ================= START STATUS ================= [ 1443.563668][T28590] vivid-003: Radio HW Seek Mode: Bounded [ 1443.563694][T28590] vivid-003: Radio Programmable HW Seek: false [ 1443.563716][T28590] vivid-003: RDS Rx I/O Mode: Block I/O [ 1443.563738][T28590] vivid-003: Generate RBDS Instead of RDS: false [ 1443.563759][T28590] vivid-003: RDS Reception: true [ 1443.563779][T28590] vivid-003: RDS Program Type: 0 inactive [ 1443.563805][T28590] vivid-003: RDS PS Name: inactive [ 1443.563829][T28590] vivid-003: RDS Radio Text: inactive [ 1443.563863][T28590] vivid-003: RDS Traffic Announcement: false inactive [ 1443.563890][T28590] vivid-003: RDS Traffic Program: false inactive [ 1443.563915][T28590] vivid-003: RDS Music: false inactive [ 1443.563940][T28590] vivid-003: ================== END STATUS ================== [ 1443.978553][T26330] usbhid 5-1:0.0: can't add hid device: -71 [ 1443.978695][T26330] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1444.005394][T26330] usb 5-1: USB disconnect, device number 77 [ 1444.342456][T28651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6824'. [ 1444.825064][T28664] netlink: 'syz.4.6827': attribute type 8 has an invalid length. [ 1444.979238][T15742] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1445.016357][T20864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1445.059632][T28664] syz_tun: entered promiscuous mode [ 1445.079118][T28664] syz_tun: left promiscuous mode [ 1445.139092][T15742] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1445.140091][T15742] usb 7-1: not running at top speed; connect to a high speed hub [ 1445.140116][T15742] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1445.142592][T15742] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 1445.142612][T15742] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 1445.142628][T15742] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.142643][T15742] usb 7-1: config 14 has no interface number 0 [ 1445.142655][T15742] usb 7-1: config 14 has no interface number 1 [ 1445.142705][T15742] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1445.142724][T15742] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1445.142743][T15742] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1445.142763][T15742] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.142780][T15742] usb 7-1: config 14 interface 57 has no altsetting 0 [ 1445.142793][T15742] usb 7-1: config 14 interface 228 has no altsetting 0 [ 1445.189762][T20864] usb 4-1: device descriptor read/64, error -71 [ 1445.201304][T15742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.201332][T15742] usb 7-1: Product: syz [ 1445.201347][T15742] usb 7-1: Manufacturer: syz [ 1445.201362][T15742] usb 7-1: SerialNumber: syz [ 1445.446867][T20864] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1445.586720][T20864] usb 4-1: device descriptor read/64, error -71 [ 1445.600958][T26330] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1445.708894][T20864] usb usb4-port1: attempt power cycle [ 1445.749586][T15742] legousbtower 7-1:14.57: interrupt endpoints not found [ 1445.775875][T26330] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1445.775929][T26330] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=b0.82 [ 1445.777328][T28674] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6832'. [ 1445.781629][T26330] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.790513][T26330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.790609][T26330] usb 2-1: Product: syz [ 1445.790659][T26330] usb 2-1: Manufacturer: syz [ 1445.791622][T26330] usb 2-1: SerialNumber: syz [ 1445.871015][T26330] comedi comedi5: Wrong number of endpoints [ 1445.871040][T26330] dt9812 2-1:5.0: driver 'dt9812' failed to auto-configure device. [ 1445.952582][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1445.964808][T15742] legousbtower 7-1:14.228: get version request failed: -71 [ 1445.964982][T15742] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 1445.990193][T15742] usb 7-1: USB disconnect, device number 41 [ 1446.022291][T28668] fuse: Bad value for 'fd' [ 1446.116706][T20864] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1446.137047][T20864] usb 4-1: device descriptor read/8, error -71 [ 1446.176401][T26330] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1446.337584][T26330] usb 6-1: Using ep0 maxpacket: 32 [ 1446.340370][T26330] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1446.343746][T26330] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1446.343776][T26330] usb 6-1: config 0 has no interface number 0 [ 1446.343826][T26330] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1446.352361][T26330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.352437][T26330] usb 6-1: Product: syz [ 1446.352509][T26330] usb 6-1: Manufacturer: syz [ 1446.352556][T26330] usb 6-1: SerialNumber: syz [ 1446.370979][T26330] usb 6-1: config 0 descriptor?? [ 1446.412127][T20864] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1446.427092][T20864] usb 4-1: device descriptor read/8, error -71 [ 1446.537180][T20864] usb usb4-port1: unable to enumerate USB device [ 1447.026073][T26330] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1447.026124][T26330] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1447.194399][T28692] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6839'. [ 1447.243274][T26330] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1447.243298][T26330] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1447.243313][T26330] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1447.243523][T26330] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61 [ 1447.520233][T28699] ipvlan0: entered promiscuous mode [ 1447.666806][T28700] kvm [28698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x20 [ 1447.669746][T28700] kvm [28698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x20 [ 1447.672606][T28700] kvm [28698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1447.672670][T28700] kvm [28698]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1447.684353][T28700] kvm [28698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x20 [ 1447.684457][T28700] kvm [28698]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1447.701349][T28700] kvm [28698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 1447.701466][T28700] kvm [28698]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1447.724374][T28700] kvm [28698]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x20 [ 1447.724563][T28700] kvm [28698]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1447.912209][T28707] IPv6: Can't replace route, no match found [ 1447.997026][T26330] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1448.126462][T26330] usb 5-1: device descriptor read/64, error -71 [ 1448.178188][T26334] usb 2-1: USB disconnect, device number 3 [ 1448.217913][ T5680] hid (null): global environment stack underflow [ 1448.280981][ T5680] hid-generic 0000:FFFFFC00:90105FF.0035: collection stack underflow [ 1448.281027][ T5680] hid-generic 0000:FFFFFC00:90105FF.0035: item 0 0 0 12 parsing failed [ 1448.281915][ T5680] hid-generic 0000:FFFFFC00:90105FF.0035: probe with driver hid-generic failed with error -22 [ 1448.318598][T28697] ipvlan0: left promiscuous mode [ 1448.377993][T26330] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1448.506883][T26330] usb 5-1: device descriptor read/64, error -71 [ 1448.618820][T26330] usb usb5-port1: attempt power cycle [ 1448.657223][T26334] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1448.813547][T26334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1448.814731][T26334] usb 2-1: not running at top speed; connect to a high speed hub [ 1448.814828][T26334] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1448.816669][T26334] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1448.816731][T26334] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1448.816792][T26334] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.816845][T26334] usb 2-1: config 14 has no interface number 0 [ 1448.816895][T26334] usb 2-1: config 14 has no interface number 1 [ 1448.817100][T26334] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1448.817178][T26334] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1448.817243][T26334] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1448.817322][T26334] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.817383][T26334] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1448.817421][T26334] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1448.868105][T26334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.868186][T26334] usb 2-1: Product: syz [ 1448.868235][T26334] usb 2-1: Manufacturer: syz [ 1448.868283][T26334] usb 2-1: SerialNumber: syz [ 1448.972017][T26330] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1448.972162][ T5680] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1448.991937][T26330] usb 5-1: device descriptor read/8, error -71 [ 1449.078781][T28720] syzkaller0: entered promiscuous mode [ 1449.078806][T28720] syzkaller0: entered allmulticast mode [ 1449.120189][ T5680] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1449.123898][ T5680] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1449.123952][ T5680] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1449.123971][ T5680] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1449.123988][ T5680] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1449.124036][ T5680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.126946][ T5680] usb 7-1: config 0 descriptor?? [ 1449.242290][T26330] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1449.257177][T26330] usb 5-1: device descriptor read/8, error -71 [ 1449.367013][T26330] usb usb5-port1: unable to enumerate USB device [ 1449.394490][T26334] legousbtower 2-1:14.57: interrupt endpoints not found [ 1449.611664][T26334] legousbtower 2-1:14.228: get version request failed: -71 [ 1449.611835][T26334] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71 [ 1449.629450][ T5680] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1449.641428][T26334] usb 2-1: USB disconnect, device number 4 [ 1449.797368][ T5680] usb 6-1: USB disconnect, device number 122 [ 1449.965582][T28733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.572745][T28726] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1450.572773][T28726] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1450.576867][T28727] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1450.577476][T28727] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1450.577906][T28727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1450.578057][T28727] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1450.608949][T28726] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1450.609031][T28726] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1450.636191][T28726] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1450.636217][T28726] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1450.646483][T28727] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1450.685094][T28726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1450.685119][T28726] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1450.936655][T26334] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1451.016381][ T5680] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1451.063263][T28743] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6855'. [ 1451.086373][T26334] usb 2-1: Using ep0 maxpacket: 8 [ 1451.088613][T26334] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1451.089755][T26334] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1451.089781][T26334] usb 2-1: config 179 has no interface number 0 [ 1451.089822][T26334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1451.089852][T26334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1451.089873][T26334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1451.089891][T26334] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1451.089916][T26334] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1451.089947][T26334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.101486][T28736] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1451.209624][ T5680] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 1451.211301][ T5680] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 1451.211328][ T5680] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.211350][ T5680] usb 4-1: config 4 has no interface number 0 [ 1451.211387][ T5680] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1451.277772][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.277805][ T5680] usb 4-1: Product: syz [ 1451.277822][ T5680] usb 4-1: Manufacturer: syz [ 1451.277839][ T5680] usb 4-1: SerialNumber: syz [ 1451.326581][T20864] usb 7-1: reset high-speed USB device number 42 using dummy_hcd [ 1451.400583][T28736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.404574][T28736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.756378][ T5680] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 1451.802303][ T5680] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1451.814669][ T5680] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 1451.814903][ T5680] usb 4-1: media controller created [ 1451.852043][ T5680] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1451.955307][ T5680] DVB: Unable to find symbol dib7000p_attach() [ 1451.955328][ T5680] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 1452.087523][T20864] usb 7-1: device descriptor read/64, error -71 [ 1452.206609][ T5680] rc_core: IR keymap rc-dib0700-rc5 not found [ 1452.206631][ T5680] Registered IR keymap rc-empty [ 1452.207372][ T5680] dvb-usb: could not initialize remote control. [ 1452.207386][ T5680] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 1452.264164][T28769] i2c i2c-1: Invalid block size returned: 212 [ 1452.266090][T28741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.287605][T28741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.347999][T20864] usb 7-1: reset high-speed USB device number 42 using dummy_hcd [ 1452.406755][ T7158] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1452.507309][T20864] usb 7-1: device firmware changed [ 1452.508593][T15742] usb 7-1: USB disconnect, device number 42 [ 1452.575070][ T7158] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1452.584443][ T7158] usb 6-1: not running at top speed; connect to a high speed hub [ 1452.584480][ T7158] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1452.605099][ T7158] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1452.605129][ T7158] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1452.605153][ T7158] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.605175][ T7158] usb 6-1: config 14 has no interface number 0 [ 1452.605194][ T7158] usb 6-1: config 14 has no interface number 1 [ 1452.605284][ T7158] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1452.605312][ T7158] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1452.605341][ T7158] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1452.605370][ T7158] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.605395][ T7158] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1452.605415][ T7158] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1452.693459][T15742] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1452.733941][ T7158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.733978][ T7158] usb 6-1: Product: syz [ 1452.733997][ T7158] usb 6-1: Manufacturer: syz [ 1452.734017][ T7158] usb 6-1: SerialNumber: syz [ 1452.868588][T15742] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1452.870023][T15742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.875306][T15742] usb 7-1: config 0 descriptor?? [ 1452.908331][T15742] cp210x 7-1:0.0: cp210x converter detected [ 1453.107022][T15742] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1453.107059][T15742] cp210x 7-1:0.0: querying part number failed [ 1453.154056][T15742] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1453.177810][ T7158] legousbtower 6-1:14.57: interrupt endpoints not found [ 1453.389872][ T7158] legousbtower 6-1:14.228: get version request failed: -71 [ 1453.390170][ T7158] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 1453.424511][ T7158] usb 6-1: USB disconnect, device number 123 [ 1453.457145][T26335] usb 2-1: USB disconnect, device number 5 [ 1453.457204][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1453.457253][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1453.497101][T28778] batadv_slave_0: entered promiscuous mode [ 1453.498233][T28777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6859'. [ 1453.570170][T28777] batadv_slave_0 (unregistering): left promiscuous mode [ 1453.815055][T15742] usb 4-1: USB disconnect, device number 11 [ 1453.867656][T15742] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 1454.097315][T28793] FAULT_INJECTION: forcing a failure. [ 1454.097315][T28793] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.097353][T28793] CPU: 0 UID: 0 PID: 28793 Comm: syz.5.6871 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.097384][T28793] Tainted: [L]=SOFTLOCKUP [ 1454.097393][T28793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1454.097406][T28793] Call Trace: [ 1454.097416][T28793] [ 1454.097426][T28793] dump_stack_lvl+0xe8/0x150 [ 1454.097464][T28793] should_fail_ex+0x410/0x560 [ 1454.097497][T28793] should_failslab+0xa8/0x100 [ 1454.097530][T28793] __kmalloc_noprof+0xfe/0x720 [ 1454.097554][T28793] ? rcu_is_watching+0x16/0xb0 [ 1454.097584][T28793] ? tomoyo_realpath_from_path+0xef/0x640 [ 1454.097621][T28793] ? tomoyo_realpath_from_path+0xef/0x640 [ 1454.097662][T28793] tomoyo_realpath_from_path+0xef/0x640 [ 1454.097706][T28793] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1454.097734][T28793] tomoyo_path_number_perm+0x246/0x5f0 [ 1454.097766][T28793] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1454.097792][T28793] ? __lock_acquire+0x747/0x2de0 [ 1454.097834][T28793] ? hook_file_ioctl+0x1f2/0x600 [ 1454.097885][T28793] ? __fget_files+0x2a/0x420 [ 1454.097921][T28793] ? __fget_files+0x2a/0x420 [ 1454.097953][T28793] ? __fget_files+0x3a2/0x420 [ 1454.097984][T28793] ? __fget_files+0x2a/0x420 [ 1454.098020][T28793] security_file_ioctl+0xc3/0x2a0 [ 1454.098056][T28793] __se_sys_ioctl+0x47/0x170 [ 1454.098085][T28793] do_syscall_64+0x166/0x520 [ 1454.098118][T28793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.098142][T28793] ? clear_bhb_loop+0x70/0xc0 [ 1454.098170][T28793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.098193][T28793] RIP: 0033:0x7f75ddd9e159 [ 1454.098212][T28793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.098232][T28793] RSP: 002b:00007f75dec24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1454.098257][T28793] RAX: ffffffffffffffda RBX: 00007f75de025fa0 RCX: 00007f75ddd9e159 [ 1454.098274][T28793] RDX: 0000000000000000 RSI: 00000000000007cb RDI: 0000000000000003 [ 1454.098288][T28793] RBP: 00007f75dec24090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.098303][T28793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.098317][T28793] R13: 00007f75de026038 R14: 00007f75de025fa0 R15: 00007f75de14fa48 [ 1454.098353][T28793] [ 1454.098481][T28793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1454.780888][T26335] usb 7-1: USB disconnect, device number 43 [ 1454.784320][T26335] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1454.788524][T26335] cp210x 7-1:0.0: device disconnected [ 1454.935276][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 1454.935312][ T31] audit: type=1326 audit(1790719776.116:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1454.935424][ T31] audit: type=1326 audit(1790719776.116:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1454.935958][ T31] audit: type=1326 audit(1790719776.116:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1454.936893][ T31] audit: type=1326 audit(1790719776.126:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1454.937058][ T31] audit: type=1326 audit(1790719776.126:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1455.042251][ T31] audit: type=1326 audit(1790719776.236:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1455.070035][ T31] audit: type=1326 audit(1790719776.256:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1455.070186][ T31] audit: type=1326 audit(1790719776.256:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1455.159970][ T31] audit: type=1326 audit(1790719776.346:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f70a895e98e code=0x7ffc0000 [ 1455.160028][ T31] audit: type=1326 audit(1790719776.346:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28801 comm="syz.6.6874" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1455.232801][T28804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1455.365110][T28810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1455.365675][T28810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1455.385923][T28810] xt_hashlimit: size too large, truncated to 1048576 [ 1455.607036][ T5680] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1455.645080][T28816] __vm_enough_memory: pid: 28816, comm: syz.1.6878, bytes: 4503599627366400 not enough memory for the allocation [ 1455.775268][ T5680] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1455.792292][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.807211][ T5680] usb 5-1: config 0 descriptor?? [ 1456.058499][ T5680] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1456.249763][ T5680] [drm:udl_init] *ERROR* Selecting channel failed [ 1456.278022][T28831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1456.311434][ T5680] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 1456.311455][ T5680] [drm] Initialized udl on minor 1 [ 1456.319263][ T5680] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1456.320489][ T5680] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1456.395025][ T5680] usb 5-1: USB disconnect, device number 82 [ 1456.421985][T28831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1456.725682][T28839] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6886'. [ 1456.826436][T15742] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1456.932240][T28841] syzkaller1: entered promiscuous mode [ 1456.932269][T28841] syzkaller1: entered allmulticast mode [ 1456.977193][T15742] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1457.013055][T15742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.013087][T15742] usb 7-1: Product: syz [ 1457.013105][T15742] usb 7-1: Manufacturer: syz [ 1457.013122][T15742] usb 7-1: SerialNumber: syz [ 1457.042186][T15742] usb 7-1: config 0 descriptor?? [ 1457.323148][T15742] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1457.345455][T15742] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1457.363365][T15742] usb 7-1: USB disconnect, device number 44 [ 1458.226521][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1458.335539][T28877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1458.356905][ T9] usb 7-1: device descriptor read/64, error -71 [ 1458.376424][ T5680] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1458.433904][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6897'. [ 1458.433930][T28880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6897'. [ 1458.472058][T28872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1458.473113][T28872] bond3: entered promiscuous mode [ 1458.475477][T28872] team0: Port device bond3 added [ 1458.526499][ T5680] usb 5-1: Using ep0 maxpacket: 8 [ 1458.534513][ T5680] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1458.551682][ T5680] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1458.553676][ T5680] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1458.553702][ T5680] usb 5-1: Product: syz [ 1458.553717][ T5680] usb 5-1: Manufacturer: syz [ 1458.553733][ T5680] usb 5-1: SerialNumber: syz [ 1458.612926][ T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1458.766383][ T9] usb 7-1: device descriptor read/64, error -71 [ 1458.776386][T15742] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1458.799677][ T5680] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1458.799705][ T5680] usb 5-1: Handspring Visor / Palm OS: port 6, is for Remote File System use [ 1458.799727][ T5680] usb 5-1: Handspring Visor / Palm OS: port 217, is for unknown use [ 1458.799749][ T5680] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1458.876669][ T9] usb usb7-port1: attempt power cycle [ 1458.928752][T15742] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1458.933984][T15742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.934013][T15742] usb 4-1: Product: syz [ 1458.934030][T15742] usb 4-1: Manufacturer: syz [ 1458.934047][T15742] usb 4-1: SerialNumber: syz [ 1458.971459][T15742] usb 4-1: config 0 descriptor?? [ 1458.984376][T15742] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1459.108302][ T5680] usb 5-1: palm_os_3_probe - error -110 getting bytes available request [ 1459.108394][ T5680] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1459.136136][ T5680] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1459.152939][ T5680] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1459.165664][ T5680] usb 5-1: USB disconnect, device number 83 [ 1459.179610][ T5680] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1459.199044][ T5680] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1459.200085][ T5680] visor 5-1:1.0: device disconnected [ 1459.216660][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1459.243690][ T9] usb 7-1: device descriptor read/8, error -71 [ 1459.384065][T15742] gspca_sunplus: reg_w_riv err -71 [ 1459.384170][T15742] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1459.394228][T15742] usb 4-1: USB disconnect, device number 12 [ 1459.476564][ T9] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1459.497886][ T9] usb 7-1: device descriptor read/8, error -71 [ 1459.606741][ T9] usb usb7-port1: unable to enumerate USB device [ 1460.326528][ T5680] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1460.498026][ T5680] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1460.499489][ T5680] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1460.499511][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1460.499530][ T5680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1460.499546][ T5680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1460.499582][ T5680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.539648][ T5680] usb 4-1: config 0 descriptor?? [ 1460.860904][T28902] loop6: detected capacity change from 0 to 524288000 [ 1461.026771][T28902] loop6: detected capacity change from 524288000 to 1 [ 1461.032745][T28913] sg_write: data in/out 1869573131/136 bytes for SCSI command 0x0-- guessing data in; [ 1461.032745][T28913] program syz.3.6906 not setting count and/or reply_len properly [ 1461.115212][T28902] Dev loop6: unable to read RDB block 1 [ 1461.115263][T28902] loop6: unable to read partition table [ 1461.115516][T28902] loop6: partition table beyond EOD, truncated [ 1461.115557][T28902] loop_reread_partitions: partition scan of loop6 (‰u0v°Ï ) failed (rc=-5) [ 1461.297639][ T5680] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1461.324566][T28915] sctp: [Deprecated]: syz.6.6910 (pid 28915) Use of int in max_burst socket option. [ 1461.324566][T28915] Use struct sctp_assoc_value instead [ 1461.394290][T28918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1461.444384][T28918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1461.563409][T28920] tipc: Started in network mode [ 1461.563434][T28920] tipc: Node identity 1001001, cluster identity 4711 [ 1461.563450][T28920] tipc: Node number set to 16781313 [ 1461.579499][T28920] tipc: Enabled bearer , priority 0 [ 1461.849649][T28920] netlink: Invalid conntrack timeout [ 1461.849681][T28920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1462.006400][ T5680] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1462.128673][T28933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.151785][ T5680] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1462.152290][ T5680] usb 2-1: not running at top speed; connect to a high speed hub [ 1462.152321][ T5680] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1462.153798][ T5680] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1462.153820][ T5680] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1462.153841][ T5680] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.153873][ T5680] usb 2-1: config 14 has no interface number 0 [ 1462.153885][ T5680] usb 2-1: config 14 has no interface number 1 [ 1462.153922][ T5680] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1462.153938][ T5680] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1462.153954][ T5680] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1462.153971][ T5680] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.153985][ T5680] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1462.153997][ T5680] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1462.214665][T28934] loop8: detected capacity change from 0 to 15 [ 1462.230276][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6916'. [ 1462.230333][T28938] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6916'. [ 1462.319039][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.319088][ T5680] usb 2-1: Product: syz [ 1462.319104][ T5680] usb 2-1: Manufacturer: syz [ 1462.319121][ T5680] usb 2-1: SerialNumber: syz [ 1462.347739][T28934] Dev loop8: unable to read RDB block 15 [ 1462.347897][T28934] loop8: unable to read partition table [ 1462.348172][T28934] loop8: partition table beyond EOD, truncated [ 1462.348234][T28934] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1462.434910][T28936] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1462.454352][T28936] team0: Port device bond6 added [ 1462.646481][ T9] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1462.772094][ T5680] legousbtower 2-1:14.57: interrupt endpoints not found [ 1462.798211][ T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1462.802467][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.802496][ T9] usb 6-1: Product: syz [ 1462.802519][ T9] usb 6-1: Manufacturer: syz [ 1462.802534][ T9] usb 6-1: SerialNumber: syz [ 1462.809560][ T9] usb 6-1: config 0 descriptor?? [ 1462.850427][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1463.052147][ T9] gspca_sunplus: reg_r err -71 [ 1463.065573][ T9] usb 6-1: USB disconnect, device number 124 [ 1463.175532][ T5680] legousbtower 2-1:14.228: get version request failed: -32 [ 1463.175677][ T5680] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 1463.231446][T20864] usb 2-1: USB disconnect, device number 6 [ 1463.479573][T28947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.479594][T28947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.481240][T28947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.481256][T28947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.739866][T15742] usb 4-1: USB disconnect, device number 13 [ 1463.820330][T28955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1463.820356][T28955] IPv6: NLM_F_CREATE should be set when creating new route [ 1463.823009][T28955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1464.025461][T28963] FAULT_INJECTION: forcing a failure. [ 1464.025461][T28963] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.025497][T28963] CPU: 1 UID: 0 PID: 28963 Comm: syz.1.6927 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.025525][T28963] Tainted: [L]=SOFTLOCKUP [ 1464.025533][T28963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1464.025545][T28963] Call Trace: [ 1464.025553][T28963] [ 1464.025563][T28963] dump_stack_lvl+0xe8/0x150 [ 1464.025598][T28963] should_fail_ex+0x410/0x560 [ 1464.025631][T28963] should_failslab+0xa8/0x100 [ 1464.025659][T28963] __kmalloc_noprof+0xfe/0x720 [ 1464.025683][T28963] ? tomoyo_encode+0x2ad/0x570 [ 1464.025712][T28963] ? tomoyo_encode+0x2ad/0x570 [ 1464.025748][T28963] tomoyo_encode+0x2ad/0x570 [ 1464.025784][T28963] tomoyo_realpath_from_path+0x5fa/0x640 [ 1464.025825][T28963] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1464.025852][T28963] tomoyo_path_number_perm+0x246/0x5f0 [ 1464.025881][T28963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1464.025906][T28963] ? __lock_acquire+0x747/0x2de0 [ 1464.025948][T28963] ? hook_file_ioctl+0x1f2/0x600 [ 1464.025996][T28963] ? __fget_files+0x2a/0x420 [ 1464.026029][T28963] ? __fget_files+0x2a/0x420 [ 1464.026058][T28963] ? __fget_files+0x3a2/0x420 [ 1464.026087][T28963] ? __fget_files+0x2a/0x420 [ 1464.026140][T28963] security_file_ioctl+0xc3/0x2a0 [ 1464.026169][T28963] __se_sys_ioctl+0x47/0x170 [ 1464.026198][T28963] do_syscall_64+0x166/0x520 [ 1464.026229][T28963] ? trace_irq_disable+0x3b/0x140 [ 1464.026252][T28963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.026275][T28963] ? clear_bhb_loop+0x70/0xc0 [ 1464.026302][T28963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.026332][T28963] RIP: 0033:0x7f593b59e159 [ 1464.026352][T28963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.026371][T28963] RSP: 002b:00007f593c3fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1464.026394][T28963] RAX: ffffffffffffffda RBX: 00007f593b825fa0 RCX: 00007f593b59e159 [ 1464.026411][T28963] RDX: 0000200000000180 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1464.026427][T28963] RBP: 00007f593c3fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.026442][T28963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.026456][T28963] R13: 00007f593b826038 R14: 00007f593b825fa0 R15: 00007f593b94fa48 [ 1464.026492][T28963] [ 1464.098017][T28963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1464.287307][T28966] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 1464.287307][T28966] program syz.6.6926 not setting count and/or reply_len properly [ 1464.336491][T20864] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1464.389564][T28977] openvswitch: netlink: Message has 1 unknown bytes. [ 1464.389592][T28977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1464.499333][T20864] usb 7-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0 [ 1464.500436][T20864] usb 7-1: config 4 has an invalid interface number: 12 but max is 0 [ 1464.500463][T20864] usb 7-1: config 4 has no interface number 0 [ 1464.500493][T20864] usb 7-1: config 4 interface 12 has no altsetting 0 [ 1464.502526][T20864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.502552][T20864] usb 7-1: Product: syz [ 1464.502568][T20864] usb 7-1: Manufacturer: syz [ 1464.502584][T20864] usb 7-1: SerialNumber: syz [ 1464.765334][T20864] cdc_acm 7-1:4.12: Zero length descriptor references [ 1464.765368][T20864] cdc_acm 7-1:4.12: probe with driver cdc_acm failed with error -22 [ 1464.795723][T20864] usb 7-1: USB disconnect, device number 49 [ 1464.939450][T28986] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1465.144797][T28987] veth1_to_bond: entered promiscuous mode [ 1465.159638][T28987] veth1_to_bond: entered allmulticast mode [ 1465.218690][T28987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6931'. [ 1465.265359][T28987] veth1_to_bond (unregistering): left promiscuous mode [ 1465.265390][T28987] veth1_to_bond (unregistering): left allmulticast mode [ 1465.352343][T28987] bond0: (slave bond_slave_1): Releasing backup interface [ 1465.484729][T29000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1465.484755][T29000] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1465.520947][T28992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1465.524716][T28992] team0: Port device bond1 added [ 1465.737233][T29008] IPVS: set_ctl: invalid protocol: 50 172.30.0.6:20003 [ 1465.826402][ T5680] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1465.993658][ T5680] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1466.009327][T29016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1466.009345][T29016] IPv6: NLM_F_CREATE should be set when creating new route [ 1466.010027][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.010056][ T5680] usb 5-1: Product: syz [ 1466.010072][ T5680] usb 5-1: Manufacturer: syz [ 1466.010088][ T5680] usb 5-1: SerialNumber: syz [ 1466.024809][ T5680] usb 5-1: config 0 descriptor?? [ 1466.063790][ T5680] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1466.210627][T29027] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6945'. [ 1466.289954][T29030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1466.386756][T15742] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1466.450776][ T5680] gspca_sunplus: reg_w_riv err -71 [ 1466.450874][ T5680] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1466.485040][ T5680] usb 5-1: USB disconnect, device number 84 [ 1466.539210][T15742] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1466.540754][T15742] usb 7-1: config 2 has an invalid interface number: 79 but max is 0 [ 1466.540774][T15742] usb 7-1: config 2 has no interface number 0 [ 1466.540795][T15742] usb 7-1: config 2 interface 79 has no altsetting 0 [ 1466.545202][T15742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.545222][T15742] usb 7-1: Product: syz [ 1466.545233][T15742] usb 7-1: Manufacturer: syz [ 1466.545244][T15742] usb 7-1: SerialNumber: syz [ 1466.837136][T29018] FAULT_INJECTION: forcing a failure. [ 1466.837136][T29018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1466.837167][T29018] CPU: 0 UID: 0 PID: 29018 Comm: syz.6.6943 Tainted: G L syzkaller #0 PREEMPT(full) [ 1466.837190][T29018] Tainted: [L]=SOFTLOCKUP [ 1466.837196][T29018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1466.837206][T29018] Call Trace: [ 1466.837213][T29018] [ 1466.837220][T29018] dump_stack_lvl+0xe8/0x150 [ 1466.837248][T29018] should_fail_ex+0x410/0x560 [ 1466.837273][T29018] _copy_to_user+0x31/0xb0 [ 1466.837299][T29018] simple_read_from_buffer+0xe1/0x170 [ 1466.837328][T29018] proc_fail_nth_read+0x1bb/0x230 [ 1466.837345][T29018] ? common_file_perm+0x20e/0x2b0 [ 1466.837370][T29018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1466.837390][T29018] ? rw_verify_area+0x24a/0x4c0 [ 1466.837418][T29018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1466.837434][T29018] vfs_read+0x213/0xa80 [ 1466.837464][T29018] ? __pfx___mutex_lock+0x10/0x10 [ 1466.837489][T29018] ? __pfx_vfs_read+0x10/0x10 [ 1466.837546][T29018] ? __fget_files+0x2a/0x420 [ 1466.837586][T29018] ? __fget_files+0x3a2/0x420 [ 1466.837619][T29018] ? __fget_files+0x2a/0x420 [ 1466.837663][T29018] ksys_read+0x150/0x270 [ 1466.837690][T29018] ? __pfx_ksys_read+0x10/0x10 [ 1466.837726][T29018] do_syscall_64+0x166/0x520 [ 1466.837759][T29018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.837784][T29018] ? clear_bhb_loop+0x70/0xc0 [ 1466.837815][T29018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1466.837839][T29018] RIP: 0033:0x7f70a895e98e [ 1466.837861][T29018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1466.837883][T29018] RSP: 002b:00007f70a9823fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1466.837909][T29018] RAX: ffffffffffffffda RBX: 00007f70a98246c0 RCX: 00007f70a895e98e [ 1466.837927][T29018] RDX: 000000000000000f RSI: 00007f70a98240a0 RDI: 000000000000000d [ 1466.837943][T29018] RBP: 00007f70a9824090 R08: 0000000000000000 R09: 0000000000000000 [ 1466.837958][T29018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1466.837973][T29018] R13: 00007f70a8c26038 R14: 00007f70a8c25fa0 R15: 00007f70a8d4fa48 [ 1466.838009][T29018] [ 1467.221684][T29035] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6947'. [ 1467.238835][T15742] usb 7-1: USB disconnect, device number 50 [ 1468.113173][ T13] IPVS: starting estimator thread 0... [ 1468.156394][T26330] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1468.196670][T29047] IPVS: using max 37 ests per chain, 88800 per kthread [ 1468.310276][T26330] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1468.311332][T26330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.314692][T26330] usb 2-1: config 0 descriptor?? [ 1468.346993][T26330] cp210x 2-1:0.0: cp210x converter detected [ 1468.738077][T26330] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1468.746237][T29054] loop5: detected capacity change from 0 to 7 [ 1468.765931][T29054] loop5: [ 1468.765959][T29054] loop5: partition table partially beyond EOD, truncated [ 1469.778031][T20864] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1469.832845][T26330] usb 2-1: USB disconnect, device number 7 [ 1469.846829][T26330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1469.862340][T26330] cp210x 2-1:0.0: device disconnected [ 1469.929778][T20864] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1469.974324][T20864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.974360][T20864] usb 4-1: Product: syz [ 1469.974375][T20864] usb 4-1: Manufacturer: syz [ 1469.974391][T20864] usb 4-1: SerialNumber: syz [ 1470.010782][T20864] usb 4-1: config 0 descriptor?? [ 1470.542734][T20864] usb 4-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 1470.746007][T20864] usb 4-1: failed to fetch extended address, random address set [ 1470.746056][T20864] usb 4-1: atusb_probe: initialization failed, error = -524 [ 1470.748333][T20864] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 1470.936399][ T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 1470.982060][T20864] usb 4-1: USB disconnect, device number 14 [ 1471.012332][T29093] tipc: Enabling of bearer rejected, already enabled [ 1471.089668][ T9] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1471.090872][ T9] usb 5-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 1471.090941][ T9] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1471.133987][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.134019][ T9] usb 5-1: Product: syz [ 1471.134039][ T9] usb 5-1: Manufacturer: syz [ 1471.134056][ T9] usb 5-1: SerialNumber: syz [ 1471.421840][T29106] fuse: Bad value for 'group_id' [ 1471.421865][T29106] fuse: Bad value for 'group_id' [ 1471.609133][ C0] usb 5-1: received EP1 urb->status = -2 [ 1471.609191][ T9] usb 5-1: unable to init card! (ret=-110) [ 1471.609683][ T9] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 1471.668201][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1471.669978][ T31] audit: type=1326 audit(1790719792.846:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.670027][ T31] audit: type=1326 audit(1790719792.846:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.690419][ T31] audit: type=1326 audit(1790719792.866:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.690597][ T31] audit: type=1326 audit(1790719792.866:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.690703][ T31] audit: type=1326 audit(1790719792.866:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.777412][ T31] audit: type=1326 audit(1790719792.956:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.781702][ T31] audit: type=1326 audit(1790719792.956:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.781845][ T31] audit: type=1326 audit(1790719792.956:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29103 comm="syz.6.6967" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70a899e159 code=0x7ffc0000 [ 1471.801717][T26330] usb 5-1: USB disconnect, device number 85 [ 1471.927178][T29112] FAULT_INJECTION: forcing a failure. [ 1471.927178][T29112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.927217][T29112] CPU: 0 UID: 0 PID: 29112 Comm: syz.3.6968 Tainted: G L syzkaller #0 PREEMPT(full) [ 1471.927249][T29112] Tainted: [L]=SOFTLOCKUP [ 1471.927258][T29112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1471.927271][T29112] Call Trace: [ 1471.927281][T29112] [ 1471.927291][T29112] dump_stack_lvl+0xe8/0x150 [ 1471.927330][T29112] should_fail_ex+0x410/0x560 [ 1471.927365][T29112] _copy_to_user+0x31/0xb0 [ 1471.927400][T29112] simple_read_from_buffer+0xe1/0x170 [ 1471.927441][T29112] proc_fail_nth_read+0x1bb/0x230 [ 1471.927464][T29112] ? common_file_perm+0x20e/0x2b0 [ 1471.927502][T29112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1471.927529][T29112] ? rw_verify_area+0x24a/0x4c0 [ 1471.927567][T29112] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1471.927591][T29112] vfs_read+0x213/0xa80 [ 1471.927631][T29112] ? __pfx___mutex_lock+0x10/0x10 [ 1471.927658][T29112] ? __pfx_vfs_read+0x10/0x10 [ 1471.927688][T29112] ? __fget_files+0x2a/0x420 [ 1471.927727][T29112] ? __fget_files+0x3a2/0x420 [ 1471.927754][T29112] ? __fget_files+0x2a/0x420 [ 1471.927787][T29112] ksys_read+0x150/0x270 [ 1471.927807][T29112] ? __pfx_ksys_read+0x10/0x10 [ 1471.927828][T29112] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1471.927857][T29112] do_syscall_64+0x166/0x520 [ 1471.927882][T29112] ? trace_irq_disable+0x3b/0x140 [ 1471.927902][T29112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.927921][T29112] ? clear_bhb_loop+0x70/0xc0 [ 1471.927956][T29112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.927973][T29112] RIP: 0033:0x7fb7a4d5e98e [ 1471.927990][T29112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1471.928009][T29112] RSP: 002b:00007fb7a5d0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1471.928029][T29112] RAX: ffffffffffffffda RBX: 00007fb7a5d0c6c0 RCX: 00007fb7a4d5e98e [ 1471.928060][T29112] RDX: 000000000000000f RSI: 00007fb7a5d0c0a0 RDI: 0000000000000004 [ 1471.928072][T29112] RBP: 00007fb7a5d0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.928084][T29112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1471.928095][T29112] R13: 00007fb7a5026038 R14: 00007fb7a5025fa0 R15: 00007fb7a514fa48 [ 1471.928123][T29112] [ 1472.484341][T29120] FAULT_INJECTION: forcing a failure. [ 1472.484341][T29120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.484381][T29120] CPU: 1 UID: 0 PID: 29120 Comm: syz.6.6971 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.484412][T29120] Tainted: [L]=SOFTLOCKUP [ 1472.484421][T29120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1472.484435][T29120] Call Trace: [ 1472.484444][T29120] [ 1472.484454][T29120] dump_stack_lvl+0xe8/0x150 [ 1472.484491][T29120] should_fail_ex+0x410/0x560 [ 1472.484524][T29120] _copy_from_iter+0x1d3/0x1660 [ 1472.484553][T29120] ? __alloc_skb+0x27a/0x7a0 [ 1472.484585][T29120] ? __alloc_skb+0x27a/0x7a0 [ 1472.484616][T29120] ? __alloc_skb+0x27a/0x7a0 [ 1472.484646][T29120] ? __pfx__copy_from_iter+0x10/0x10 [ 1472.484672][T29120] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1472.484696][T29120] ? __alloc_skb+0x27a/0x7a0 [ 1472.484724][T29120] ? __alloc_skb+0x27a/0x7a0 [ 1472.484759][T29120] ? netlink_sendmsg+0x650/0xb40 [ 1472.484783][T29120] ? skb_put+0x112/0x210 [ 1472.484817][T29120] netlink_sendmsg+0x6c0/0xb40 [ 1472.484851][T29120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1472.484883][T29120] ? apparmor_socket_sendmsg+0x98/0x360 [ 1472.484913][T29120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1472.484935][T29120] sock_sendmsg_nosec+0x13a/0x180 [ 1472.484963][T29120] ____sys_sendmsg+0x54e/0x850 [ 1472.485001][T29120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1472.485043][T29120] ? import_iovec+0x73/0xa0 [ 1472.485076][T29120] ___sys_sendmsg+0x2a5/0x360 [ 1472.485107][T29120] ? __lock_acquire+0x747/0x2de0 [ 1472.485135][T29120] ? __pfx____sys_sendmsg+0x10/0x10 [ 1472.485210][T29120] ? __fget_files+0x2a/0x420 [ 1472.485243][T29120] ? __fget_files+0x3a2/0x420 [ 1472.485287][T29120] __x64_sys_sendmsg+0x1b1/0x290 [ 1472.485324][T29120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1472.485378][T29120] do_syscall_64+0x166/0x520 [ 1472.485409][T29120] ? trace_irq_disable+0x3b/0x140 [ 1472.485434][T29120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.485456][T29120] ? clear_bhb_loop+0x70/0xc0 [ 1472.485482][T29120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.485503][T29120] RIP: 0033:0x7f70a899e159 [ 1472.485524][T29120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.485543][T29120] RSP: 002b:00007f70a9824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1472.485570][T29120] RAX: ffffffffffffffda RBX: 00007f70a8c25fa0 RCX: 00007f70a899e159 [ 1472.485586][T29120] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1472.485601][T29120] RBP: 00007f70a9824090 R08: 0000000000000000 R09: 0000000000000000 [ 1472.485615][T29120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1472.485629][T29120] R13: 00007f70a8c26038 R14: 00007f70a8c25fa0 R15: 00007f70a8d4fa48 [ 1472.485662][T29120] [ 1472.844224][T29124] fuse: Unknown parameter '•²íÜ;sœô רôD­ [ 1472.844224][T29124] s‚¬Ì´Ìœ³Â­mÚ©ƒµZx®ƒ#ˆbV¬&ŸH™Ô-|àgCù資ŽX#E×®šñr;1C×ß<Œ+)«ÆªL#0x0000000000000003' [ 1473.063453][T29124] fuse: blksize only supported for fuseblk [ 1473.396681][T29133] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1473.445293][T29135] tipc: Enabled bearer , priority 0 [ 1474.663117][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6981'. [ 1474.852733][T29159] mac80211_hwsim hwsim33 syzkaller1: left promiscuous mode [ 1474.852831][T29159] mac80211_hwsim hwsim33 syzkaller1: left allmulticast mode [ 1475.026760][ T5680] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1475.158287][ T5680] usb 5-1: device descriptor read/64, error -71 [ 1475.411140][ T5680] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1475.485340][T29176] FAULT_INJECTION: forcing a failure. [ 1475.485340][T29176] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.485378][T29176] CPU: 1 UID: 0 PID: 29176 Comm: syz.6.6988 Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.485410][T29176] Tainted: [L]=SOFTLOCKUP [ 1475.485419][T29176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1475.485433][T29176] Call Trace: [ 1475.485443][T29176] [ 1475.485453][T29176] dump_stack_lvl+0xe8/0x150 [ 1475.485491][T29176] should_fail_ex+0x410/0x560 [ 1475.485526][T29176] should_failslab+0xa8/0x100 [ 1475.485557][T29176] ? skb_clone+0x212/0x3a0 [ 1475.485591][T29176] kmem_cache_alloc_noprof+0xa1/0x600 [ 1475.485616][T29176] ? skb_clone+0x212/0x3a0 [ 1475.485659][T29176] skb_clone+0x212/0x3a0 [ 1475.485696][T29176] __netlink_deliver_tap+0x413/0x860 [ 1475.485732][T29176] ? netlink_deliver_tap+0x2e/0x1b0 [ 1475.485759][T29176] netlink_deliver_tap+0x19c/0x1b0 [ 1475.485785][T29176] netlink_unicast+0x781/0x940 [ 1475.485831][T29176] netlink_sendmsg+0x813/0xb40 [ 1475.485865][T29176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.485899][T29176] ? apparmor_socket_sendmsg+0x98/0x360 [ 1475.485929][T29176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.485953][T29176] sock_sendmsg_nosec+0x13a/0x180 [ 1475.485991][T29176] ____sys_sendmsg+0x54e/0x850 [ 1475.486031][T29176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.486074][T29176] ? import_iovec+0x73/0xa0 [ 1475.486110][T29176] ___sys_sendmsg+0x2a5/0x360 [ 1475.486143][T29176] ? __lock_acquire+0x747/0x2de0 [ 1475.486193][T29176] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.486263][T29176] ? __fget_files+0x2a/0x420 [ 1475.486298][T29176] ? __fget_files+0x3a2/0x420 [ 1475.486343][T29176] __x64_sys_sendmsg+0x1b1/0x290 [ 1475.486382][T29176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1475.486440][T29176] do_syscall_64+0x166/0x520 [ 1475.486473][T29176] ? trace_irq_disable+0x3b/0x140 [ 1475.486499][T29176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.486524][T29176] ? clear_bhb_loop+0x70/0xc0 [ 1475.486554][T29176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.486578][T29176] RIP: 0033:0x7f70a899e159 [ 1475.486600][T29176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1475.486622][T29176] RSP: 002b:00007f70a9824028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1475.486649][T29176] RAX: ffffffffffffffda RBX: 00007f70a8c25fa0 RCX: 00007f70a899e159 [ 1475.486677][T29176] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1475.486693][T29176] RBP: 00007f70a9824090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.486707][T29176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.486722][T29176] R13: 00007f70a8c26038 R14: 00007f70a8c25fa0 R15: 00007f70a8d4fa48 [ 1475.486759][T29176] [ 1475.506808][T26330] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1475.538705][ T5680] usb 5-1: device descriptor read/64, error -71 [ 1475.668065][ T5680] usb usb5-port1: attempt power cycle [ 1475.717216][T26330] usb 6-1: not running at top speed; connect to a high speed hub [ 1475.717331][T26330] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1475.759540][T26330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1475.759642][T26330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1475.759720][T26330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1475.759801][T26330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1475.759875][T26330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1475.759967][T26330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1475.814045][T26330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.814145][T26330] usb 6-1: Product: syz [ 1475.814187][T26330] usb 6-1: Manufacturer: syz [ 1475.814230][T26330] usb 6-1: SerialNumber: syz [ 1475.902023][T29165] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1475.902147][T29165] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1475.902265][T29165] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1475.902378][T29165] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1475.902499][T29165] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1475.962566][T26330] usb 6-1: USB2VGA dongle found at address 125 [ 1475.976681][T26330] usb 6-1: Allocated 8 output buffers [ 1475.976700][T26330] usb 6-1: Not attached to USB 2.0 hub, deferring init [ 1476.086879][ T5680] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1476.111322][ T5680] usb 5-1: device descriptor read/8, error -71 [ 1476.141981][T29165] ucma_write: process 999 (syz.5.6986) changed security contexts after opening file descriptor, this is not allowed. [ 1476.144158][T15742] usb 6-1: USB disconnect, device number 125 [ 1476.230827][T29181] program syz.6.6989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1476.346501][ T5680] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1476.378351][ T5680] usb 5-1: device descriptor read/8, error -71 [ 1476.487197][ T5680] usb usb5-port1: unable to enumerate USB device [ 1476.584589][T29185] tipc: Enabling of bearer rejected, already enabled [ 1476.936157][ T5680] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1477.099395][ T5680] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1477.113379][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.113461][ T5680] usb 2-1: Product: syz [ 1477.113502][ T5680] usb 2-1: Manufacturer: syz [ 1477.113545][ T5680] usb 2-1: SerialNumber: syz [ 1477.173213][T26330] wiimote 0005:057E:0306.0038: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1477.173539][T26330] wiimote 0005:057E:0306.0038: New device registered [ 1477.231676][T26328] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1477.438211][T26334] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1477.586632][T26334] usb 6-1: Using ep0 maxpacket: 16 [ 1477.587669][T26334] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1477.588677][T26334] usb 6-1: config 0 has no interfaces? [ 1477.593162][T26334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.593190][T26334] usb 6-1: Product: syz [ 1477.593259][T26334] usb 6-1: Manufacturer: syz [ 1477.593277][T26334] usb 6-1: SerialNumber: syz [ 1477.664912][T26334] usb 6-1: config 0 descriptor?? [ 1478.238504][ T9] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1478.246610][T26335] wiimote 0005:057E:0306.0038: detected device: Nintendo Wii Remote (Gen 1) [ 1478.331724][T26328] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1478.331953][T26328] ath9k_htc: Failed to initialize the device [ 1478.393522][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1478.407387][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1478.407456][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1478.407481][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1478.407506][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1478.407541][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.488368][ T9] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1478.526701][T26335] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0038/input/input116 [ 1478.617280][T26335] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0038/input/input117 [ 1478.730319][T26335] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0038/input/input115 [ 1478.762445][ T9] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 1478.781111][ T9] usb 5-1: USB disconnect, device number 90 [ 1478.938448][T26328] usb 2-1: ath9k_htc: USB layer deinitialized [ 1479.017537][T29213] wiimote 0005:057E:0306.0038: Remote error 255 on req 255 [ 1479.290799][T26334] usb 2-1: USB disconnect, device number 8 [ 1479.516683][T29221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6998'. [ 1480.568166][T29213] wiimote 0005:057E:0306.0038: Device removed [ 1480.569075][T20864] usb 6-1: USB disconnect, device number 126 [ 1484.662963][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.663008][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.853748][T29252] lo: entered promiscuous mode [ 1484.875703][T29252] tunl0: entered promiscuous mode [ 1484.889354][T29252] gre0: entered promiscuous mode [ 1484.906049][T29252] gretap0: entered promiscuous mode [ 1484.918164][T29252] erspan0: entered promiscuous mode [ 1484.923708][T29252] ip_vti0: entered promiscuous mode [ 1484.925280][T29252] ip6_vti0: entered promiscuous mode [ 1484.943396][T29252] sit0: entered promiscuous mode [ 1484.955848][T29252] ip6tnl0: entered promiscuous mode [ 1484.970456][T29252] ip6gre0: entered promiscuous mode [ 1484.972539][T29252] tipc: Resetting bearer [ 1484.985675][T29252] syz_tun: entered promiscuous mode [ 1485.016655][T29252] ip6gretap0: entered promiscuous mode [ 1485.019096][T29252] vcan0: entered promiscuous mode [ 1485.021962][T29252] bond0: entered promiscuous mode [ 1485.021984][T29252] bond_slave_0: entered promiscuous mode [ 1485.022195][T29252] bond_slave_1: entered promiscuous mode [ 1485.056841][T29252] team0: entered promiscuous mode [ 1485.056865][T29252] team_slave_0: entered promiscuous mode [ 1485.057070][T29252] team_slave_1: entered promiscuous mode [ 1485.063860][T29252] dummy0: entered promiscuous mode [ 1485.090297][T29252] nlmon0: entered promiscuous mode [ 1485.094278][T29252] veth0: entered promiscuous mode [ 1485.110565][T29252] veth1: entered promiscuous mode [ 1485.142358][T29252] wg0: entered promiscuous mode [ 1485.145742][T29252] wg1: entered promiscuous mode [ 1485.158175][T29252] wg2: entered promiscuous mode [ 1485.162425][T29252] veth0_to_bridge: entered promiscuous mode [ 1485.165009][T29252] bridge_slave_0: entered promiscuous mode [ 1485.183467][T29252] veth1_to_bridge: entered promiscuous mode [ 1485.198338][T29252] bridge_slave_1: entered promiscuous mode [ 1485.202273][T29252] veth0_to_bond: entered promiscuous mode [ 1485.220879][T29252] veth1_to_bond: entered promiscuous mode [ 1485.239139][T29252] veth0_to_team: entered promiscuous mode [ 1485.242156][T29252] veth1_to_team: entered promiscuous mode [ 1485.245174][T29252] veth1_to_batadv: entered promiscuous mode [ 1485.269367][T29252] batadv_slave_1: entered promiscuous mode [ 1485.274374][T29252] xfrm0: entered promiscuous mode [ 1485.277670][T29252] veth0_to_hsr: entered promiscuous mode [ 1485.303622][T29252] veth1_to_hsr: entered promiscuous mode [ 1485.320598][T29252] hsr0: entered promiscuous mode [ 1485.325398][T29252] veth1_virt_wifi: entered promiscuous mode [ 1485.340160][T29252] veth0_virt_wifi: entered promiscuous mode [ 1485.347372][T29252] virt_wifi0: entered promiscuous mode [ 1485.371269][T29252] vlan0: entered promiscuous mode [ 1485.373015][T29252] vlan1: entered promiscuous mode [ 1485.389127][T29252] macvlan0: entered promiscuous mode [ 1485.392088][T29252] macvlan1: entered promiscuous mode [ 1485.394343][T29252] ipvlan0: entered promiscuous mode [ 1485.394507][T29252] ipvlan1: entered promiscuous mode [ 1485.422713][T29252] macvtap0: entered promiscuous mode [ 1485.426005][T29252] macsec0: entered promiscuous mode [ 1485.438438][T29252] geneve0: entered promiscuous mode [ 1485.440930][T29252] geneve1: entered promiscuous mode [ 1485.444799][T29252] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1485.473897][T29252] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 1485.486166][T29252] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1485.489648][T29252] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 1485.491467][T29252] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 1485.491643][T29252] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 1485.491800][T29252] bond1: entered promiscuous mode [ 1485.491929][T29252] veth2: entered promiscuous mode [ 1485.492193][T29252] veth3: entered promiscuous mode [ 1485.492414][T29252] dvmrp0: entered promiscuous mode [ 1485.696850][ T6325] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.697466][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.697510][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.697549][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.981407][T29280] FAULT_INJECTION: forcing a failure. [ 1485.981407][T29280] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.981450][T29280] CPU: 0 UID: 0 PID: 29280 Comm: syz.4.7012 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.981482][T29280] Tainted: [L]=SOFTLOCKUP [ 1485.981492][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1485.981506][T29280] Call Trace: [ 1485.981516][T29280] [ 1485.981526][T29280] dump_stack_lvl+0xe8/0x150 [ 1485.981565][T29280] should_fail_ex+0x410/0x560 [ 1485.981599][T29280] should_failslab+0xa8/0x100 [ 1485.981632][T29280] __kmalloc_cache_noprof+0xa3/0x600 [ 1485.981665][T29280] ? nf_logger_find_get+0xbc/0x330 [ 1485.981696][T29280] ? nft_trans_rule_add+0x59/0x440 [ 1485.981718][T29280] ? nft_trans_rule_add+0x59/0x440 [ 1485.981747][T29280] nft_trans_rule_add+0x59/0x440 [ 1485.981776][T29280] nf_tables_newrule+0x1b50/0x28a0 [ 1485.981827][T29280] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1485.981860][T29280] ? lock_acquire+0x115/0x350 [ 1485.981886][T29280] ? nfnl_pernet+0x23/0x240 [ 1485.981932][T29280] ? __nla_parse+0x40/0x60 [ 1485.981970][T29280] nfnetlink_rcv+0x1288/0x28c0 [ 1485.982046][T29280] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1485.982117][T29280] ? ref_tracker_free+0x689/0x830 [ 1485.982188][T29280] ? skb_clone+0x246/0x3a0 [ 1485.982248][T29280] ? __netlink_deliver_tap+0x811/0x860 [ 1485.982282][T29280] ? netlink_deliver_tap+0x2e/0x1b0 [ 1485.982312][T29280] ? netlink_deliver_tap+0x2e/0x1b0 [ 1485.982343][T29280] netlink_unicast+0x7bd/0x940 [ 1485.982392][T29280] netlink_sendmsg+0x813/0xb40 [ 1485.982427][T29280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1485.982462][T29280] ? apparmor_socket_sendmsg+0x98/0x360 [ 1485.982493][T29280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1485.982517][T29280] sock_sendmsg_nosec+0x13a/0x180 [ 1485.982545][T29280] ____sys_sendmsg+0x54e/0x850 [ 1485.982586][T29280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1485.982632][T29280] ? import_iovec+0x73/0xa0 [ 1485.982674][T29280] ___sys_sendmsg+0x2a5/0x360 [ 1485.982708][T29280] ? __lock_acquire+0x747/0x2de0 [ 1485.982738][T29280] ? __pfx____sys_sendmsg+0x10/0x10 [ 1485.982812][T29280] ? __fget_files+0x2a/0x420 [ 1485.982845][T29280] ? __fget_files+0x3a2/0x420 [ 1485.982890][T29280] __x64_sys_sendmsg+0x1b1/0x290 [ 1485.982928][T29280] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1485.982986][T29280] do_syscall_64+0x166/0x520 [ 1485.983018][T29280] ? trace_irq_disable+0x3b/0x140 [ 1485.983043][T29280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.983068][T29280] ? clear_bhb_loop+0x70/0xc0 [ 1485.983097][T29280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.983121][T29280] RIP: 0033:0x7fa01cb9e159 [ 1485.983142][T29280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.983160][T29280] RSP: 002b:00007fa01dae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1485.983185][T29280] RAX: ffffffffffffffda RBX: 00007fa01ce25fa0 RCX: 00007fa01cb9e159 [ 1485.983203][T29280] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1485.983219][T29280] RBP: 00007fa01dae0090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.983234][T29280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1485.983249][T29280] R13: 00007fa01ce26038 R14: 00007fa01ce25fa0 R15: 00007fa01cf4fa48 [ 1485.983285][T29280] [ 1486.591235][T29292] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7015'. [ 1486.735082][T29292] syzkaller1: entered promiscuous mode [ 1486.735129][T29292] syzkaller1: entered allmulticast mode [ 1486.906768][ T5680] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1487.056699][ T5680] usb 4-1: Using ep0 maxpacket: 16 [ 1487.058916][ T5680] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1487.061176][ T5680] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1487.061198][ T5680] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1487.061217][ T5680] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1487.061236][ T5680] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1487.061256][ T5680] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1487.065124][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.065154][ T5680] usb 4-1: Product: syz [ 1487.065169][ T5680] usb 4-1: Manufacturer: syz [ 1487.065186][ T5680] usb 4-1: SerialNumber: syz [ 1487.095243][ T5680] usb 4-1: config 0 descriptor?? [ 1487.117690][T29294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1487.335792][T29294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1487.376556][ T5680] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input118 [ 1487.640957][ T5680] usb 4-1: USB disconnect, device number 15 [ 1488.826619][ T5680] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1488.977158][ T5680] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 1488.979360][ T5680] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.979437][ T5680] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.979464][ T5680] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1488.982703][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.982732][ T5680] usb 4-1: Product: syz [ 1488.982755][ T5680] usb 4-1: Manufacturer: syz [ 1488.982772][ T5680] usb 4-1: SerialNumber: syz [ 1489.292077][ T5680] snd-usb-caiaq 4-1:1.0: invalid EPs [ 1489.292096][ T5680] usb 4-1: unable to init card! (ret=-22) [ 1489.292405][ T5680] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 1489.506309][T29267] usb 4-1: USB disconnect, device number 16 [ 1490.360623][T29267] wiimote 0005:057E:0306.0039: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1490.361153][T29340] fuse: Unknown parameter '00000000000000000000' [ 1490.395082][T29267] wiimote 0005:057E:0306.0039: New device registered [ 1490.555024][T29344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7031'. [ 1490.586402][ T7152] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1490.737485][ T7152] usb 2-1: Using ep0 maxpacket: 16 [ 1490.738239][ T7152] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1490.738955][ T7152] usb 2-1: config 0 has no interfaces? [ 1490.741957][ T7152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.741986][ T7152] usb 2-1: Product: syz [ 1490.742002][ T7152] usb 2-1: Manufacturer: syz [ 1490.742027][ T7152] usb 2-1: SerialNumber: syz [ 1490.747890][T26335] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1490.801924][ T7152] usb 2-1: config 0 descriptor?? [ 1490.951654][T26335] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1490.955374][T26335] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1490.955464][T26335] usb 4-1: config 1 has no interface number 0 [ 1490.955590][T26335] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1490.955661][T26335] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1490.955732][T26335] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.961669][T26335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.961696][T26335] usb 4-1: Product: syz [ 1490.961713][T26335] usb 4-1: Manufacturer: syz [ 1490.961729][T26335] usb 4-1: SerialNumber: syz [ 1491.030836][T29341] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1491.109443][T29359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1491.126771][T29361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7036'. [ 1491.126797][T29361] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7036'. [ 1491.133678][T29359] team0: Port device bond2 added [ 1491.252989][T29341] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1491.426629][ T5680] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1491.446928][T26982] wiimote 0005:057E:0306.0039: detected device: Nintendo Wii Remote (Gen 1) [ 1491.499465][T26982] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0039/input/input120 [ 1491.503338][T26982] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0039/input/input121 [ 1491.556669][T26982] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0039/input/input119 [ 1491.616930][ T5680] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1491.651554][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.651578][ T5680] usb 5-1: Product: syz [ 1491.651589][ T5680] usb 5-1: Manufacturer: syz [ 1491.651601][ T5680] usb 5-1: SerialNumber: syz [ 1491.656012][ T5680] usb 5-1: config 0 descriptor?? [ 1491.815976][ T5680] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1491.816569][T29366] wiimote 0005:057E:0306.0039: Remote error 255 on req 255 [ 1492.119772][T29356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.122130][T29356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1492.123527][ T5680] gspca_sunplus: reg_w_riv err -71 [ 1492.123643][ T5680] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1492.163035][ T5680] usb 5-1: USB disconnect, device number 91 [ 1492.214960][T26335] usb 4-1: Incompatible driver and firmware versions [ 1492.252241][T26335] usb 4-1: USB disconnect, device number 17 [ 1492.626550][T26335] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1492.778999][T26335] usb 4-1: Using ep0 maxpacket: 32 [ 1492.779738][T26335] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1492.782263][T26335] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1492.782282][T26335] usb 4-1: config 0 has no interface number 0 [ 1492.782335][T26335] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1492.785004][T26335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.785023][T26335] usb 4-1: Product: syz [ 1492.785034][T26335] usb 4-1: Manufacturer: syz [ 1492.785045][T26335] usb 4-1: SerialNumber: syz [ 1492.846623][T26335] usb 4-1: config 0 descriptor?? [ 1493.346491][ T5680] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1493.388754][ T7152] usb 2-1: USB disconnect, device number 9 [ 1493.418481][T29366] wiimote 0005:057E:0306.0039: Device removed [ 1493.497205][ T5680] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1493.505161][ T5680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.505194][ T5680] usb 5-1: Product: syz [ 1493.505212][ T5680] usb 5-1: Manufacturer: syz [ 1493.505228][ T5680] usb 5-1: SerialNumber: syz [ 1493.794149][T29382] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7042'. [ 1494.153903][T26335] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1494.153992][T26335] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1494.154013][T26335] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1494.154130][T26335] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1494.215163][T26335] usb 4-1: USB disconnect, device number 18 [ 1494.677942][ T5680] rtl8150 5-1:1.0: couldn't reset the device [ 1494.678171][ T5680] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1495.198894][T29400] FAULT_INJECTION: forcing a failure. [ 1495.198894][T29400] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.198924][T29400] CPU: 1 UID: 0 PID: 29400 Comm: syz.5.7043 Tainted: G L syzkaller #0 PREEMPT(full) [ 1495.198945][T29400] Tainted: [L]=SOFTLOCKUP [ 1495.198952][T29400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1495.198962][T29400] Call Trace: [ 1495.198968][T29400] [ 1495.198975][T29400] dump_stack_lvl+0xe8/0x150 [ 1495.199003][T29400] should_fail_ex+0x410/0x560 [ 1495.199027][T29400] should_failslab+0xa8/0x100 [ 1495.199050][T29400] __kmalloc_cache_noprof+0xa3/0x600 [ 1495.199069][T29400] ? nf_tables_newflowtable+0x927/0x25e0 [ 1495.199094][T29400] ? nf_tables_newflowtable+0x927/0x25e0 [ 1495.199123][T29400] nf_tables_newflowtable+0x927/0x25e0 [ 1495.199157][T29400] ? nft_pernet+0x23/0x240 [ 1495.199189][T29400] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 1495.199216][T29400] ? lock_acquire+0x115/0x350 [ 1495.199243][T29400] ? __nla_parse+0x40/0x60 [ 1495.199268][T29400] nfnetlink_rcv+0x1288/0x28c0 [ 1495.199317][T29400] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1495.199363][T29400] ? ref_tracker_free+0x689/0x830 [ 1495.199441][T29400] ? skb_clone+0x246/0x3a0 [ 1495.199484][T29400] ? __netlink_deliver_tap+0x811/0x860 [ 1495.199514][T29400] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.199536][T29400] ? netlink_deliver_tap+0x2e/0x1b0 [ 1495.199581][T29400] netlink_unicast+0x7bd/0x940 [ 1495.199625][T29400] netlink_sendmsg+0x813/0xb40 [ 1495.199656][T29400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.199686][T29400] ? apparmor_socket_sendmsg+0x98/0x360 [ 1495.199713][T29400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1495.199737][T29400] sock_sendmsg_nosec+0x13a/0x180 [ 1495.199763][T29400] ____sys_sendmsg+0x54e/0x850 [ 1495.199799][T29400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1495.199839][T29400] ? import_iovec+0x73/0xa0 [ 1495.199870][T29400] ___sys_sendmsg+0x2a5/0x360 [ 1495.199899][T29400] ? __lock_acquire+0x747/0x2de0 [ 1495.199926][T29400] ? __pfx____sys_sendmsg+0x10/0x10 [ 1495.199989][T29400] ? __fget_files+0x2a/0x420 [ 1495.200018][T29400] ? __fget_files+0x3a2/0x420 [ 1495.200057][T29400] __x64_sys_sendmsg+0x1b1/0x290 [ 1495.200091][T29400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1495.200147][T29400] do_syscall_64+0x166/0x520 [ 1495.200175][T29400] ? trace_irq_disable+0x3b/0x140 [ 1495.200197][T29400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.200218][T29400] ? clear_bhb_loop+0x70/0xc0 [ 1495.200243][T29400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.200264][T29400] RIP: 0033:0x7f75ddd9e159 [ 1495.200283][T29400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.200302][T29400] RSP: 002b:00007f75dec24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.200324][T29400] RAX: ffffffffffffffda RBX: 00007f75de025fa0 RCX: 00007f75ddd9e159 [ 1495.200340][T29400] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1495.200354][T29400] RBP: 00007f75dec24090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.200367][T29400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.200379][T29400] R13: 00007f75de026038 R14: 00007f75de025fa0 R15: 00007f75de14fa48 [ 1495.200412][T29400] [ 1495.545566][T29401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7047'. [ 1495.854093][T29413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1496.026821][T29267] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1496.177144][T29267] usb 4-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 1496.180428][T29267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.180459][T29267] usb 4-1: Product: syz [ 1496.180479][T29267] usb 4-1: Manufacturer: syz [ 1496.180490][T29267] usb 4-1: SerialNumber: syz [ 1496.210854][T29267] qcserial 4-1:1.0: Qualcomm USB modem converter detected [ 1496.231849][T29267] usb 4-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1496.376373][T26335] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1496.470334][ T5680] usb 5-1: USB disconnect, device number 92 [ 1496.533963][T26335] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1496.536990][T26335] usb 7-1: config 0 has no interfaces? [ 1496.550718][T26335] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.550790][T26335] usb 7-1: Product: syz [ 1496.550832][T26335] usb 7-1: Manufacturer: syz [ 1496.550872][T26335] usb 7-1: SerialNumber: syz [ 1496.579885][T26335] usb 7-1: config 0 descriptor?? [ 1496.604919][T29421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.609203][T29421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.636048][T29423] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7054'. [ 1496.683632][T29425] netlink: 'syz.3.7048': attribute type 29 has an invalid length. [ 1496.876490][T29417] vlan0: left promiscuous mode [ 1496.876726][T29417] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1496.896090][T29417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.903240][T29417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.936730][T29417] 0: reclassify loop, rule prio 0, protocol 800 [ 1496.975929][ T5680] usb 7-1: USB disconnect, device number 51 [ 1497.238067][T26982] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1497.398499][T26982] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1497.399999][T26982] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1497.400035][T26982] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1497.400064][T26982] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1497.400109][T26982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.463092][T29430] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1497.626843][T29267] usb 4-1: USB disconnect, device number 19 [ 1497.660788][T29267] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1497.664213][T29267] qcserial 4-1:1.0: device disconnected [ 1497.915825][T29432] syz.6.7057: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1497.915885][T29432] CPU: 1 UID: 0 PID: 29432 Comm: syz.6.7057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.915906][T29432] Tainted: [L]=SOFTLOCKUP [ 1497.915912][T29432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1497.915922][T29432] Call Trace: [ 1497.915929][T29432] [ 1497.915936][T29432] dump_stack_lvl+0xe8/0x150 [ 1497.915964][T29432] warn_alloc+0x24d/0x270 [ 1497.915986][T29432] ? __pfx_warn_alloc+0x10/0x10 [ 1497.916002][T29432] ? percpu_ref_get_many+0x19/0x140 [ 1497.916028][T29432] ? alloc_pages_mpol+0x256/0x390 [ 1497.916057][T29432] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 1497.916108][T29432] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1497.916153][T29432] ? kvm_dev_ioctl+0x12b/0x1770 [ 1497.916169][T29432] ? rcu_is_watching+0x16/0xb0 [ 1497.916191][T29432] ? kvm_dev_ioctl+0x12b/0x1770 [ 1497.916206][T29432] ? rcu_is_watching+0x16/0xb0 [ 1497.916256][T29432] ? kvm_dev_ioctl+0x12b/0x1770 [ 1497.916279][T29432] __kvmalloc_node_noprof+0x5a1/0x820 [ 1497.916307][T29432] ? kvm_dev_ioctl+0x12b/0x1770 [ 1497.916333][T29432] ? kvm_dev_ioctl+0x12b/0x1770 [ 1497.916362][T29432] kvm_dev_ioctl+0x12b/0x1770 [ 1497.916386][T29432] ? __fget_files+0x2a/0x420 [ 1497.916423][T29432] ? __fget_files+0x2a/0x420 [ 1497.916456][T29432] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1497.916476][T29432] ? __fget_files+0x2a/0x420 [ 1497.916511][T29432] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1497.916547][T29432] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1497.916571][T29432] __se_sys_ioctl+0xfc/0x170 [ 1497.916602][T29432] do_syscall_64+0x166/0x520 [ 1497.916663][T29432] ? trace_irq_disable+0x3b/0x140 [ 1497.916689][T29432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.916714][T29432] ? clear_bhb_loop+0x70/0xc0 [ 1497.916744][T29432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.916768][T29432] RIP: 0033:0x7f70a899e159 [ 1497.916808][T29432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.916828][T29432] RSP: 002b:00007f70a9824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1497.916875][T29432] RAX: ffffffffffffffda RBX: 00007f70a8c25fa0 RCX: 00007f70a899e159 [ 1497.916894][T29432] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 1497.916909][T29432] RBP: 00007f70a8a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1497.916925][T29432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1497.916941][T29432] R13: 00007f70a8c26038 R14: 00007f70a8c25fa0 R15: 00007f70a8d4fa48 [ 1497.916977][T29432] [ 1497.986788][T29432] Mem-Info: [ 1497.986835][T29432] active_anon:18516 inactive_anon:55 isolated_anon:9 [ 1497.986835][T29432] active_file:1903 inactive_file:58976 isolated_file:0 [ 1497.986835][T29432] unevictable:0 dirty:160 writeback:0 [ 1497.986835][T29432] slab_reclaimable:7377 slab_unreclaimable:114823 [ 1497.986835][T29432] mapped:43531 shmem:11986 pagetables:2341 [ 1497.986835][T29432] sec_pagetables:0 bounce:0 [ 1497.986835][T29432] kernel_misc_reclaimable:0 [ 1497.986835][T29432] free:1260941 free_pcp:9020 free_cma:0 [ 1497.986989][T29432] Node 0 active_anon:74064kB inactive_anon:220kB active_file:7612kB inactive_file:235488kB unevictable:0kB isolated(anon):36kB isolated(file):0kB mapped:173840kB dirty:640kB writeback:0kB shmem:47944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15852kB pagetables:9244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1497.987149][T29432] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:284kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1497.987354][T29432] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.987545][T29432] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1497.987655][T29432] Node 0 DMA32 free:1087412kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:74064kB inactive_anon:220kB active_file:7612kB inactive_file:235488kB unevictable:0kB writepending:640kB zspages:728kB present:3129332kB managed:2546880kB mlocked:8kB bounce:0kB free_pcp:36080kB local_pcp:7264kB free_cma:0kB [ 1497.987867][T29432] lowmem_reserve[]: 0 0 0 0 0 [ 1497.987986][T29432] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.988136][T29432] lowmem_reserve[]: 0 0 0 0 0 [ 1497.988283][T29432] Node 1 Normal free:3941000kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:416kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1497.988435][T29432] lowmem_reserve[]: 0 0 0 0 0 [ 1497.988540][T29432] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15352kB [ 1497.988896][T29432] Node 0 DMA32: 2427*4kB (UME) 949*8kB (UME) 841*16kB (UME) 544*32kB (UME) 308*64kB (UME) 337*128kB (UME) 160*256kB (UME) 55*512kB (UME) 30*1024kB (UME) 4*2048kB (U) 212*4096kB (UM) = 1087396kB [ 1497.989319][T29432] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1497.989579][T29432] Node 1 Normal: 2*4kB (UM) 8*8kB (UM) 14*16kB (UM) 9*32kB (UM) 9*64kB (UM) 4*128kB (UM) 2*256kB (U) 3*512kB (UM) 1*1024kB (M) 4*2048kB (M) 959*4096kB (UM) = 3941000kB [ 1497.990012][T29432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.990073][T29432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1497.990116][T29432] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1497.990153][T29432] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1497.990209][T29432] 72876 total pagecache pages [ 1497.990238][T29432] 15 pages in swap cache [ 1497.990259][T29432] Free swap = 124220kB [ 1497.990286][T29432] Total swap = 124996kB [ 1497.990322][T29432] 2097051 pages RAM [ 1497.990343][T29432] 0 pages HighMem/MovableOnly [ 1497.990363][T29432] 428715 pages reserved [ 1497.990383][T29432] 0 pages cma reserved [ 1498.697831][T29435] tipc: Started in network mode [ 1498.697860][T29435] tipc: Node identity 1001001, cluster identity 4711 [ 1498.697875][T29435] tipc: Node number set to 16781313 [ 1498.699012][T29435] tipc: Enabled bearer , priority 0 [ 1498.877784][T29439] FAULT_INJECTION: forcing a failure. [ 1498.877784][T29439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.877824][T29439] CPU: 0 UID: 0 PID: 29439 Comm: syz.6.7059 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.877856][T29439] Tainted: [L]=SOFTLOCKUP [ 1498.877865][T29439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1498.877879][T29439] Call Trace: [ 1498.877889][T29439] [ 1498.877899][T29439] dump_stack_lvl+0xe8/0x150 [ 1498.877938][T29439] should_fail_ex+0x410/0x560 [ 1498.877973][T29439] _copy_to_user+0x31/0xb0 [ 1498.878008][T29439] simple_read_from_buffer+0xe1/0x170 [ 1498.878049][T29439] proc_fail_nth_read+0x1bb/0x230 [ 1498.878073][T29439] ? common_file_perm+0x20e/0x2b0 [ 1498.878106][T29439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1498.878135][T29439] ? rw_verify_area+0x24a/0x4c0 [ 1498.878177][T29439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1498.878201][T29439] vfs_read+0x213/0xa80 [ 1498.878243][T29439] ? __pfx___mutex_lock+0x10/0x10 [ 1498.878277][T29439] ? __pfx_vfs_read+0x10/0x10 [ 1498.878314][T29439] ? __fget_files+0x2a/0x420 [ 1498.878353][T29439] ? __fget_files+0x3a2/0x420 [ 1498.878385][T29439] ? __fget_files+0x2a/0x420 [ 1498.878428][T29439] ksys_read+0x150/0x270 [ 1498.878453][T29439] ? __pfx_ksys_read+0x10/0x10 [ 1498.878488][T29439] do_syscall_64+0x166/0x520 [ 1498.878520][T29439] ? trace_irq_disable+0x3b/0x140 [ 1498.878546][T29439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.878571][T29439] ? clear_bhb_loop+0x70/0xc0 [ 1498.878601][T29439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.878627][T29439] RIP: 0033:0x7f70a895e98e [ 1498.878649][T29439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1498.878671][T29439] RSP: 002b:00007f70a9823fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1498.878705][T29439] RAX: ffffffffffffffda RBX: 00007f70a98246c0 RCX: 00007f70a895e98e [ 1498.878723][T29439] RDX: 000000000000000f RSI: 00007f70a98240a0 RDI: 0000000000000004 [ 1498.878740][T29439] RBP: 00007f70a9824090 R08: 0000000000000000 R09: 0000000000000000 [ 1498.878756][T29439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1498.878771][T29439] R13: 00007f70a8c26038 R14: 00007f70a8c25fa0 R15: 00007f70a8d4fa48 [ 1498.878809][T29439] [ 1499.207499][T29435] netlink: Invalid conntrack timeout [ 1499.207533][T29435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1499.381778][T29442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7060'. [ 1499.832322][T29459] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1499.985872][T29463] tipc: Enabling of bearer rejected, already enabled [ 1500.489761][T29267] wiimote 0005:057E:0306.003A: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 1500.490095][T29267] wiimote 0005:057E:0306.003A: New device registered [ 1500.698836][T29476] tipc: Enabled bearer , priority 0 [ 1500.766543][T20870] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1500.833966][T29433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.835793][T29433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.857193][ T5680] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1500.893142][T26982] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1500.895845][T26982] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input122 [ 1500.928181][T20870] usb 7-1: Using ep0 maxpacket: 16 [ 1500.929999][T20870] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1500.931845][T20870] usb 7-1: config 0 has no interfaces? [ 1500.960620][T20870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.960655][T20870] usb 7-1: Product: syz [ 1500.960674][T20870] usb 7-1: Manufacturer: syz [ 1500.960775][T20870] usb 7-1: SerialNumber: syz [ 1500.965788][T20870] usb 7-1: config 0 descriptor?? [ 1500.999369][T29480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7065'. [ 1501.005354][T26982] usb 5-1: USB disconnect, device number 93 [ 1501.005472][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1501.006545][ T5680] usb 4-1: Using ep0 maxpacket: 32 [ 1501.037562][ T5680] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 1501.046886][ T5680] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 1501.046964][ T5680] usb 4-1: config 4 has no interface number 0 [ 1501.047073][ T5680] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1501.047133][ T5680] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 1501.047210][ T5680] usb 4-1: config 4 interface 8 has no altsetting 0 [ 1501.083987][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.084096][ T5680] usb 4-1: Product: syz [ 1501.084139][ T5680] usb 4-1: Manufacturer: syz [ 1501.084187][ T5680] usb 4-1: SerialNumber: syz [ 1501.351285][T29474] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 1501.383576][ T5680] opticon 4-1:4.8: opticon converter detected [ 1501.399391][ T5680] usb 4-1: opticon converter now attached to ttyUSB0 [ 1501.405546][ T5680] usb 4-1: USB disconnect, device number 20 [ 1501.430981][ T5680] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 1501.432184][ T5680] opticon 4-1:4.8: device disconnected [ 1501.606470][ T9] wiimote 0005:057E:0306.003A: detected device: Nintendo Wii Remote (Gen 1) [ 1501.645020][ T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.003A/input/input124 [ 1501.660320][ T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.003A/input/input125 [ 1501.689509][ T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.003A/input/input123 [ 1501.844329][ T31] audit: type=1326 audit(1790719823.026:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.844585][ T31] audit: type=1326 audit(1790719823.026:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.858896][ T31] audit: type=1326 audit(1790719823.046:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.867636][ T31] audit: type=1326 audit(1790719823.046:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.868335][ T31] audit: type=1326 audit(1790719823.056:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.874091][ T31] audit: type=1326 audit(1790719823.056:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.875422][ T31] audit: type=1326 audit(1790719823.056:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.882975][ T31] audit: type=1326 audit(1790719823.066:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.905157][ T31] audit: type=1326 audit(1790719823.086:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1501.905991][ T31] audit: type=1326 audit(1790719823.086:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29482 comm="syz.4.7074" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01cb9e159 code=0x7ffc0000 [ 1502.117667][T29486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.173959][T29487] wiimote 0005:057E:0306.003A: Remote error 255 on req 255 [ 1502.241122][T29491] tipc: Enabling of bearer rejected, already enabled [ 1502.376992][T29496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7079'. [ 1502.377018][T29496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7079'. [ 1502.385314][T29496] ipvlan2: entered promiscuous mode [ 1502.540706][T29498] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1503.572653][T20870] usb 7-1: USB disconnect, device number 52 [ 1503.582844][T29481] wiimote 0005:057E:0306.003A: Device removed [ 1503.646403][T26338] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1503.799746][T26338] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1503.800275][T26338] usb 6-1: not running at top speed; connect to a high speed hub [ 1503.800306][T26338] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=11.08 [ 1503.802765][T26338] usb 6-1: config 16 has an invalid interface number: 203 but max is 0 [ 1503.802786][T26338] usb 6-1: config 16 has no interface number 0 [ 1503.802809][T26338] usb 6-1: config 16 interface 203 has no altsetting 0 [ 1503.805223][T26338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.805250][T26338] usb 6-1: Product: syz [ 1503.805266][T26338] usb 6-1: Manufacturer: syz [ 1503.805282][T26338] usb 6-1: SerialNumber: syz [ 1504.093093][T26338] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1504.158560][T26338] usb 6-1: USB disconnect, device number 127 [ 1504.447512][T29517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.733152][T29517] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1504.807068][T29521] tipc: Started in network mode [ 1504.807095][T29521] tipc: Node identity 1001001, cluster identity 4711 [ 1504.807110][T29521] tipc: Node number set to 16781313 [ 1504.916881][T29523] tipc: Enabled bearer , priority 0 [ 1505.566748][T26338] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1505.706663][T26338] usb 4-1: device descriptor read/64, error -71 [ 1505.726885][T26335] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1505.748184][T29539] tipc: Enabling of bearer rejected, already enabled [ 1505.877190][T26335] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1505.878311][T26335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.878343][T26335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.878382][T26335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.883444][T26335] usb 6-1: config 0 descriptor?? [ 1505.959470][T26338] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1506.088252][T26338] usb 4-1: device descriptor read/64, error -71 [ 1506.198683][T26338] usb usb4-port1: attempt power cycle [ 1506.351141][T29543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7095'. [ 1506.394589][T26335] hid_parser_main: 4 callbacks suppressed [ 1506.394617][T26335] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1506.394657][T26335] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1506.394685][T26335] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1506.394714][T26335] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1506.394742][T26335] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1506.394771][T26335] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1506.394799][T26335] cp2112 0003:10C4:EA90.003B: unknown main item tag 0x0 [ 1506.477662][T26335] cp2112 0003:10C4:EA90.003B: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1506.536439][T26338] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1506.577938][T26338] usb 4-1: device descriptor read/8, error -71 [ 1506.625807][T29535] xt_policy: output policy not valid in PREROUTING and INPUT [ 1506.816342][T26338] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1506.840968][T26338] usb 4-1: device descriptor read/8, error -71 [ 1506.871553][T26335] cp2112 0003:10C4:EA90.003B: Part Number: 0x00 Device Version: 0x00 [ 1506.876029][T29543] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7095'. [ 1506.949242][T26338] usb usb4-port1: unable to enumerate USB device [ 1507.090441][T26335] cp2112 0003:10C4:EA90.003B: error requesting SMBus config [ 1507.109668][T26335] cp2112 0003:10C4:EA90.003B: probe with driver cp2112 failed with error -71 [ 1507.147008][T26335] usb 6-1: USB disconnect, device number 2 [ 1508.870053][T29559] openvswitch: netlink: Flow actions attr not present in new flow. [ 1517.776287][ C1] sched: DL replenish lagged too much [ 1546.767762][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.778792][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1590.039002][ T4983] udevd[4983]: worker [25729] /devices/virtual/misc/uhid/0005:057E:0306.003A/input/input125/event5 is taking a long time [ 1609.533659][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.551189][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.473887][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1672.182327][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.570320][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.582196][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1776.490711][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1792.017625][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.032763][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.256138][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1793.263149][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23407/1:b..l [ 1793.271188][ C1] rcu: (detected by 1, t=10502 jiffies, g=290113, q=1201956 ncpus=2) [ 1793.279482][ C1] task:syz-executor state:R running task stack:22320 pid:23407 tgid:23407 ppid:23400 task_flags:0x400140 flags:0x00080000 [ 1793.293033][ C1] Call Trace: [ 1793.296349][ C1] [ 1793.299311][ C1] __schedule+0x17db/0x58f0 [ 1793.303892][ C1] ? __pfx___schedule+0x10/0x10 [ 1793.308802][ C1] preempt_schedule_irq+0x4b/0x90 [ 1793.313876][ C1] irqentry_exit+0x14f/0x910 [ 1793.318505][ C1] ? trace_irq_disable+0x3b/0x140 [ 1793.323578][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1793.329594][ C1] RIP: 0010:lock_acquire+0x51/0x350 [ 1793.334833][ C1] Code: 8b 05 2b 3a f2 11 48 89 44 24 50 0f 1f 44 00 00 65 8b 05 2a 3a f2 11 83 f8 08 0f 83 9b 01 00 00 89 c0 48 0f a3 05 57 1c d7 0e <73> 0d e8 f8 34 09 00 84 c0 0f 84 e2 01 00 00 83 3d 49 4d d7 0e 00 [ 1793.354478][ C1] RSP: 0018:ffffc90004267050 EFLAGS: 00000297 [ 1793.360591][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 1793.368595][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ed5c8a0 [ 1793.376599][ C1] RBP: 1ffff9200084ce44 R08: 0000000000000000 R09: 0000000000000000 [ 1793.384627][ C1] R10: ffffc90004267238 R11: fffff5200084ce49 R12: ffffffff8ed5c8a0 [ 1793.392635][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1793.400670][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1793.405837][ C1] ? arch_stack_walk+0xe3/0x150 [ 1793.410742][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1793.415902][ C1] unwind_next_frame+0xac/0x2550 [ 1793.420881][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1793.426040][ C1] ? __unwind_start+0xed/0x660 [ 1793.430842][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1793.435995][ C1] __unwind_start+0x514/0x660 [ 1793.440801][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1793.446999][ C1] arch_stack_walk+0xe3/0x150 [ 1793.451721][ C1] ? arch_stack_walk+0xe3/0x150 [ 1793.456622][ C1] stack_trace_save+0xa9/0x100 [ 1793.461416][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1793.466837][ C1] save_stack+0x122/0x230 [ 1793.471207][ C1] ? __pfx_save_stack+0x10/0x10 [ 1793.476104][ C1] ? page_ext_put+0x97/0xc0 [ 1793.480657][ C1] __reset_page_owner+0x71/0x1f0 [ 1793.485639][ C1] __free_frozen_pages+0xc93/0xd90 [ 1793.490803][ C1] __slab_free+0x274/0x2c0 [ 1793.495294][ C1] qlist_free_all+0x99/0x100 [ 1793.499937][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1793.505468][ C1] __kasan_kmalloc+0x22/0xb0 [ 1793.510102][ C1] __kmalloc_noprof+0x36b/0x720 [ 1793.514991][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 1793.520197][ C1] ? tomoyo_encode+0x2ad/0x570 [ 1793.525012][ C1] ? tomoyo_encode+0x2ad/0x570 [ 1793.529835][ C1] tomoyo_encode+0x2ad/0x570 [ 1793.534488][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 1793.540184][ C1] tomoyo_check_open_permission+0x229/0x470 [ 1793.546122][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1793.552219][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1793.558675][ C1] ? __asan_memset+0x22/0x50 [ 1793.563361][ C1] ? tomoyo_file_open+0x163/0x220 [ 1793.568450][ C1] security_file_open+0xa9/0x240 [ 1793.573523][ C1] do_dentry_open+0x4a0/0x1380 [ 1793.578352][ C1] vfs_open+0x3b/0x340 [ 1793.582463][ C1] ? path_openat+0x1428/0x1d60 [ 1793.587277][ C1] path_openat+0x1443/0x1d60 [ 1793.591935][ C1] do_file_open+0x23e/0x4a0 [ 1793.596480][ C1] ? __pfx_do_file_open+0x10/0x10 [ 1793.601566][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1793.606458][ C1] ? alloc_fd+0x651/0x6c0 [ 1793.610842][ C1] do_sys_openat2+0x115/0x200 [ 1793.615564][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1793.620811][ C1] ? __x64_sys_umount+0x12a/0x170 [ 1793.625881][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 1793.631331][ C1] __x64_sys_openat+0x138/0x170 [ 1793.636268][ C1] do_syscall_64+0x166/0x520 [ 1793.640935][ C1] ? trace_irq_disable+0x3b/0x140 [ 1793.646102][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.652210][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1793.656931][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.662861][ C1] RIP: 0033:0x7fb7a4d9d47c [ 1793.667312][ C1] RSP: 002b:00007fb7a514ec50 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1793.675776][ C1] RAX: ffffffffffffffda RBX: 00007fb7a4e344bb RCX: 00007fb7a4d9d47c [ 1793.683784][ C1] RDX: 0000000000090800 RSI: 00007fb7a514fe00 RDI: 00000000ffffff9c [ 1793.691792][ C1] RBP: 00007fb7a514fdec R08: 0000000000000000 R09: 0000000000000000 [ 1793.699804][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fb7a514fe00 [ 1793.707811][ C1] R13: 00007fb7a4e344bb R14: 0000000000170920 R15: 00007fb7a514fe40 [ 1793.715855][ C1] [ 1793.718912][ C1] rcu: rcu_preempt kthread starved for 6169 jiffies! g290113 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1793.729964][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1793.739965][ C1] rcu: RCU grace-period kthread stack dump: [ 1793.745883][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1793.759427][ C1] Call Trace: [ 1793.762740][ C1] [ 1793.765709][ C1] __schedule+0x17db/0x58f0 [ 1793.770282][ C1] ? __pfx___schedule+0x10/0x10 [ 1793.775173][ C1] ? lock_acquire+0x115/0x350 [ 1793.779897][ C1] ? schedule+0x90/0x2b0 [ 1793.784189][ C1] schedule+0x164/0x2b0 [ 1793.788395][ C1] schedule_timeout+0x152/0x2c0 [ 1793.793286][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1793.798708][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1793.804037][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1793.809888][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1793.815485][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1793.820391][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1793.826595][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1793.831934][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1793.837187][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1793.841935][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1793.847203][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1793.852190][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1793.857259][ C1] kthread+0x38b/0x480 [ 1793.861379][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1793.866618][ C1] ? __pfx_kthread+0x10/0x10 [ 1793.871258][ C1] ret_from_fork+0x514/0xb70 [ 1793.875891][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.881042][ C1] ? __switch_to+0xc89/0x1420 [ 1793.885767][ C1] ? __pfx_kthread+0x10/0x10 [ 1793.890396][ C1] ret_from_fork_asm+0x1a/0x30 [ 1793.895400][ C1] [ 1793.898452][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1793.904799][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1793.910051][ C0] NMI backtrace for cpu 0 [ 1793.910075][ C0] CPU: 0 UID: 0 PID: 3227 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.910119][ C0] Tainted: [L]=SOFTLOCKUP [ 1793.910131][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1793.910152][ C0] Workqueue: bat_events batadv_dat_purge [ 1793.910188][ C0] RIP: 0010:unwind_next_frame+0xb9f/0x2550 [ 1793.910222][ C0] Code: 6e 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 3b 14 00 00 41 83 3e 00 0f 95 c0 49 39 d7 0f 96 c1 <20> c1 49 39 d5 0f 97 c0 20 c8 3c 01 75 18 48 8d 42 08 4c 39 f8 0f [ 1793.910239][ C0] RSP: 0018:ffffc900000069a8 EFLAGS: 00000293 [ 1793.910256][ C0] RAX: 0000000000000001 RBX: 1ffff92000000d56 RCX: 1ffff92000000d01 [ 1793.910270][ C0] RDX: ffffc90000006b38 RSI: 0000000000000002 RDI: ffffc90000006ab8 [ 1793.910285][ C0] RBP: 1ffffffff22228f9 R08: ffffc90000006b40 R09: 0000000000000000 [ 1793.910299][ C0] R10: ffffc90000006af8 R11: fffff52000000d61 R12: 1ffff92000000d57 [ 1793.910314][ C0] R13: ffffc90000008000 R14: ffffc90000006aa8 R15: ffffc90000000000 [ 1793.910330][ C0] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 1793.910346][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1793.910360][ C0] CR2: 00007f593b94eccc CR3: 0000000062f7a000 CR4: 00000000003526f0 [ 1793.910378][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1793.910392][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1793.910406][ C0] Call Trace: [ 1793.910413][ C0] [ 1793.910425][ C0] ? arch_stack_walk+0xe3/0x150 [ 1793.910448][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1793.910473][ C0] __unwind_start+0x514/0x660 [ 1793.910497][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1793.910516][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1793.910537][ C0] arch_stack_walk+0xe3/0x150 [ 1793.910562][ C0] ? arch_stack_walk+0xe3/0x150 [ 1793.910584][ C0] ? dst_alloc+0x105/0x170 [ 1793.910604][ C0] stack_trace_save+0xa9/0x100 [ 1793.910623][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1793.910645][ C0] ? lock_acquire+0x115/0x350 [ 1793.910669][ C0] kasan_save_track+0x3e/0x80 [ 1793.910719][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1793.910744][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1793.910763][ C0] ? dst_alloc+0x105/0x170 [ 1793.910781][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1793.910800][ C0] ? dst_alloc+0x105/0x170 [ 1793.910822][ C0] dst_alloc+0x105/0x170 [ 1793.910843][ C0] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1793.910872][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1793.910895][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 1793.910918][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1793.910943][ C0] ? lock_acquire+0x115/0x350 [ 1793.910968][ C0] ip_route_output_flow+0x2a/0x150 [ 1793.910986][ C0] ? ip_route_me_harder+0x74b/0xfe0 [ 1793.911008][ C0] ip_route_me_harder+0x762/0xfe0 [ 1793.911034][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1793.911059][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1793.911088][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 1793.911114][ C0] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1793.911139][ C0] synproxy_send_tcp+0x332/0x670 [ 1793.911167][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 1793.911207][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1793.911232][ C0] ? nft_jhash_dump+0x394/0x440 [ 1793.911255][ C0] ? synproxy_pernet+0x45/0x270 [ 1793.911285][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 1793.911316][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1793.911345][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1793.911375][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 1793.911405][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1793.911435][ C0] ? tun_net_xmit+0x79/0x19e0 [ 1793.911467][ C0] nft_do_chain+0x48d/0x1b10 [ 1793.911502][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1793.911533][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 1793.911560][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1793.911601][ C0] nft_do_chain_ipv4+0x195/0x290 [ 1793.911627][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1793.911652][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 1793.911682][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 1793.911713][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 1793.911742][ C0] nf_hook_slow+0xc5/0x220 [ 1793.911768][ C0] NF_HOOK+0x21f/0x3c0 [ 1793.911795][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1793.911824][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1793.911849][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1793.911877][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1793.911908][ C0] ? ip_local_deliver+0x113/0x190 [ 1793.911937][ C0] NF_HOOK+0x336/0x3c0 [ 1793.911964][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1793.911991][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1793.912017][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1793.912045][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1793.912071][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1793.912100][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1793.912126][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1793.912153][ C0] process_backlog+0xa6b/0x18b0 [ 1793.912180][ C0] ? process_backlog+0x3de/0x18b0 [ 1793.912220][ C0] __napi_poll+0xaa/0x330 [ 1793.912244][ C0] net_rx_action+0x61d/0xf50 [ 1793.912274][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1793.912313][ C0] handle_softirqs+0x226/0x860 [ 1793.912341][ C0] ? do_softirq+0x77/0xd0 [ 1793.912368][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 1793.912388][ C0] do_softirq+0x77/0xd0 [ 1793.912412][ C0] [ 1793.912419][ C0] [ 1793.912426][ C0] __local_bh_enable_ip+0x100/0x140 [ 1793.912452][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 1793.912474][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1793.912501][ C0] process_scheduled_works+0xc3d/0x1630 [ 1793.912542][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1793.912567][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1793.912600][ C0] ? assign_work+0x3af/0x5d0 [ 1793.912627][ C0] rescuer_thread+0x7c5/0x10e0 [ 1793.912658][ C0] ? rescuer_thread+0xb8/0x10e0 [ 1793.912697][ C0] kthread+0x38b/0x480 [ 1793.912716][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1793.912743][ C0] ? __pfx_kthread+0x10/0x10 [ 1793.912763][ C0] ret_from_fork+0x514/0xb70 [ 1793.912783][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1793.912801][ C0] ? __switch_to+0xc89/0x1420 [ 1793.912829][ C0] ? __pfx_kthread+0x10/0x10 [ 1793.912848][ C0] ret_from_fork_asm+0x1a/0x30 [ 1793.912886][ C0]