last executing test programs: 23m36.363635232s ago: executing program 0 (id=4219): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x98}) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x2, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23m36.211014609s ago: executing program 0 (id=4220): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5012, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xcc5e, 0x8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x52, 0x8c}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000000d}) r3 = getpid() r4 = syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, 0x0) syz_pidfd_open(r3, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000100)={0x281, 0x1}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000540)={0x0, 0x77, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b5e2e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5b25b716a73e48c8c8f8ec21e15e7a5d674324"}, &(0x7f0000000500)=0x7f) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23m34.451463927s ago: executing program 0 (id=4238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x12}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x20050800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000040000000f08"], 0x18}}], 0x1, 0x44080) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0x0) set_mempolicy(0x8006, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x8) connect$inet6(r4, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000003, 0x0, 0x0, 0x16}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r7, r11, &(0x7f0000000200)={0x0, 0x1460, 0x400, 0x3, 0x1a4}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c1, 0x80, 0x2, 0x2af, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63bd, 0x400, 0x9, 0x502, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3cb5, 0x6, 0x3, 0x219, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0f, 0x40, 0x2, 0x40021b, 0x0, r7}}], 0x4, 0x0, 0x0) syz_ublk_setup_io_uring(0x171a, &(0x7f00000003c0)={0x0, 0xbe62, 0x0, 0x2, 0x1c2}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) io_uring_setup(0x7581, &(0x7f0000000500)={0x0, 0xcc90, 0x4, 0x2, 0x33f}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000580)='.pending_reads\x00', 0x206001, 0x2) 23m33.466019854s ago: executing program 0 (id=4242): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) unshare(0x2a020400) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000e40)={0xa, 0x1, 0x200, "3a8e0300d614000001000100000040004000000000000016c713b41e2a3600", 0x7d04651e}) 23m33.38692799s ago: executing program 0 (id=4243): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xa, 0xfffffe0000000001, 0xfa13, 0xffffffff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x42, 0xb2) ftruncate(r1, 0x200000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000000300)={&(0x7f0000000240)={0xa, 0x4e23, 0x2, @empty, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)='P', 0x1}, {&(0x7f00000001c0)="eec3a5b3fdc495de5203ac7633da80086ad148a42d3faa9577d1227e053d8872bc", 0x21}], 0x2}, 0x400c814) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="44000000b0751d5d540bf90c5048ec96aee28c86cc29008722c389f3136dac532b19b4bd04ab46f8324f64af638eb7d16cee158c8a5313e70584ca2c8c009b46c57f2ff554d42f32d70393e51aff6e7fdbc63356c55fe43eb1ee8d1c46db3d69cdef57759528aad5943b9e0ba316b8298a5d8ffcb9e0d6943dd5f3c43729d7abaf4352375c88dee5955d5a73b18dc53003854c0d1dc1ff3883fd649128dd8248ba936b4bede727b95407e4cb33c49aa62f62038cef1d3da8fb81700b8fa2b719f5e31174dd958459", @ANYRES16=r4, @ANYBLOB="010026bd700000010005000000080009000200000008000b000000000008000c00a80e000005001400f800000005001300fd000000", @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) pwrite64(r1, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r1, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r1, &(0x7f0000000100)="000200", 0x3, 0xc0c) pwrite64(r1, &(0x7f0000000a40)="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", 0x1fb, 0xd1f) pwrite64(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r1, &(0x7f0000000100)='PRIVHEAD', 0x8, 0x1e8000) pwrite64(r1, &(0x7f0000000100)="0002", 0x2, 0x1e800c) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000480)=""/74, 0x49) write$char_usb(r7, 0x0, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0xe0d02, 0x0) read(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x494, &(0x7f0000000500)=ANY=[@ANYBLOB="5e447d6f31b5aa13696c6750178800b44024c33c3552a684f0a9968f2ab95586739fd120b92bbca0c81a0148778da18e45e650bbdf9014edac3633058f891c0bcf0fbd79164eb719c603fff7a687425fe595cf95db9dcdc4d5956ddb8f6aacd28eddb83d865ba4472eb2deb8e52892d2ae50978255f3c0525366", @ANYBLOB="ab754de09ddf7b7598ad1763dcdbfdd2d984296b6a067fc18802fdfa89708a5b9b12e8dde9bbe0853fb592f3024a4e214e24ff472797277f457c5a326431352ed42bcce2e499edfadb4624ea7c3e634308aeb5da51f41b5fa9fa689b3f8ba2185dc65a0b23bcbccc2bcbcfb506a6b88329d87d07d06ea5c4a644843189e970724621f0eb340193a9b127aca78c700d5264d8eedfe9deb3f6628965b0d0895cad937afe9e9500d381125157ba878f999c3932058d7044be46218fcb0c5dfd8961a317357abdbcfb40ead2e3105f7e5d8267dca7f2455947fb254c165593fd05e3af3308", @ANYRES8=r2, @ANYRESHEX]) pwrite64(r1, &(0x7f0000000100), 0x0, 0x1e8133) 23m31.747385167s ago: executing program 0 (id=4253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000200000020010000000000000000000010000000000000aa0000000005000000000a00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000044000500ac141440000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/176], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011640101020000000000ff030000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000256f0b08bb00a40d6b6a0102030a0902120001000000000904000000ef"], 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r11, &(0x7f0000002740)=[{&(0x7f00000001c0)=""/144, 0x2b}], 0x1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003704030000000300000000000000", @ANYRES32=0x0, @ANYBLOB="7b9f050000000000180012800b00010065727370616e0600000002800430bb4c"], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r12, @ANYBLOB="0b1b0500000000004c0012800b000100697036677265"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r1, &(0x7f0000000240)="060000000000000500000000000000cd86dd", 0x12, 0x40015, &(0x7f0000000200)={0x11, 0x8100, r12, 0x1, 0x5, 0x6, @remote}, 0x14) 23m16.719002407s ago: executing program 32 (id=4253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000200000020010000000000000000000010000000000000aa0000000005000000000a00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000044000500ac141440000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/176], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011640101020000000000ff030000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000256f0b08bb00a40d6b6a0102030a0902120001000000000904000000ef"], 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4e52ba9def4ca6b0, 0x3, 0x0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r11, &(0x7f0000002740)=[{&(0x7f00000001c0)=""/144, 0x2b}], 0x1) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003704030000000300000000000000", @ANYRES32=0x0, @ANYBLOB="7b9f050000000000180012800b00010065727370616e0600000002800430bb4c"], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r12, @ANYBLOB="0b1b0500000000004c0012800b000100697036677265"], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r1, &(0x7f0000000240)="060000000000000500000000000000cd86dd", 0x12, 0x40015, &(0x7f0000000200)={0x11, 0x8100, r12, 0x1, 0x5, 0x6, @remote}, 0x14) 23m2.195897229s ago: executing program 4 (id=4401): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = socket(0x1d, 0x2, 0x6) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x48850) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xff}]}) (async) syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1df}, &(0x7f0000000000), &(0x7f0000000300), &(0x7f00000004c0)) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0x7ff, @vifc_lcl_addr=@local, @multicast1}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) pipe(&(0x7f0000000080)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x67a, 0x80000000006, 0xf3b8, 0x0, 0x1000, 0x3, 0x4002004c4, 0x1000, 0x0, 0x97, 0x11, 0x0, 0x3, 0x4], 0xeeee8000, 0x200400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22m56.542452603s ago: executing program 4 (id=4409): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0x2}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x4100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000000)="29000000140005b7ff000000040860eb0101b6ff02159f026ed638eeb738256e06a40e07fff0797e2a", 0x29) r9 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x48, 0x2c, 0xd2f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "f2c47d4007080fe0974c91f29a972c4d"}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1eb14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 22m55.657223095s ago: executing program 4 (id=4414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0xd8f, 0xa, 0x6, 0x2}, {0x800, 0x9, 0x0, 0x400}, {0x43, 0x6, 0x5, 0x1}, {0x8e, 0x7f, 0x3, 0x8}, {0xff01, 0x1, 0x0, 0x3}, {0x26c, 0xf5, 0x98, 0x9}, {0xe, 0x9, 0x4e, 0x7ffe}, {0x8, 0xb, 0x82}]}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c23004a) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20040, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230007) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x2841) ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x4400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0x4d}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) close(r6) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014f7ffffff120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) 22m55.18686764s ago: executing program 4 (id=4417): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000980)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x51, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, {0x3}}) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000000c0)={0x2e, 0x9, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, 0x0) write$P9_RLERRORu(r2, 0x0, 0x13) 22m51.909992358s ago: executing program 4 (id=4433): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = memfd_create(&(0x7f0000000840)='\xf3e\t\x9f\x918\x00\f\x00\x00\x00nux\x00sV\x03\x00;~\x04\v~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^\xec-\x98\xa6\xb6\x94\xbc\x9e\xc3\xb2]!\t\x9b\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd4*+E\xd6\xee\r\a\x80\xac:\xac!\x91\xe8\xa1i)\xf7\xa6\velW\x15~\xef\x8f\xff0\xa78\xe0\xb75b\x01\x1a\xa6.\x8f#\x82?\n\xa2:<\x87\xe9\xa6\xa1\xb5\x15c\xbd\xdb\x1b\r\x0e\t\xefSi\xden\x92\xae\x05\xa6\xcf\x05X\x81\xb1p\x803JA\x98Y\x85\xe4\x94\xe5W\x90V\xc7\xa6m\x1f\xd23A\x87Mk\xbd1L\x1a@k\x7f\x9d\x92\xab\x9b!9{\xfbs\xbd\x9a\x1c\xe4\xde&w\v=\xdf\x8a\xa4\xc7\x99\xf6\x81+\x11\xf0\x9f\xa2y`\x98\xbc\xd3\xe8{\x0f)\xf09\xb1\xac\xbcl\xb0YZ\xed\xd7{\xd1il\x9f[f\xae', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) (fail_nth: 4) 22m51.526502616s ago: executing program 4 (id=4434): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0xb140) poll(&(0x7f0000000080)=[{r0, 0x4025}], 0x1, 0x7) r1 = syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001dc0), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x4a01, 0x3, 0x6, 0x5, 0x9b, 0x86, 0x9, 0x10001}}) syz_usb_control_io$hid(r1, 0x0, 0x0) 22m36.062049748s ago: executing program 33 (id=4434): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0xb140) poll(&(0x7f0000000080)=[{r0, 0x4025}], 0x1, 0x7) r1 = syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001dc0), 0x1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x4a01, 0x3, 0x6, 0x5, 0x9b, 0x86, 0x9, 0x10001}}) syz_usb_control_io$hid(r1, 0x0, 0x0) 8m56.129991105s ago: executing program 2 (id=9738): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @local}, 0x10, &(0x7f0000007080)=[{0x0}, {&(0x7f0000000080)="0139", 0x2}], 0x2}, 0x0) 8m56.103571289s ago: executing program 2 (id=9740): r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x401, 0x145981) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000000200)) syz_open_dev$sndctrl(0x0, 0x8000008, 0x183582) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x4, 0x4, 0x360, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x3}, {0xffffffffffffffff, 0x3, 0x1}, 0x9, 0xfffeffff}}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x23}, [0x0, 0x0, 0x0, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x20, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x0, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)={0x6c, r4, 0x1, 0x70bd2f, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6be92feab126f0c7b126a26d95e1dd5c2d885ad55f4469a5989362075154a4b1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1d167d8f4452603b781108429b9f64f227e41cccef97ab3c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "18188f63ec3e4771"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x118, 0x8137da) 8m55.787638206s ago: executing program 2 (id=9743): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x400, 0xffffffffffffffff, 0x0, 0x0, 0x8000000004}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x40000000006, 0x200003, 0x8, 0x6, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0x9}, 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) connect$unix(r5, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="48000000111400032bbd7000fedbdf2508004f000000000008004a00ea0000000800000004060000080001000200000008003e0000000000080001002c94000008003e0004000000"], 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x801) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 8m54.789244023s ago: executing program 2 (id=9746): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x9000000d}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x20000800) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = epoll_create1(0x80000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_OPENQRY(r9, 0x5600, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)) syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) 8m54.298458903s ago: executing program 2 (id=9750): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3, @remote, 0x2}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000040)="9687", 0x2}], 0x1}}, {{&(0x7f0000001a00)={0xa, 0x4e21, 0x4cc5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000002f80)=[{&(0x7f0000001a40)='4', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0xffc0}, 0x90) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 8m53.626827621s ago: executing program 2 (id=9755): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) syz_usb_connect$uac1(0x5, 0xe3, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x0, 0xc0, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x36}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x1, 0x81, '['}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x7, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x4, 0x6, 0xf8}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x6, 0x1, "5b9e664d"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x4, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0x7, "c8c9", "ed"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x7, 0xa7, 'W^', "75eb14"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xad, 0x3, 0xdf, 0x1, "fd", '1'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xa, 0x9, 0x3, "255fbb22329b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x1d, 0x5, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x7fff, 0xfa, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x0, 0xfc, {0x7, 0x25, 0x1, 0x8, 0x4, 0x9f7c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x3, 0x7, {0x7, 0x25, 0x1, 0x0, 0x9, 0xa}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x4, 0x9, 0x9, 0x20, 0x3}, 0x50, &(0x7f00000004c0)={0x5, 0xf, 0x50, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x4, 0xf, 0x0, [0xff30, 0x1fec03f, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x76, 0x6, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x1, 0x0, 0x4, 0x34}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "8e348d0a4c13f4f555f118a11cc5591f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x4, 0x4, 0x3ff}]}, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x427}}, {0x74, &(0x7f0000000580)=@string={0x74, 0x3, "cc81d7379eac0d4479519ac3cc390bbe70bb05d676607c7b23dee5f3390a423c0a2838db70bc1098e707b8e85e9d7264c9189d2bf897511009a9a6359932dead6d8e0c85f643ef17b2a2c6d3957607fbe98398fd365b372d8ef69098627e7a5d39cf048e9c875c334180bcb40e20f4c3f29b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x405}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1010, 0x38, 0x770, 0x1, 0xbac0}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r4, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c0001000000080022"], 0x84}}, 0x200088c2) 8m52.968061949s ago: executing program 34 (id=9755): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000035da084f"], 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) syz_usb_connect$uac1(0x5, 0xe3, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x0, 0xc0, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x36}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x1, 0x81, '['}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0x7, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x4, 0x6, 0xf8}, @extension_unit={0xb, 0x24, 0x8, 0x2, 0x6, 0x1, "5b9e664d"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x304, 0x4, 0x2, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x2, 0x0, 0x7, "c8c9", "ed"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0x7, 0xa7, 'W^', "75eb14"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xad, 0x3, 0xdf, 0x1, "fd", '1'}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xa, 0x9, 0x3, "255fbb22329b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x1d, 0x5, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x7fff, 0xfa, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe, 0x0, 0xfc, {0x7, 0x25, 0x1, 0x8, 0x4, 0x9f7c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x3, 0x7, {0x7, 0x25, 0x1, 0x0, 0x9, 0xa}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x4, 0x9, 0x9, 0x20, 0x3}, 0x50, &(0x7f00000004c0)={0x5, 0xf, 0x50, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x4, 0xf, 0x0, [0xff30, 0x1fec03f, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x76, 0x6, 0x1ff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x1, 0x0, 0x4, 0x34}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "8e348d0a4c13f4f555f118a11cc5591f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x4, 0x4, 0x3ff}]}, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x427}}, {0x74, &(0x7f0000000580)=@string={0x74, 0x3, "cc81d7379eac0d4479519ac3cc390bbe70bb05d676607c7b23dee5f3390a423c0a2838db70bc1098e707b8e85e9d7264c9189d2bf897511009a9a6359932dead6d8e0c85f643ef17b2a2c6d3957607fbe98398fd365b372d8ef69098627e7a5d39cf048e9c875c334180bcb40e20f4c3f29b"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x405}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1010, 0x38, 0x770, 0x1, 0xbac0}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r4, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c0005800800030001000000050021000000000005001b000000000005000c0001000000080022"], 0x84}}, 0x200088c2) 13.352379107s ago: executing program 5 (id=11942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @empty, 0x7}, 0x1c) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty=0x91ff}, 0x8}, 0x1c) 12.824928908s ago: executing program 5 (id=11944): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4000004}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) write$char_usb(r4, 0x0, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) openat$cgroup(r4, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 12.696862582s ago: executing program 1 (id=11945): socket$inet6(0xa, 0x3, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x0, 0x3, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}}, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000340)) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newtaction={0x22d8, 0x30, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{0xa0, 0x1, [@m_ct={0x9c, 0x5, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "86b8970138fc0ec5985b6785e5a245d9"}]}, {0x50, 0x6, "f0c622475c780ac84530d65a1302b42f6c178028a1ff937c22441b2eb9d4331dde74aa91f59e8d4420dbb5264f356d766de89c8865bec2c8f63c992b64bd585c4413840a156cc982ef183d7d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x211c, 0x1, [@m_pedit={0xf74, 0x16, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x9, 0xfffffffb, 0x0, 0x0, 0x3}, 0xf1, 0x1, [{0xcf, 0x8, 0x9, 0x3, 0x4, 0x2}, {0x9, 0x10, 0x7, 0x10000, 0xc}, {0x8, 0x8, 0x7, 0x3, 0x3, 0x7fffffff}, {0x2, 0x2, 0x8, 0x3, 0xf13, 0xffffffff}, {0xfffffffe, 0x8a67, 0x7, 0x3, 0xe8f, 0x649}]}, [{0x8, 0x8, 0x100, 0x7, 0x3, 0x7ff}, {0x4, 0x8001, 0x1c76f766, 0x10001, 0x4, 0xd936}, {0x7, 0xfff, 0x9, 0x2, 0x2, 0x61}, {0x6, 0x7, 0x8, 0x101, 0x36a, 0x80000000}, {0x6, 0x9c69, 0x8, 0x1, 0x8, 0x9}, {0x800, 0x0, 0x9, 0x0, 0xfffffff9, 0x8}, {0xffffff00, 0x8, 0x20, 0x1000000, 0x3, 0x1}, {0x5, 0x2, 0x4, 0x8, 0x7, 0x7fff}, {0x3, 0x7ccb89d4, 0x80000000, 0x1, 0x2, 0x113}, {0x2, 0x401, 0xfffffffd, 0x4, 0x9, 0x5}, {0x7, 0xcb2a, 0x1, 0x100000, 0x1, 0x7}, {0x7f, 0x0, 0xfffffff0, 0x2, 0x7, 0x6}, {0x9, 0x7, 0x7, 0x7, 0x80000000, 0x2}, {0x6, 0xc9f2, 0x1000, 0x433, 0x2, 0x33}, {0x8, 0x9, 0xb, 0x6, 0x4b, 0x91c}, {0xc0d, 0xff, 0x8, 0x6, 0x26, 0x8}, {0x0, 0x7f, 0x6, 0x3, 0xd40, 0xbb}, {0x245, 0x13, 0x800, 0x8, 0x1000, 0xfffff961}, {0x6, 0x1d1, 0xb, 0x0, 0x7, 0x7c03}, {0x7, 0x0, 0x8d, 0x3, 0xb}, {0x7fffffff, 0x7f, 0x81, 0x3, 0x9, 0x7fff}, {0x91a1, 0x6, 0x9, 0x401, 0xff, 0x2}, {0xe, 0x0, 0x8, 0x0, 0x4, 0x3}, {0x5, 0xe, 0xffffb934, 0x9, 0x27, 0x2eb2}, {0x5, 0x9, 0x80000000, 0x3, 0x80000000}, {0x4, 0x8000, 0x3, 0x6, 0xd, 0x9}, {0xcb, 0xb20, 0x8, 0x8000, 0x4}, {0x3, 0x7, 0x1, 0x7, 0x4, 0x101}, {0x1000, 0x7, 0x9, 0x1, 0x7, 0xe6}, {0xd32, 0x2, 0x5, 0x0, 0x3ff, 0xeca}, {0x0, 0x40, 0x6, 0x5, 0x0, 0x1}, {0x9, 0x9, 0x7, 0x80000001, 0x50, 0xfffff800}, {0x7, 0x1, 0xc5, 0xffffffff, 0x5, 0x4}, {0x4, 0x0, 0x7, 0x7, 0xfffffff9, 0xffff}, {0x0, 0xd, 0x2a, 0x7642, 0xe, 0x1}, {0x3, 0x8d4e, 0xfffffffc, 0x0, 0x0, 0x1}, {0x5, 0x401, 0x1ff, 0x400, 0x1, 0x3}, {0xffffff33, 0x7, 0x5, 0x4, 0x70, 0x200}, {0x8, 0x9, 0x400, 0x110, 0x101, 0x1}, {0x3, 0x0, 0x4, 0x0, 0x8, 0xde}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5, 0x4d8a}, {0x9, 0x2da5eaa7, 0x0, 0x52f, 0x2, 0x1a3}, {0x5, 0x800, 0x9, 0x8, 0x2, 0xd40c}, {0x1, 0x1, 0x2, 0xa16, 0x40000000, 0x2}, {0x10, 0x2, 0x2, 0x7, 0x6, 0x4}, {0x500, 0x1, 0x9, 0x5, 0x5, 0xd391}, {0x1, 0x8b5, 0x1, 0xfd18, 0x0, 0x222}, {0x7, 0x7, 0x3, 0x9, 0x6, 0x1ff}, {0x658, 0x5, 0x7f, 0x5, 0x7fff, 0xb8}, {0x4, 0x3ff0000, 0x8, 0x9, 0x7, 0x2}, {0x5, 0x7, 0x8e, 0x7fff, 0x7, 0x5}, {0xf, 0x9f, 0x59, 0x0, 0x5, 0x3}, {0xffff, 0x7, 0x9, 0x2, 0x1, 0x2}, {0x8, 0x2, 0x4, 0x7f, 0x2, 0x5}, {0x80000000, 0x7, 0x0, 0x6, 0x3, 0x2}, {0x7ff, 0xfffff343, 0x1, 0x3}, {0x8b, 0x5, 0xffff, 0x2, 0x737, 0x1}, {0x0, 0xffffff7f, 0x9, 0x9, 0x1ff, 0x61}, {0x400, 0x7, 0x0, 0xffffffff, 0x6, 0x2}, {0x1000, 0x8001, 0x6, 0xfffffff8, 0x10f}, {0x5, 0x2, 0xb, 0x278, 0x3, 0x1}, {0x4, 0x8, 0x4bf, 0x2, 0x4aeb, 0x8001}, {0x800, 0xffff, 0x3ff, 0x8, 0x1, 0x1}, {0x8, 0x8, 0xa, 0x2, 0xff}, {0x98f, 0x7, 0x60e, 0x4981, 0x90, 0x7}, {0x7fff, 0x7, 0x2, 0x6, 0x6, 0xa49c}, {0x8, 0xf, 0x6, 0xd37, 0x4, 0x80000000}, {0x3ff, 0x2, 0x4, 0x8d, 0xfb5, 0x3}, {0x5b7e, 0x5, 0x101, 0x5, 0xd, 0x2}, {0x2, 0x0, 0x800, 0x9, 0x6, 0xb}, {0x4, 0x5, 0x5, 0x0, 0x5}, {0x7ff, 0x6, 0x401, 0xb59, 0x2, 0x16}, {0x0, 0x1, 0x5, 0x0, 0x57, 0x1000}, {0x9, 0x73, 0x2, 0xfffffffa, 0xd44, 0xe312}, {0xc0000000, 0x3, 0x9, 0x1ff, 0xfffffffc, 0x6}, {0x4, 0x2, 0xca0e, 0x1, 0xff, 0x8}, {0x617, 0x200, 0x3, 0x6, 0x2, 0x3}, {0x40, 0xf, 0x0, 0x240000, 0x1000, 0xff}, {0x9, 0x9, 0x3, 0x0, 0xcf4, 0x8}, {0x81, 0x80, 0x7e, 0x1ff, 0xe, 0x1000}, {0xfffffbff, 0x1, 0x8, 0x0, 0x6, 0x2e15}, {0x7, 0x5, 0x2, 0x80, 0x2, 0x40}, {0x9, 0x2, 0x4, 0x56c, 0x101, 0x9}, {0x9, 0x9, 0x4, 0x401, 0x9, 0x3}, {0x9, 0x5, 0xb794, 0x343b, 0x57c, 0x970}, {0x7, 0x2, 0xff, 0x101, 0x3, 0x80000001}, {0x4, 0x81, 0x0, 0x1, 0x9, 0x1}, {0x7, 0x1, 0x8, 0x7d, 0x0, 0xff}, {0x81, 0x59f6fd1e, 0x1, 0xfffffffc, 0xa, 0x585}, {0x783, 0xb2, 0xda16, 0x5, 0x7, 0x3}, {0x5, 0x8, 0x4, 0x7ff, 0x9, 0x8}, {0xdc01, 0x3, 0x6e, 0x90a4, 0xd, 0x1000}, {0x3, 0x3, 0x10001, 0x9, 0x8}, {0x4d, 0x1, 0x5, 0x0, 0x3, 0x101}, {0xee, 0xfffffffa, 0x7, 0x40, 0x0, 0xca}, {0x6, 0x0, 0x9, 0xa, 0x9, 0x3}, {0x6f0b, 0x7, 0xf1, 0x401, 0x7, 0x80000001}, {0x2, 0x7ff, 0xfffffffa, 0x7, 0x4dad, 0xfffffff1}, {0x7, 0x0, 0x0, 0x80000000, 0x7, 0x5}, {0x4, 0x5, 0xfffffffd, 0x0, 0x2, 0x3}, {0x8, 0x3ff, 0x8, 0x2, 0xeb9, 0x7}, {0x47, 0xfffffffa, 0x7ba, 0x800, 0x1, 0x10001}, {0x101, 0x7, 0x6, 0x6, 0x513, 0x7ff}, {0x3, 0x9e53, 0xfffffffe, 0x3, 0x9, 0x1c5e}, {0x12, 0x8, 0x4, 0x5, 0x2, 0x80000000}, {0xb6b7, 0x81, 0x0, 0x9, 0x1ff, 0x3ff}, {0x1, 0x9, 0x40, 0x0, 0x5, 0x2}, {0x1, 0x0, 0x4, 0x9, 0x7, 0x25}, {0x6, 0x2, 0x9, 0xff, 0x7fffffff, 0x7f}, {0x5, 0x0, 0x0, 0x53, 0x3, 0xffffffff}, {0x7a, 0x80000000, 0x7, 0x5, 0x3, 0x9}, {0x8, 0x9, 0x401, 0x0, 0xa600, 0x8}, {0xa89, 0x7, 0x7, 0x77, 0x2, 0x7}, {0x8, 0xfffffc01, 0x4, 0xf7d9, 0x8, 0x6}, {0x6, 0x1, 0x8, 0x8001, 0x1, 0xfffffff8}, {0xa, 0x1, 0x1, 0x7ff, 0x939, 0x8}, {0xe9, 0x3, 0xed8, 0x2, 0x7, 0x84d}, {0x2, 0x2c, 0x6, 0x80000001, 0x2, 0xfffffff7}, {0x0, 0xfffffffd, 0x0, 0x200, 0x9, 0x8}, {0xfffffffc, 0xffffffff, 0x800000, 0x0, 0x9, 0xb0e}, {0x3, 0x6, 0x8f, 0x0, 0x5, 0xe}, {0x5, 0x3, 0x40, 0x1, 0x87a9, 0x8}, {0x8, 0x960, 0x10, 0xea, 0x4, 0x5}, {0x1, 0x2, 0x1, 0x4, 0xfffffe01}, {0x712e32a7, 0x1ba1a1e2, 0x80000001, 0x0, 0x3380}, {0x7, 0x1, 0x7801, 0x7, 0x401, 0xb}, {0x7, 0x77, 0x6, 0x2, 0x7fffffff, 0x3}, {0x4, 0x1ff, 0xfd8, 0x4, 0x3, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x6}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0xfad61d20bf8edf00}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x5, 0xc3e6f066decbf771}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x7, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0xbd099ebf14567443}, {0x4}, {0x1, 0x1}, {0x2}, {}, {0x5, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x4}, {}, {0x5}, {0x3, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5}]}}]}, {0xad, 0x6, "7aa619f51274d31ea588667ad3de5c68ba7799baa219749de53a0c0d3e1690709cd62d017b863abe85c457c98a8a09b55dae82ae36bf95ff10f52faddf188632111557e80aa7261500d304a6cae0b7f4e7bbb8067fa91fc145953ebdab33eb9f287fa67a4c68dea4328a2dc3fde15099a2d40d8df39cf277ac7ad4be87ff54649dac7612d1f389a17f6aeb4cf7455f43513d0fe80817e610e2462908a7719440cf4d697d3880e4fdb9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x11a4, 0x7, 0x0, 0x0, {{0x7}, {0x1104, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x102a, 0x6, {0x3, 'filter\x00', 0x5, 0x3, "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"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4804}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x7b, 0x6, "455576fc8abd6f04fb1b205e6f13d3b160dde7e43169afad969a38fabda7a64ba9e42eecbd7f3425f395ee54fdcbdb43cd78abe6a0ffe7afb18f751d8dd1c5935a004bd0cea856195f81199d041a71b08770c03fa11cc2b0d94aea1604621d3690ac1436f39715f98987afb9f2ce53f67df630fa4bc81e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}]}, {0x108, 0x1, [@m_tunnel_key={0x104, 0x11, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}]}, {0xa3, 0x6, "85deab40439706c6a90642a55fa751e61c1196592c068819f57b53326f004e95eb046870d021e6953d2b7e4bd68e3cd52ec28a32bd9cf6134be7e45d2d60add72bb9ed2c8005fac99bdeb86e86aa4e59b8cd47aebf519a5e5fc49636969c5f872a601ce24dd22c2d5da1a3626b425f77f2f9a9d889f36fe7cb500ce478cc57950874776986c5bb61072a0adbff6425d6fbf56f75a3c5f8ac542a1d2b7dd1e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x22d8}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x100, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0x4, 0x9}, {0xd, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x87ff3c693e397323, 0x6}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x80c4) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r12, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r11, 0x1, 0x0, 0x6, @local}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000)={0x8000000e}) 11.150900208s ago: executing program 1 (id=11948): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) preadv(r0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/60, 0x3c}], 0x1, 0x5e4, 0x8001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000001fc0)={0x2020}, 0x2020) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sendto$inet6(r7, &(0x7f0000000080)="2ebd", 0x2, 0xe0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004800)={0x2020}, 0x2020) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 9.649036757s ago: executing program 1 (id=11951): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) preadv(r0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/60, 0x3c}], 0x1, 0x5e4, 0x8001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000001fc0)={0x2020}, 0x2020) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sendto$inet6(r7, &(0x7f0000000080)="2ebd", 0x2, 0xe0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setpriority(0x0, 0x0, 0x0) 8.977400846s ago: executing program 3 (id=11952): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xd) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000b060100000000000000000002000000050001"], 0x5c}}, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x2000}}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x8001}}, './file0\x00'}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 8.462378011s ago: executing program 1 (id=11953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (fail_nth: 3) 8.141414001s ago: executing program 1 (id=11954): r0 = syz_ublk_setup_io_uring(0x81d, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1da}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7.905087198s ago: executing program 1 (id=11955): mknodat$loop(0xffffffffffffff9c, 0x0, 0x1004, 0x1) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@multicast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "1000", 0x44, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x7f}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c41, 0x2) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$inet6(0xa, 0x3, 0x3a) socket$rds(0x15, 0x5, 0x0) r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, 0x0, 0x20000810) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000280)=""/92}, {&(0x7f0000000500)=""/139}, {&(0x7f0000000840)=""/234}, {&(0x7f0000000940)=""/4096}], 0x0, &(0x7f0000001ac0)=""/212}, 0x2}], 0x3fffffffffffffd, 0x10162, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r7, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 7.556749029s ago: executing program 6 (id=11956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffff}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x8005) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc8}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$getflags(r3, 0x40a) r4 = socket$netlink(0x10, 0x3, 0x0) gettid() timer_create(0x0, &(0x7f0000000600)={0x0, 0x20004a, 0x4, @thr={&(0x7f0000000780)="912ab3a153b0e6f6064c60e2d21bb8e894099ae5d9db349c367b26edcaac38ffdabfa57e888862a22e7a3749e01faffbbd4c4d62cb06dec83a1e1856c472bdd38aca70fe986cf20db1731f44e1cf3115faffc4113ecb75fa09054773eed02b081a0941b3d370cdf84b182128ee0b73106f1f4cbc5ca75960b63b75bb815dab9b7ca6cb6abc047c870fc651e28dd16df54f684bc540b301000000000000001307c6c62fc337cc1d5a886a7419bfa887e845a176eddb71ffae073eecdd0200a66af15188cbfef533db6c807511f241c136c35ec389651a566f3a5362", &(0x7f0000000100)="5eea785a5759b91be9915d9a3923e93bb24425990dad660e8b1e75e57d498bd443815f14f77f0c315a54b5b8e8ca37c2f389c8ba0a84fd1ac38975c524d106b277840d9019bc24d99902ebb48a3e47c63b1e"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create(0x200) close(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000008}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) capget(0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001560d4af03b857068fdbdf250a3812003fc1c2e1182f4f7b5fa645b3ebc5ad3942cd10b8d28ede400055af12c46a4b6562e6a70b6b09c9ab8aae71af5fec06d2165a35c550ce31a5", @ANYRES32=0x0, @ANYBLOB="14000200fe8800000000000000000000000000011400010000000000000000000000ffff64010102"], 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 7.458613514s ago: executing program 3 (id=11957): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x3f, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x80}, {0x81000, 0x200000000, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x6e6bb7, 0x1, 0x0, 0x4, 0x3}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3502, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) r2 = fsmount(0xffffffffffffffff, 0x0, 0x6) fchdir(r2) mkdirat(0xffffffffffffff9c, 0x0, 0x140) chdir(0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000340)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3dbedc008f217e7651d77381d15f6c550c11128c754fed7e90d", 0x45}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0xffffff09, 0x4) 7.206320535s ago: executing program 5 (id=11959): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x260}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x16069}, [@IFLA_NET_NS_FD]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80488cd) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000f51000/0x3000)=nil, 0x3000}, 0x5}) mprotect(&(0x7f0000f4a000/0x1000)=nil, 0x1000, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x24, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x5}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1, 0xd8f9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x8800, 0x0) preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0xb) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000000)=@attr_riscv64=@attr_imsic={0x0, 0x1, 0x2, &(0x7f0000000040)=0x5}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) fsopen(&(0x7f0000000000)='ubifs\x00', 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410}, 0x0) sendto$inet(r6, &(0x7f0000000200)="ee", 0x1, 0x4815, 0x0, 0x0) 6.949745949s ago: executing program 6 (id=11960): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x108) 6.088334343s ago: executing program 3 (id=11961): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a"], 0x2c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 5.948773813s ago: executing program 6 (id=11962): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) 5.945113033s ago: executing program 7 (id=11972): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 5.693811262s ago: executing program 7 (id=11963): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) preadv(r0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/60, 0x3c}], 0x1, 0x5e4, 0x8001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000001fc0)={0x2020}, 0x2020) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sendto$inet6(r7, &(0x7f0000000080)="2ebd", 0x2, 0xe0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setpriority(0x0, 0x0, 0x0) 4.745226438s ago: executing program 6 (id=11964): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|*iWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/246, 0xf6}], 0x1, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x1ff, 0x4, 0x0, 0xfffff6a8, 0x3, "c1d846f1120224c70b82426319d4c37ee7e4c0", 0x1, 0x6}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x7, 0xa40, 0xffffff81, 0x7fffffff, 0x6, "662ceb757dcb7495e121fcd1f20e485396a278", 0x2, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x300, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2000}, [@RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r1, 0x507, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x34}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48002}, 0x20000054) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="400303400000e5851a"], 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000001780)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) close(r6) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0x6, 0xc}, {0x2}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 4.742457048s ago: executing program 3 (id=11975): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff000705810200020007058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x44, &(0x7f00000001c0)={0x40, 0x0, 0x3, "0c0001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)="c61073a4"}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x3, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS={0x4}]}, 0x60}}, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='sched\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000b00)) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) userfaultfd(0x801) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) 4.651324672s ago: executing program 7 (id=11965): r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1da}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.428589676s ago: executing program 5 (id=11966): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x24, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4, 0x56}]}}}}}}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, 0x8, 0x6, 0x2, 0x0, 0x70bd25, 0x25dfdbfd}, 0x10}}, 0x0) sendmsg$rds(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1}, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0xe, 0xc363ac0399f6d33e, 0x2000, 0x1, 0x2, 0x1, 0x1}, 0x10) syz_clone(0x200600, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e27, @empty=0xfeffffff}}, 0x100, 0x601}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x18, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x0, 0x17, 0x5b, "f20839faee5d4b1950d8a8dff0a6bbfbfa70e422ea12b5bcfb1dd8aa4cb0258ca71a0b4a272ca6c362987921757bbc0b579dfe9e0d7c37329f60428c1ab60b1a4cf761fb5c48a5fe255c4d76e099a6ec964002b313f2403f4f2d68"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7a}, &(0x7f00000004c0)=ANY=[@ANYBLOB="2000480000000046dc678fc6df5002aba51660b25cbc9221d4ea831effa2a09e5298a1f12aeb29393a4b35292dcf440a6ec21fa69686e9cd7ec9"], &(0x7f0000000540)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x0, 0x1}}) syz_usb_control_io(r2, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) write$rfkill(r0, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 4.289717797s ago: executing program 7 (id=11967): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/149, 0x95, 0x1000306) read$ublk_bdev(r1, &(0x7f0000000240)=""/180, 0xb4) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f00000000c0)=0x32) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0xfffffffffffffffa, 0x2, 0x4, 0x0, 0x80, 0x10004063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x3}) 3.10741711s ago: executing program 7 (id=11968): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_getoverrun(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) 2.706333561s ago: executing program 7 (id=11969): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4000004}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb) write$char_usb(r4, 0x0, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) openat$cgroup(r4, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 2.109602552s ago: executing program 3 (id=11970): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='l'], 0x6c}, 0x1, 0x0, 0x0, 0x4850}, 0x20004000) socket$unix(0x1, 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000850000006d00000095000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x4e20, @multicast1}, @l2tp={0x2, 0x0, @remote, 0x4000000}, @ethernet={0x1, @broadcast}, 0xa5b5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='dvmrp1\x00', 0x20009, 0x100, 0x9}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x28c) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r2 = syz_open_dev$video(&(0x7f0000000240), 0x9, 0x123100) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000100)={0xfd4a, 0x400, 0x2, {0xd, @vbi={0xfffffffe, 0xffffffff, 0x6, 0x38415261, [0x8, 0x8814], [0x7, 0xa], 0x10c}}, 0x8}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd556", 0x93, 0x5, 0xff}], 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100193ac931040206582a3b50102030109024d0001027f400909040c07027b85530009058103030000000622023ed13729711a6e3f7ee9e3c2f767f89a2dee56136e3bbee236b084ecfe5b5c6c09059a"], 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0xfffe, @remote}}, {{0x2, 0x4e2c, @remote}}}, 0x104) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x2c000010) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800010001"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x9ced7000) 1.190141194s ago: executing program 6 (id=11971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r3, 0x1, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x2, "e541ff86db87a41f716be8e1fa0ff8fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x1) 958.616165ms ago: executing program 5 (id=11973): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0xe7, &(0x7f00000003c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r4 = syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595f, 0x20, 0x0, 0x10000052}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_SOCKET={0x2d, 0x40, 0x0, 0x8, 0x9, 0x0, 0x5, 0x0, 0x1, {0x0, 0x0, 0x4b05}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4008, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f00000000c0)=""/32, &(0x7f0000000080)=0x20) pread64(r3, &(0x7f0000000380)=""/47, 0x2f, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4c001}, 0x20008040) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x3, 0x1000, 0xf9, &(0x7f00000000c0)="d2803c78c5720b371ebafd7fb20f7eeea6209c60034f73835002badaee6124ba073003c5e28f84bcc6354342064eb430af361fe4eabcbf7e5451ae35d22deb22f230c03e99e889c6dfdadf41f124009a06c2682467ee1a4e10d1fcc23f28f85d2b5ca4aed63f6102a3a979e182eb2d9e00c992d22cc258a594cda2fc5bc739d87ef565175310631be20e4f3ff19f0c519beaece7f1b94ed8b0f68e44beb54ae0bc36199a90ee9039967cd87a0739ce3e3ed0259c5d71fbabc5e987e631effbc942a8b1f988696f5ee4494afcf249d1b6ab6ff753af54bcaf7358a56f9233d422b207b00fa2d57b98fff416edf2f3cab2f9460990c3a05f0b0a", 0x4, 0x0, &(0x7f0000000580)="c103645d"}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000100000001800018014000200766c616e30000000000000000000000005000b0002000000"], 0x34}}, 0x4044890) bind$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x4e24, 0x800, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x16) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r12, 0x4a, 0x1) r13 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r13, 0xc008ae88, &(0x7f0000000780)={0x1, 0x0, [{0x400000f5, 0x0, 0x200000000005}]}) r14 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140020304000e4190001600ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a7cee4090000001fb791643a5ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af2f28fcb1dc7a2cfe8ee732717c6ef", 0xd8}], 0x1}, 0x0) 502.683551ms ago: executing program 6 (id=11974): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x800, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x5, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x1, 0x4, 0x2, 0x9}, 0xe) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000640)={0x3c9, 0x80000, 0xffffffffffffffff}) ioctl$TIOCNXCL(r2, 0x540d) openat$binder_debug(0xffffff9c, &(0x7f00000021c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 425.624252ms ago: executing program 3 (id=11976): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r11, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13) 0s ago: executing program 5 (id=11977): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) preadv(r0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/60, 0x3c}], 0x1, 0x5e4, 0x8001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x5) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) read$FUSE(r6, &(0x7f0000001fc0)={0x2020}, 0x2020) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) sendto$inet6(r7, &(0x7f0000000080)="2ebd", 0x2, 0xe0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setpriority(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 193.636282][T11980] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f541c5d0 [ 2193.636296][T11980] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 2193.636307][T11980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2193.636319][T11980] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2193.636331][T11980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2193.636359][T11980] [ 2194.272321][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.289793][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.326068][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.328130][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2195.232340][T11975] bond2 (unregistering): Released all slaves [ 2196.204047][ T6262] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2196.327280][T12020] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3901428352 (7802856704 ns) > initial count (110847878 ns). Using initial count to start timer. [ 2196.356056][ T6262] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2196.370160][ T6262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.370204][ T6262] usb 4-1: Product: syz [ 2196.370243][ T6262] usb 4-1: Manufacturer: syz [ 2196.370259][ T6262] usb 4-1: SerialNumber: syz [ 2196.885589][ T6262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2196.885672][ T6262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2197.188726][T12029] FAULT_INJECTION: forcing a failure. [ 2197.188726][T12029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.188819][T12029] CPU: 0 UID: 0 PID: 12029 Comm: syz.1.11532 Tainted: G L syzkaller #0 PREEMPT(full) [ 2197.188848][T12029] Tainted: [L]=SOFTLOCKUP [ 2197.188854][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2197.188866][T12029] Call Trace: [ 2197.188874][T12029] [ 2197.188883][T12029] dump_stack_lvl+0xe8/0x150 [ 2197.188915][T12029] should_fail_ex+0x410/0x560 [ 2197.188948][T12029] _copy_from_user+0x2d/0xb0 [ 2197.188973][T12029] get_compat_msghdr+0xb3/0x4c0 [ 2197.189003][T12029] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2197.189032][T12029] ? kfree+0x4d/0x650 [ 2197.189063][T12029] ___sys_recvmsg+0x1db/0x5a0 [ 2197.189092][T12029] ? __pfx____sys_recvmsg+0x10/0x10 [ 2197.189120][T12029] ? lock_acquire+0x115/0x350 [ 2197.189166][T12029] do_recvmmsg+0x38b/0x7f0 [ 2197.189197][T12029] ? __pfx_do_recvmmsg+0x10/0x10 [ 2197.189231][T12029] ? __mutex_unlock_slowpath+0x731/0x900 [ 2197.189264][T12029] __sys_recvmmsg+0x1a5/0x290 [ 2197.189290][T12029] ? __pfx___sys_recvmmsg+0x10/0x10 [ 2197.189314][T12029] ? ksys_write+0x242/0x270 [ 2197.189347][T12029] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2197.189378][T12029] __do_fast_syscall_32+0x27a/0x6a0 [ 2197.189400][T12029] ? do_fast_syscall_32+0x33/0x70 [ 2197.189419][T12029] ? asm_int80_emulation+0x1a/0x20 [ 2197.189437][T12029] ? do_int80_emulation+0x299/0x500 [ 2197.189456][T12029] ? trace_irq_disable+0x3b/0x140 [ 2197.189479][T12029] do_fast_syscall_32+0x33/0x70 [ 2197.189500][T12029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2197.189523][T12029] RIP: 0023:0xf6fcf0ec [ 2197.189539][T12029] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2197.189557][T12029] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 2197.189578][T12029] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004680 [ 2197.189592][T12029] RDX: 0000000000000002 RSI: 0000000000010042 RDI: 0000000000000000 [ 2197.189604][T12029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2197.189621][T12029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2197.189633][T12029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2197.189661][T12029] [ 2197.710307][T12033] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11534'. [ 2197.806855][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2197.806895][ T30] audit: type=1326 audit(1788832139.723:13689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.846111][ T30] audit: type=1326 audit(1788832139.763:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.877340][ T30] audit: type=1326 audit(1788832139.793:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.877701][ T30] audit: type=1326 audit(1788832139.793:13692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.884326][ T30] audit: type=1326 audit(1788832139.803:13693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.894706][ T30] audit: type=1326 audit(1788832139.813:13694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.905523][ T30] audit: type=1326 audit(1788832139.823:13695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.905677][ T30] audit: type=1326 audit(1788832139.823:13696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.906036][ T30] audit: type=1326 audit(1788832139.823:13697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2197.924415][ T30] audit: type=1326 audit(1788832139.843:13698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.1.11534" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2198.015124][ T9909] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2198.021356][ T2697] lwtunnel_output(): recursion limit reached on datapath [ 2198.199517][ T9909] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2198.200830][ T9909] usb 6-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=af.98 [ 2198.207774][ T9909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.214190][ T9909] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 2198.214214][ T9909] usb 6-1: Product: syz [ 2198.214228][ T9909] usb 6-1: Manufacturer: syz [ 2198.214242][ T9909] usb 6-1: SerialNumber: syz [ 2198.459325][T12037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11536'. [ 2198.695261][ T9909] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 2198.700122][ T9909] gspca_sn9c20x: Write register 1000 failed -71 [ 2198.700148][ T9909] gspca_sn9c20x: Device initialization failed [ 2198.700260][ T9909] gspca_sn9c20x 6-1:1.0: probe with driver gspca_sn9c20x failed with error -71 [ 2198.720849][ T9909] usb 6-1: USB disconnect, device number 39 [ 2198.890129][T12051] program syz.6.11540 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2199.498390][T12066] netlink: 'syz.7.11545': attribute type 1 has an invalid length. [ 2199.546345][T12066] bond2: entered promiscuous mode [ 2199.547086][T12066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2199.668585][T12066] bond3: option resend_igmp: invalid value (1024) [ 2199.668647][T12066] bond3: option resend_igmp: allowed values 0 - 255 [ 2199.717144][T12066] bond3 (unregistering): Released all slaves [ 2200.094345][T12070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2200.119850][T12070] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2200.133717][T12070] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 2200.152207][T12070] bond2: (slave ip6gre1): making interface the new active one [ 2200.152241][T12070] ip6gre1: entered promiscuous mode [ 2200.190710][T12070] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 2200.616983][ T6262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 2200.617058][ T6262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2200.617710][ T6262] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2200.660731][ T6262] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2200.711623][ T6262] usb 4-1: USB disconnect, device number 107 [ 2201.731868][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.732321][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.782837][T12093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.805281][T12093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.116506][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2203.133643][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2203.143315][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2203.151736][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2203.159555][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2203.765281][ T2704] lwtunnel_output(): recursion limit reached on datapath [ 2204.184385][ T7351] syz_tun (unregistering): left allmulticast mode [ 2204.387632][T22537] lwtunnel_output(): recursion limit reached on datapath [ 2204.531845][T12145] netlink: 'syz.1.11569': attribute type 1 has an invalid length. [ 2204.539901][T12145] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11569'. [ 2204.844373][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.844538][T12123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.844685][T12123] bridge_slave_0: entered allmulticast mode [ 2204.873066][T12123] bridge_slave_0: entered promiscuous mode [ 2204.886067][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.886297][T12123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.886553][T12123] bridge_slave_1: entered allmulticast mode [ 2204.917562][T12123] bridge_slave_1: entered promiscuous mode [ 2205.117517][T12123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2205.127335][T12123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2205.228957][T12123] team0: Port device team_slave_0 added [ 2205.264966][ T3453] Bluetooth: hci4: command tx timeout [ 2205.264964][T12123] team0: Port device team_slave_1 added [ 2205.308274][T12123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2205.316698][T12123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2205.326316][T12123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2205.338897][T12123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2205.338927][T12123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2205.338970][T12123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2205.678414][T12123] hsr_slave_0: entered promiscuous mode [ 2205.680283][T12123] hsr_slave_1: entered promiscuous mode [ 2205.681556][T12123] debugfs: 'hsr0' already exists in 'hsr' [ 2205.681591][T12123] Cannot create hsr debugfs directory [ 2206.302301][T12177] netlink: 'syz.5.11582': attribute type 1 has an invalid length. [ 2206.316035][T12177] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11582'. [ 2206.521871][T12123] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.661582][T12123] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.776610][T12123] team0: Port device netdevsim1 removed [ 2206.785785][T12123] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.891402][T12123] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.094181][T12123] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2207.105079][T12123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2207.113035][T12123] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2207.125694][T12123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2207.133691][T12123] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2207.147681][T12123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2207.155751][T12123] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2207.166711][T12123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2207.272358][T12123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2207.315245][T12123] 8021q: adding VLAN 0 to HW filter on device team0 [ 2207.339565][T22537] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.339715][T22537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.355011][ T3453] Bluetooth: hci4: command tx timeout [ 2207.369793][ T2697] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.369959][ T2697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.480265][T12123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2207.548810][T12123] veth0_vlan: entered promiscuous mode [ 2207.572176][T12123] veth1_vlan: entered promiscuous mode [ 2207.620853][T12123] veth0_macvtap: entered promiscuous mode [ 2207.648655][T12123] veth1_macvtap: entered promiscuous mode [ 2207.680228][T12123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2207.694519][T12123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2207.722915][ T2697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.723075][ T2697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.723179][ T2697] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.723242][ T2697] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2208.102898][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.102934][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.190377][ T2694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2208.190421][ T2694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2208.304061][ T9908] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2208.414285][ T9910] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2208.454405][ T9908] usb 6-1: Using ep0 maxpacket: 8 [ 2208.455489][ T9908] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04 [ 2208.456693][ T9908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.469237][ T9908] usb 6-1: config 0 descriptor?? [ 2208.477640][ T9908] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2208.478836][ T9908] usb 6-1: Detected SIO [ 2208.490806][ T9908] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2208.553046][T12216] sit0: entered promiscuous mode [ 2208.557862][T12216] netlink: 'syz.6.11594': attribute type 1 has an invalid length. [ 2208.557881][T12216] netlink: 1 bytes leftover after parsing attributes in process `syz.6.11594'. [ 2208.565641][ T9910] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2208.567040][ T9910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2208.567063][ T9910] usb 4-1: config 0 has no interfaces? [ 2208.567092][ T9910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.571604][ T9910] usb 4-1: config 0 descriptor?? [ 2208.680063][T12206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.680506][T12206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.682829][ T9910] usb 6-1: USB disconnect, device number 40 [ 2208.710119][ T9910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2208.710616][ T9910] ftdi_sio 6-1:0.0: device disconnected [ 2208.784951][T13086] usb 4-1: USB disconnect, device number 108 [ 2209.425666][ T1172] lwtunnel_output(): recursion limit reached on datapath [ 2209.426145][ T3453] Bluetooth: hci4: command tx timeout [ 2209.507757][ T1172] lwtunnel_output(): recursion limit reached on datapath [ 2209.638997][T12234] netlink: 'syz.6.11601': attribute type 1 has an invalid length. [ 2209.691339][T12234] bond1: option resend_igmp: invalid value (1024) [ 2209.691382][T12234] bond1: option resend_igmp: allowed values 0 - 255 [ 2209.700306][T12234] bond1 (unregistering): Released all slaves [ 2209.814055][ T6262] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2209.969222][ T6262] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 2209.980937][ T6262] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2209.980984][ T6262] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 2209.981039][ T6262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.017875][ T6262] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 2210.034063][T12243] syz_tun: entered allmulticast mode [ 2210.049441][T12243] FAULT_INJECTION: forcing a failure. [ 2210.049441][T12243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2210.064949][T12243] CPU: 1 UID: 0 PID: 12243 Comm: syz.7.11603 Tainted: G L syzkaller #0 PREEMPT(full) [ 2210.064979][T12243] Tainted: [L]=SOFTLOCKUP [ 2210.064986][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2210.064997][T12243] Call Trace: [ 2210.065005][T12243] [ 2210.065014][T12243] dump_stack_lvl+0xe8/0x150 [ 2210.065047][T12243] should_fail_ex+0x410/0x560 [ 2210.065082][T12243] _copy_from_user+0x2d/0xb0 [ 2210.065106][T12243] copy_from_sockptr+0x48/0x70 [ 2210.065129][T12243] ip_mroute_setsockopt+0x839/0x10d0 [ 2210.065160][T12243] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 2210.065197][T12243] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 2210.065239][T12243] do_ip_setsockopt+0xeba/0x2e30 [ 2210.065266][T12243] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2210.065286][T12243] ? irqentry_exit+0x218/0x910 [ 2210.065304][T12243] ? trace_irq_disable+0x3b/0x140 [ 2210.065336][T12243] ? __pfx_raw_setsockopt+0x10/0x10 [ 2210.065370][T12243] ip_setsockopt+0x66/0x110 [ 2210.065389][T12243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2210.065421][T12243] do_sock_setsockopt+0x17c/0x1b0 [ 2210.065449][T12243] __ia32_sys_setsockopt+0x13d/0x1b0 [ 2210.065477][T12243] __do_fast_syscall_32+0x27a/0x6a0 [ 2210.065500][T12243] ? do_fast_syscall_32+0x33/0x70 [ 2210.065521][T12243] ? asm_int80_emulation+0x1a/0x20 [ 2210.065540][T12243] ? do_int80_emulation+0x299/0x500 [ 2210.065560][T12243] ? trace_irq_disable+0x3b/0x140 [ 2210.065584][T12243] do_fast_syscall_32+0x33/0x70 [ 2210.065605][T12243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2210.065628][T12243] RIP: 0023:0xf6fdf0ec [ 2210.065647][T12243] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2210.065665][T12243] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2210.065687][T12243] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000000000 [ 2210.065701][T12243] RDX: 00000000000000d2 RSI: 0000000080000200 RDI: 000000000000003c [ 2210.065715][T12243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2210.065726][T12243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2210.065738][T12243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2210.065767][T12243] [ 2210.259601][T12232] netlink: 'syz.3.11600': attribute type 1 has an invalid length. [ 2210.504311][T12248] veth3: entered allmulticast mode [ 2210.521284][T12248] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2210.562484][T12232] bond1: (slave veth0_to_bond): making interface the new active one [ 2210.571677][T12232] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2210.586856][T12257] batadv_slave_1: entered allmulticast mode [ 2210.608281][ T6254] usb 4-1: USB disconnect, device number 109 [ 2210.641511][ T6254] idmouse 4-1:1.0: disconnected [ 2211.505788][ T3453] Bluetooth: hci4: command tx timeout [ 2211.541219][T12275] netlink: 'syz.7.11611': attribute type 1 has an invalid length. [ 2211.541257][T12275] netlink: 1 bytes leftover after parsing attributes in process `syz.7.11611'. [ 2212.362762][T12265] bond2 (unregistering): Released all slaves [ 2212.927903][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.942504][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.541669][T12305] netlink: 'syz.5.11622': attribute type 1 has an invalid length. [ 2213.541712][T12305] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11622'. [ 2214.637403][T29971] lwtunnel_output(): recursion limit reached on datapath [ 2214.678791][T12329] openvswitch: netlink: Flow actions attr not present in new flow. [ 2214.684688][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11627'. [ 2214.684719][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11627'. [ 2214.733615][T12329] geneve3: entered promiscuous mode [ 2215.266995][T29971] lwtunnel_output(): recursion limit reached on datapath [ 2215.558601][T12344] netlink: 'syz.6.11632': attribute type 1 has an invalid length. [ 2215.744930][T12347] bond0: (slave bond_slave_0): Releasing backup interface [ 2216.122455][T12358] netlink: 'syz.7.11639': attribute type 1 has an invalid length. [ 2216.122495][T12358] netlink: 1 bytes leftover after parsing attributes in process `syz.7.11639'. [ 2216.265595][T12362] FAULT_INJECTION: forcing a failure. [ 2216.265595][T12362] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.265674][T12362] CPU: 1 UID: 0 PID: 12362 Comm: syz.6.11640 Tainted: G L syzkaller #0 PREEMPT(full) [ 2216.265702][T12362] Tainted: [L]=SOFTLOCKUP [ 2216.265709][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2216.265720][T12362] Call Trace: [ 2216.265729][T12362] [ 2216.265737][T12362] dump_stack_lvl+0xe8/0x150 [ 2216.265769][T12362] should_fail_ex+0x410/0x560 [ 2216.265816][T12362] should_failslab+0xa8/0x100 [ 2216.265842][T12362] __kmalloc_noprof+0xfe/0x720 [ 2216.265862][T12362] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 2216.265882][T12362] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 2216.265910][T12362] snd_pcm_hw_refine+0xa18/0x17d0 [ 2216.265947][T12362] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 2216.265992][T12362] ? rcu_is_watching+0x16/0xb0 [ 2216.266018][T12362] ? __kasan_kmalloc+0x93/0xb0 [ 2216.266041][T12362] ? __kmalloc_cache_noprof+0x321/0x600 [ 2216.266060][T12362] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2216.266077][T12362] ? snd_pcm_oss_change_params_locked+0x910/0x3c80 [ 2216.266103][T12362] ? snd_pcm_oss_change_params_locked+0x910/0x3c80 [ 2216.266130][T12362] ? snd_pcm_oss_change_params_locked+0x92c/0x3c80 [ 2216.266155][T12362] ? snd_interval_refine+0x5f8/0xa40 [ 2216.266183][T12362] snd_pcm_oss_change_params_locked+0xb2d/0x3c80 [ 2216.266239][T12362] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 2216.266280][T12362] ? lock_acquire+0x115/0x350 [ 2216.266320][T12362] snd_pcm_oss_write+0x26e/0xb40 [ 2216.266360][T12362] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 2216.266385][T12362] vfs_write+0x296/0xba0 [ 2216.266423][T12362] ? __pfx_vfs_write+0x10/0x10 [ 2216.266454][T12362] ? __fget_files+0x2a/0x420 [ 2216.266483][T12362] ? __fget_files+0x2a/0x420 [ 2216.266509][T12362] ? __fget_files+0x3a2/0x420 [ 2216.266534][T12362] ? __fget_files+0x2a/0x420 [ 2216.266568][T12362] ksys_write+0x150/0x270 [ 2216.266600][T12362] ? __pfx_ksys_write+0x10/0x10 [ 2216.266639][T12362] __do_fast_syscall_32+0x27a/0x6a0 [ 2216.266661][T12362] ? do_fast_syscall_32+0x33/0x70 [ 2216.266682][T12362] ? asm_int80_emulation+0x1a/0x20 [ 2216.266702][T12362] ? do_int80_emulation+0x299/0x500 [ 2216.266726][T12362] do_fast_syscall_32+0x33/0x70 [ 2216.266748][T12362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2216.266772][T12362] RIP: 0023:0xf6fdf0ec [ 2216.266790][T12362] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2216.266807][T12362] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2216.266828][T12362] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800012c0 [ 2216.266842][T12362] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2216.266855][T12362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2216.266867][T12362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2216.266879][T12362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2216.266908][T12362] [ 2216.682940][ T4394] veth0_to_bond: left allmulticast mode [ 2216.682980][ T4394] veth0_to_bond: left promiscuous mode [ 2216.683193][ T4394] bridge3: port 3(veth0_to_bond) entered disabled state [ 2216.722938][ T4394] veth51: left allmulticast mode [ 2216.722983][ T4394] veth51: left promiscuous mode [ 2216.723208][ T4394] bridge3: port 2(veth51) entered disabled state [ 2216.769928][ T4394] veth49: left allmulticast mode [ 2216.769969][ T4394] veth49: left promiscuous mode [ 2216.770152][ T4394] bridge3: port 1(veth49) entered disabled state [ 2216.823315][T12369] FAULT_INJECTION: forcing a failure. [ 2216.823315][T12369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2216.838391][T12369] CPU: 1 UID: 0 PID: 12369 Comm: syz.1.11641 Tainted: G L syzkaller #0 PREEMPT(full) [ 2216.838421][T12369] Tainted: [L]=SOFTLOCKUP [ 2216.838428][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2216.838444][T12369] Call Trace: [ 2216.838452][T12369] [ 2216.838461][T12369] dump_stack_lvl+0xe8/0x150 [ 2216.838493][T12369] should_fail_ex+0x410/0x560 [ 2216.838527][T12369] _copy_from_user+0x2d/0xb0 [ 2216.838551][T12369] copy_from_bpfptr+0x5c/0x90 [ 2216.838575][T12369] bpf_prog_load+0xcdb/0x1c20 [ 2216.838607][T12369] ? __pfx_bpf_prog_load+0x10/0x10 [ 2216.838655][T12369] __sys_bpf+0xd0d/0xd90 [ 2216.838685][T12369] ? __pfx___sys_bpf+0x10/0x10 [ 2216.838710][T12369] ? ksys_write+0x1e6/0x270 [ 2216.838742][T12369] ? __mutex_unlock_slowpath+0x731/0x900 [ 2216.838781][T12369] ? fput+0xa0/0xd0 [ 2216.838804][T12369] ? ksys_write+0x242/0x270 [ 2216.838839][T12369] __ia32_sys_bpf+0xba/0xd0 [ 2216.838862][T12369] __do_fast_syscall_32+0x27a/0x6a0 [ 2216.838885][T12369] ? do_fast_syscall_32+0x33/0x70 [ 2216.838905][T12369] ? asm_int80_emulation+0x1a/0x20 [ 2216.838924][T12369] ? do_int80_emulation+0x299/0x500 [ 2216.838944][T12369] ? trace_irq_disable+0x3b/0x140 [ 2216.838967][T12369] do_fast_syscall_32+0x33/0x70 [ 2216.838989][T12369] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2216.839013][T12369] RIP: 0023:0xf6fcf0ec [ 2216.839031][T12369] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2216.839047][T12369] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 2216.839069][T12369] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 2216.839083][T12369] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 2216.839095][T12369] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2216.839108][T12369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2216.839120][T12369] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2216.839148][T12369] [ 2217.545340][ T9910] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2217.664834][ T9906] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2217.696802][ T9910] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2217.698886][ T9910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.698908][ T9910] usb 4-1: config 0 has no interfaces? [ 2217.698937][ T9910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.717888][ T9910] usb 4-1: config 0 descriptor?? [ 2217.904302][ T9906] usb 6-1: Using ep0 maxpacket: 16 [ 2217.959862][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.960394][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.962732][ T9906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 2217.965978][ T9906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2217.966001][ T9906] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2217.973573][ T9906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2217.973597][ T9906] usb 6-1: Product: syz [ 2217.973612][ T9906] usb 6-1: Manufacturer: syz [ 2217.973626][ T9906] usb 6-1: SerialNumber: syz [ 2217.976954][ T9906] usb 6-1: config 0 descriptor?? [ 2218.076157][ T9906] usb 4-1: USB disconnect, device number 110 [ 2218.265391][ T4394] bond20 (unregistering): (slave bridge1): Releasing backup interface [ 2218.265438][ T4394] bridge1 (unregistering): left promiscuous mode [ 2218.444006][ T4394] bond0 (unregistering): Released all slaves [ 2218.475697][ T4394] bond1 (unregistering): (slave veth3): Releasing active interface [ 2218.563186][ T4394] bond1 (unregistering): Released all slaves [ 2218.655795][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11646'. [ 2218.670599][ T4394] bond2 (unregistering): (slave veth5): Releasing active interface [ 2218.728553][ T4394] bond2 (unregistering): Released all slaves [ 2218.782049][ T4394] bond3 (unregistering): (slave veth7): Releasing backup interface [ 2218.795740][ T4394] bond3 (unregistering): Released all slaves [ 2218.833538][ T4394] bond4 (unregistering): (slave veth9): Releasing active interface [ 2218.845925][T12410] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11646'. [ 2218.848118][ T4394] bond4 (unregistering): Released all slaves [ 2218.919459][ T4394] bond5 (unregistering): (slave veth11): Releasing active interface [ 2218.932740][ T4394] bond5 (unregistering): Released all slaves [ 2219.028354][ T4394] bond6 (unregistering): (slave veth13): Releasing active interface [ 2219.052638][ T4394] bond6 (unregistering): Released all slaves [ 2219.122376][ T4394] bond7 (unregistering): (slave veth15): Releasing active interface [ 2219.155288][ T4394] bond7 (unregistering): Released all slaves [ 2219.228860][ T4394] bond8 (unregistering): (slave veth17): Releasing backup interface [ 2219.260497][ T4394] bond8 (unregistering): Released all slaves [ 2219.282309][ T4394] bond9 (unregistering): Released all slaves [ 2219.311636][ T4394] bond10 (unregistering): Released all slaves [ 2219.354948][ T4394] bond11 (unregistering): (slave veth19): Releasing backup interface [ 2219.386122][ T4394] bond11 (unregistering): Released all slaves [ 2219.422964][ T4394] bond12 (unregistering): (slave veth21): Releasing backup interface [ 2219.447739][ T4394] bond12 (unregistering): Released all slaves [ 2219.483569][ T4394] bond13 (unregistering): (slave veth23): Releasing backup interface [ 2219.508931][ T4394] bond13 (unregistering): Released all slaves [ 2219.557402][ T4394] bond14 (unregistering): (slave veth25): Releasing backup interface [ 2219.579679][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11648'. [ 2219.593398][ T4394] bond14 (unregistering): Released all slaves [ 2219.771032][ T4394] bond15 (unregistering): (slave veth27): Releasing backup interface [ 2219.781939][T12431] netlink: 34 bytes leftover after parsing attributes in process `syz.1.11648'. [ 2219.795630][ T4394] bond15 (unregistering): Released all slaves [ 2219.856985][ T4394] bond16 (unregistering): (slave veth29): Releasing active interface [ 2219.871527][ T4394] bond16 (unregistering): Released all slaves [ 2219.953125][ T9906] usb 6-1: USB disconnect, device number 41 [ 2219.969769][ T4394] bond17 (unregistering): (slave veth31): Releasing active interface [ 2219.983235][ T4394] bond17 (unregistering): Released all slaves [ 2220.021677][ T4394] bond18 (unregistering): (slave veth33): Releasing active interface [ 2220.034261][ T4394] bond18 (unregistering): Released all slaves [ 2220.057251][ T4394] bond19 (unregistering): (slave veth35): Releasing active interface [ 2220.069783][ T4394] bond19 (unregistering): Released all slaves [ 2220.100260][ T4394] bond20 (unregistering): Released all slaves [ 2220.120079][ T4394] bond21 (unregistering): (slave veth37): Releasing active interface [ 2220.136367][ T4394] bond21 (unregistering): Released all slaves [ 2220.160290][ T4394] bond22 (unregistering): (slave veth39): Releasing active interface [ 2220.173717][ T4394] bond22 (unregistering): Released all slaves [ 2220.195317][ T4394] bond23 (unregistering): (slave veth41): Releasing active interface [ 2220.205969][ T4394] bond23 (unregistering): Released all slaves [ 2220.226287][ T4394] bond24 (unregistering): (slave veth43): Releasing active interface [ 2220.239844][ T4394] bond24 (unregistering): Released all slaves [ 2220.287888][ T4394] bond25 (unregistering): (slave veth45): Releasing active interface [ 2220.301724][ T4394] bond25 (unregistering): Released all slaves [ 2220.359414][ T4394] bond26 (unregistering): (slave veth47): Releasing active interface [ 2220.387697][ T4394] bond26 (unregistering): Released all slaves [ 2220.396491][ T2694] lwtunnel_output(): recursion limit reached on datapath [ 2220.576397][ T9904] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 2220.759068][ T9904] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 2220.770753][ T9904] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 2220.770799][ T9904] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2220.770841][ T9904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2220.770879][ T9904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.811633][T12446] netlink: 'syz.7.11653': attribute type 1 has an invalid length. [ 2220.811667][T12446] netlink: 1 bytes leftover after parsing attributes in process `syz.7.11653'. [ 2220.835317][ T9904] usb 6-1: config 0 descriptor?? [ 2220.841187][T12433] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2220.955230][ T4394] tipc: Left network mode [ 2220.977146][ T6254] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2221.032952][ T2694] lwtunnel_output(): recursion limit reached on datapath [ 2221.126309][ T6254] usb 4-1: Using ep0 maxpacket: 32 [ 2221.127403][ T6254] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2221.129913][ T6254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2221.129958][ T6254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2221.130043][ T6254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.175563][ T6254] usb 4-1: config 0 descriptor?? [ 2221.201650][ T6254] hub 4-1:0.0: USB hub found [ 2221.280581][ T9904] kye 0003:0458:501A.0089: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2221.307739][ T9904] hid_parser_main: 7 callbacks suppressed [ 2221.313579][ T9904] kye 0003:0458:501A.0089: unknown main item tag 0x2 [ 2221.320545][ T9904] kye 0003:0458:501A.0089: unknown main item tag 0x7 [ 2221.336053][ T9904] kye 0003:0458:501A.0089: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.5-1/input0 [ 2221.347558][ T9904] kye 0003:0458:501A.0089: tablet-enabling feature report not found [ 2221.370508][ T9904] kye 0003:0458:501A.0089: tablet enabling failed [ 2221.417956][ T6254] hub 4-1:0.0: 1 port detected [ 2221.545939][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2221.566324][ T30] audit: type=1326 audit(1788832163.463:13709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.591403][ T30] audit: type=1326 audit(1788832163.513:13710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.617267][ T30] audit: type=1326 audit(1788832163.543:13711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.670539][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.680853][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.715424][ T30] audit: type=1326 audit(1788832163.613:13712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.715486][ T30] audit: type=1326 audit(1788832163.613:13713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.740941][ T30] audit: type=1326 audit(1788832163.633:13714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.740990][ T30] audit: type=1326 audit(1788832163.633:13715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.741030][ T30] audit: type=1326 audit(1788832163.633:13716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.766005][ T30] audit: type=1326 audit(1788832163.663:13717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.766052][ T30] audit: type=1326 audit(1788832163.663:13718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.5.11649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000 [ 2221.913197][T12452] lo: entered allmulticast mode [ 2221.920759][T13086] usb 6-1: USB disconnect, device number 42 [ 2222.282362][ T4394] hsr_slave_0: left promiscuous mode [ 2222.292990][ T4394] hsr_slave_1: left promiscuous mode [ 2222.335776][ T4394] veth1_vlan: left promiscuous mode [ 2222.341203][ T4394] veth0_vlan: left promiscuous mode [ 2222.484908][ T6254] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 2222.535740][ T6254] usbhid 4-1:0.0: can't add hid device: -32 [ 2222.535977][ T6254] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 2223.283249][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.308567][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.343336][T12474] loop9: detected capacity change from 0 to 7 [ 2223.472261][T12474] Dev loop9: unable to read RDB block 7 [ 2223.478052][T12474] loop9: unable to read partition table [ 2223.484519][T12474] loop9: partition table beyond EOD, truncated [ 2223.490911][T12474] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 2224.155817][T12482] FAULT_INJECTION: forcing a failure. [ 2224.155817][T12482] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.173954][T12482] CPU: 0 UID: 0 PID: 12482 Comm: syz.1.11662 Tainted: G L syzkaller #0 PREEMPT(full) [ 2224.173985][T12482] Tainted: [L]=SOFTLOCKUP [ 2224.173996][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2224.174007][T12482] Call Trace: [ 2224.174016][T12482] [ 2224.174025][T12482] dump_stack_lvl+0xe8/0x150 [ 2224.174059][T12482] should_fail_ex+0x410/0x560 [ 2224.174097][T12482] should_failslab+0xa8/0x100 [ 2224.174121][T12482] ? __mpol_dup+0x79/0x330 [ 2224.174145][T12482] kmem_cache_alloc_noprof+0xa1/0x600 [ 2224.174174][T12482] ? mas_preallocate+0x55e/0x840 [ 2224.174204][T12482] ? rcu_is_watching+0x16/0xb0 [ 2224.174226][T12482] ? __mpol_dup+0x79/0x330 [ 2224.174256][T12482] __mpol_dup+0x79/0x330 [ 2224.174288][T12482] ? __pfx___mpol_dup+0x10/0x10 [ 2224.174322][T12482] vma_dup_policy+0x45/0xa0 [ 2224.174348][T12482] __split_vma+0x32e/0xa60 [ 2224.174377][T12482] ? mas_next_slot+0xc91/0xd70 [ 2224.174398][T12482] ? __pfx___split_vma+0x10/0x10 [ 2224.174436][T12482] ? mas_find+0x6d6/0xcb0 [ 2224.174459][T12482] vms_gather_munmap_vmas+0x4e3/0x1370 [ 2224.174498][T12482] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 2224.174523][T12482] ? up_write+0x19d/0x4a0 [ 2224.174554][T12482] ? __lock_acquire+0x747/0x2de0 [ 2224.174581][T12482] do_vmi_align_munmap+0x2b4/0x4b0 [ 2224.174602][T12482] ? __lock_acquire+0x747/0x2de0 [ 2224.174639][T12482] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 2224.174681][T12482] ? mas_walk+0x37e/0x490 [ 2224.174710][T12482] ? mas_find+0x642/0xcb0 [ 2224.174734][T12482] do_vmi_munmap+0x252/0x2d0 [ 2224.174762][T12482] do_munmap+0xf5/0x160 [ 2224.174792][T12482] ? __pfx_do_munmap+0x10/0x10 [ 2224.174830][T12482] ? may_expand_vm+0x15b/0x390 [ 2224.174862][T12482] mremap_to+0x33a/0x8d0 [ 2224.174890][T12482] ? __pfx_mremap_to+0x10/0x10 [ 2224.174912][T12482] ? __pfx_mtree_load+0x10/0x10 [ 2224.174932][T12482] ? __pfx_check_prep_vma+0x10/0x10 [ 2224.174971][T12482] __se_sys_mremap+0xf59/0x12d0 [ 2224.175005][T12482] ? __pfx___se_sys_mremap+0x10/0x10 [ 2224.175032][T12482] ? __mutex_unlock_slowpath+0x731/0x900 [ 2224.175055][T12482] ? __fget_files+0x2a/0x420 [ 2224.175083][T12482] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2224.175105][T12482] ? __fget_files+0x3a2/0x420 [ 2224.175150][T12482] ? __ia32_sys_mremap+0x20/0xc0 [ 2224.175176][T12482] __do_fast_syscall_32+0x27a/0x6a0 [ 2224.175199][T12482] ? do_fast_syscall_32+0x33/0x70 [ 2224.175219][T12482] ? asm_int80_emulation+0x1a/0x20 [ 2224.175238][T12482] ? do_int80_emulation+0x299/0x500 [ 2224.175257][T12482] ? trace_irq_disable+0x3b/0x140 [ 2224.175287][T12482] do_fast_syscall_32+0x33/0x70 [ 2224.175308][T12482] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2224.175332][T12482] RIP: 0023:0xf6fcf0ec [ 2224.175351][T12482] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2224.175369][T12482] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 2224.175390][T12482] RAX: ffffffffffffffda RBX: 000000008054e000 RCX: 0000000000001000 [ 2224.175404][T12482] RDX: 0000000000003000 RSI: 0000000000000003 RDI: 000000008022c000 [ 2224.175417][T12482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2224.175429][T12482] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2224.175441][T12482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2224.175470][T12482] [ 2224.548461][T12489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.557301][T12489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.780818][T12444] lo: left allmulticast mode [ 2224.921844][T26300] usb 4-1: USB disconnect, device number 111 [ 2225.418041][T12503] netlink: 'syz.5.11666': attribute type 1 has an invalid length. [ 2225.418136][T12503] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11666'. [ 2225.461394][ T4394] IPVS: stop unused estimator thread 0... [ 2226.147993][T29971] lwtunnel_output(): recursion limit reached on datapath [ 2226.795429][ T2704] lwtunnel_output(): recursion limit reached on datapath [ 2226.880297][T12539] syzkaller0: entered promiscuous mode [ 2226.906018][T12539] syzkaller0: entered allmulticast mode [ 2226.960469][T12540] FAULT_INJECTION: forcing a failure. [ 2226.960469][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.960512][T12540] CPU: 1 UID: 0 PID: 12540 Comm: syz.5.11674 Tainted: G L syzkaller #0 PREEMPT(full) [ 2226.960540][T12540] Tainted: [L]=SOFTLOCKUP [ 2226.960548][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2226.960558][T12540] Call Trace: [ 2226.960565][T12540] [ 2226.960573][T12540] dump_stack_lvl+0xe8/0x150 [ 2226.960613][T12540] should_fail_ex+0x410/0x560 [ 2226.960648][T12540] ? __alloc_skb+0x1db/0x7a0 [ 2226.960668][T12540] should_failslab+0xa8/0x100 [ 2226.960692][T12540] ? __alloc_skb+0x1db/0x7a0 [ 2226.960709][T12540] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2226.960741][T12540] ? do_raw_write_lock+0x11d/0x260 [ 2226.960765][T12540] ? __alloc_skb+0x1db/0x7a0 [ 2226.960791][T12540] __alloc_skb+0x1db/0x7a0 [ 2226.960814][T12540] tipc_buf_acquire+0x2b/0xe0 [ 2226.960843][T12540] tipc_named_withdraw+0x1e6/0x760 [ 2226.960867][T12540] tipc_nametbl_withdraw+0x108/0x2d0 [ 2226.960895][T12540] tipc_sk_withdraw+0x305/0x640 [ 2226.960927][T12540] ? __pfx_tipc_sk_withdraw+0x10/0x10 [ 2226.960956][T12540] ? __local_bh_enable_ip+0xd6/0x140 [ 2226.960985][T12540] tipc_sk_bind+0x245/0x300 [ 2226.961012][T12540] __sys_bind+0x2e3/0x410 [ 2226.961039][T12540] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2226.961061][T12540] ? __pfx___sys_bind+0x10/0x10 [ 2226.961110][T12540] __ia32_sys_bind+0x7a/0x90 [ 2226.961129][T12540] __do_fast_syscall_32+0x27a/0x6a0 [ 2226.961150][T12540] ? do_fast_syscall_32+0x33/0x70 [ 2226.961170][T12540] ? asm_int80_emulation+0x1a/0x20 [ 2226.961189][T12540] ? do_int80_emulation+0x299/0x500 [ 2226.961213][T12540] do_fast_syscall_32+0x33/0x70 [ 2226.961233][T12540] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2226.961256][T12540] RIP: 0023:0xf704f0ec [ 2226.961273][T12540] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2226.961289][T12540] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 2226.961310][T12540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 2226.961323][T12540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2226.961334][T12540] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2226.961346][T12540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2226.961358][T12540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2226.961387][T12540] [ 2226.961513][T12540] tipc: Withdrawal distribution failure [ 2227.322270][T12547] FAULT_INJECTION: forcing a failure. [ 2227.322270][T12547] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2227.322320][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.1.11677 Tainted: G L syzkaller #0 PREEMPT(full) [ 2227.322348][T12547] Tainted: [L]=SOFTLOCKUP [ 2227.322356][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2227.322368][T12547] Call Trace: [ 2227.322376][T12547] [ 2227.322385][T12547] dump_stack_lvl+0xe8/0x150 [ 2227.322418][T12547] should_fail_ex+0x410/0x560 [ 2227.322459][T12547] prepare_alloc_pages+0x223/0x600 [ 2227.322488][T12547] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2227.322515][T12547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2227.322537][T12547] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 2227.322561][T12547] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2227.322587][T12547] ? __pfx_policy_nodemask+0x10/0x10 [ 2227.322610][T12547] ? __get_vm_area_node+0x155/0x2f0 [ 2227.322636][T12547] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 2227.322664][T12547] ? __vmalloc_noprof+0xd2/0x120 [ 2227.322694][T12547] __alloc_pages_noprof+0x10/0x100 [ 2227.322716][T12547] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 2227.322746][T12547] ? alloc_pages_noprof+0x140/0x2b0 [ 2227.322776][T12547] __kasan_populate_vmalloc+0xb7/0x1c0 [ 2227.322802][T12547] alloc_vmap_area+0xd1a/0x1420 [ 2227.322845][T12547] ? __pfx_alloc_vmap_area+0x10/0x10 [ 2227.322869][T12547] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 2227.322891][T12547] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 2227.322911][T12547] ? __get_vm_area_node+0x155/0x2f0 [ 2227.322943][T12547] __get_vm_area_node+0x200/0x2f0 [ 2227.322978][T12547] __vmalloc_node_range_noprof+0x343/0x1540 [ 2227.323007][T12547] ? bpf_check+0x10ee/0x2e10 [ 2227.323032][T12547] ? rcu_is_watching+0x16/0xb0 [ 2227.323068][T12547] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2227.323096][T12547] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2227.323127][T12547] ? bpf_check+0x106b/0x2e10 [ 2227.323150][T12547] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2227.323185][T12547] ? security_capable+0xb9/0x2c0 [ 2227.323208][T12547] ? bpf_check+0x10ee/0x2e10 [ 2227.323228][T12547] __vmalloc_noprof+0xd2/0x120 [ 2227.323255][T12547] ? bpf_check+0x10ee/0x2e10 [ 2227.323278][T12547] bpf_check+0x10ee/0x2e10 [ 2227.323309][T12547] ? ktime_get_with_offset+0x93/0x2d0 [ 2227.323334][T12547] ? __pfx_bpf_check+0x10/0x10 [ 2227.323358][T12547] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2227.323388][T12547] bpf_prog_load+0x14d6/0x1c20 [ 2227.323422][T12547] ? __pfx_bpf_prog_load+0x10/0x10 [ 2227.323468][T12547] __sys_bpf+0xd0d/0xd90 [ 2227.323498][T12547] ? __pfx___sys_bpf+0x10/0x10 [ 2227.323522][T12547] ? ksys_write+0x1e6/0x270 [ 2227.323555][T12547] ? __mutex_unlock_slowpath+0x731/0x900 [ 2227.323595][T12547] ? fput+0xa0/0xd0 [ 2227.323619][T12547] ? ksys_write+0x242/0x270 [ 2227.323651][T12547] __ia32_sys_bpf+0xba/0xd0 [ 2227.323674][T12547] __do_fast_syscall_32+0x27a/0x6a0 [ 2227.323697][T12547] ? do_fast_syscall_32+0x33/0x70 [ 2227.323718][T12547] ? asm_int80_emulation+0x1a/0x20 [ 2227.323737][T12547] ? do_int80_emulation+0x299/0x500 [ 2227.323756][T12547] ? trace_irq_disable+0x3b/0x140 [ 2227.323780][T12547] do_fast_syscall_32+0x33/0x70 [ 2227.323800][T12547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2227.323823][T12547] RIP: 0023:0xf6fcf0ec [ 2227.323841][T12547] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2227.323858][T12547] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 2227.323879][T12547] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 2227.323894][T12547] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 2227.323907][T12547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2227.323920][T12547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2227.323933][T12547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2227.323963][T12547] [ 2227.477639][T12547] syz.1.11677: vmalloc error: size 408, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2227.477746][T12547] CPU: 1 UID: 0 PID: 12547 Comm: syz.1.11677 Tainted: G L syzkaller #0 PREEMPT(full) [ 2227.477773][T12547] Tainted: [L]=SOFTLOCKUP [ 2227.477780][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2227.477791][T12547] Call Trace: [ 2227.477799][T12547] [ 2227.477807][T12547] dump_stack_lvl+0xe8/0x150 [ 2227.477840][T12547] warn_alloc+0x24d/0x270 [ 2227.477861][T12547] ? lockdep_hardirqs_on+0x7b/0x110 [ 2227.477883][T12547] ? __pfx_warn_alloc+0x10/0x10 [ 2227.477900][T12547] ? kfree+0x1c5/0x650 [ 2227.477932][T12547] ? __get_vm_area_node+0x219/0x2f0 [ 2227.477966][T12547] __vmalloc_node_range_noprof+0x36b/0x1540 [ 2227.477996][T12547] ? rcu_is_watching+0x16/0xb0 [ 2227.478027][T12547] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2227.478053][T12547] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 2227.478084][T12547] ? bpf_check+0x106b/0x2e10 [ 2227.478107][T12547] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2227.478139][T12547] ? security_capable+0xb9/0x2c0 [ 2227.478162][T12547] ? bpf_check+0x10ee/0x2e10 [ 2227.478181][T12547] __vmalloc_noprof+0xd2/0x120 [ 2227.478209][T12547] ? bpf_check+0x10ee/0x2e10 [ 2227.478232][T12547] bpf_check+0x10ee/0x2e10 [ 2227.478262][T12547] ? ktime_get_with_offset+0x93/0x2d0 [ 2227.478287][T12547] ? __pfx_bpf_check+0x10/0x10 [ 2227.478312][T12547] ? bpf_obj_name_cpy+0x194/0x1e0 [ 2227.478339][T12547] bpf_prog_load+0x14d6/0x1c20 [ 2227.478373][T12547] ? __pfx_bpf_prog_load+0x10/0x10 [ 2227.478419][T12547] __sys_bpf+0xd0d/0xd90 [ 2227.478450][T12547] ? __pfx___sys_bpf+0x10/0x10 [ 2227.478474][T12547] ? ksys_write+0x1e6/0x270 [ 2227.478506][T12547] ? __mutex_unlock_slowpath+0x731/0x900 [ 2227.478542][T12547] ? fput+0xa0/0xd0 [ 2227.478575][T12547] ? ksys_write+0x242/0x270 [ 2227.478606][T12547] __ia32_sys_bpf+0xba/0xd0 [ 2227.478627][T12547] __do_fast_syscall_32+0x27a/0x6a0 [ 2227.478647][T12547] ? do_fast_syscall_32+0x33/0x70 [ 2227.478666][T12547] ? asm_int80_emulation+0x1a/0x20 [ 2227.478683][T12547] ? do_int80_emulation+0x299/0x500 [ 2227.478702][T12547] ? trace_irq_disable+0x3b/0x140 [ 2227.478724][T12547] do_fast_syscall_32+0x33/0x70 [ 2227.478743][T12547] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2227.478765][T12547] RIP: 0023:0xf6fcf0ec [ 2227.478781][T12547] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2227.478798][T12547] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 2227.478817][T12547] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008000e000 [ 2227.478830][T12547] RDX: 000000000000002f RSI: 0000000000000000 RDI: 0000000000000000 [ 2227.478842][T12547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2227.478853][T12547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2227.478864][T12547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2227.478891][T12547] [ 2227.479040][T12547] Mem-Info: [ 2227.479049][T12547] active_anon:8852 inactive_anon:0 isolated_anon:0 [ 2227.479049][T12547] active_file:12931 inactive_file:45731 isolated_file:0 [ 2227.479049][T12547] unevictable:0 dirty:209 writeback:0 [ 2227.479049][T12547] slab_reclaimable:8098 slab_unreclaimable:128159 [ 2227.479049][T12547] mapped:32092 shmem:528 pagetables:2495 [ 2227.479049][T12547] sec_pagetables:0 bounce:0 [ 2227.479049][T12547] kernel_misc_reclaimable:0 [ 2227.479049][T12547] free:1249656 free_pcp:13309 free_cma:0 [ 2227.479136][T12547] Node 0 active_anon:35408kB inactive_anon:0kB active_file:51724kB inactive_file:182604kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128248kB dirty:832kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19212kB pagetables:9852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2227.479210][T12547] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2227.479281][T12547] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2227.479372][T12547] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 2227.479438][T12547] Node 0 DMA32 free:1053416kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35408kB inactive_anon:0kB active_file:51724kB inactive_file:182604kB unevictable:0kB writepending:832kB zspages:0kB present:3129332kB managed:2546668kB mlocked:0kB bounce:0kB free_pcp:53236kB local_pcp:21584kB free_cma:0kB [ 2227.479529][T12547] lowmem_reserve[]: 0 0 0 0 0 [ 2227.503713][T12547] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2227.504467][T12547] lowmem_reserve[]: 0 0 0 0 0 [ 2227.504536][T12547] Node 1 Normal free:3929848kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2227.504612][T12547] lowmem_reserve[]: 0 0 0 0 0 [ 2227.504677][T12547] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2227.504896][T12547] Node 0 DMA32: 2244*4kB (UME) 1965*8kB (UME) 1357*16kB (UME) 1011*32kB (UME) 494*64kB (UME) 106*128kB (UME) 71*256kB (UME) 48*512kB (UME) 40*1024kB (UME) 11*2048kB (UM) 201*4096kB (UM) = 1053480kB [ 2227.505200][T12547] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2227.505388][T12547] Node 1 Normal: 2*4kB (UM) 2*8kB (U) 12*16kB (U) 9*32kB (UM) 14*64kB (UM) 7*128kB (UM) 4*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 956*4096kB (UM) = 3929848kB [ 2227.505687][T12547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2227.505718][T12547] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2227.505750][T12547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2227.519686][T12547] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2227.519736][T12547] 59186 total pagecache pages [ 2227.519744][T12547] 0 pages in swap cache [ 2227.519752][T12547] Free swap = 124996kB [ 2227.519775][T12547] Total swap = 124996kB [ 2227.519784][T12547] 2097051 pages RAM [ 2227.519807][T12547] 0 pages HighMem/MovableOnly [ 2227.519814][T12547] 428768 pages reserved [ 2227.519837][T12547] 0 pages cma reserved [ 2228.018362][T12560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2228.025498][T12560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2228.125252][T12554] FAULT_INJECTION: forcing a failure. [ 2228.125252][T12554] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.125316][T12554] CPU: 1 UID: 0 PID: 12554 Comm: syz.6.11678 Tainted: G L syzkaller #0 PREEMPT(full) [ 2228.125344][T12554] Tainted: [L]=SOFTLOCKUP [ 2228.125352][T12554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2228.125364][T12554] Call Trace: [ 2228.125371][T12554] [ 2228.125380][T12554] dump_stack_lvl+0xe8/0x150 [ 2228.125412][T12554] should_fail_ex+0x410/0x560 [ 2228.125446][T12554] ? __alloc_skb+0x1db/0x7a0 [ 2228.125465][T12554] should_failslab+0xa8/0x100 [ 2228.125490][T12554] ? __alloc_skb+0x1db/0x7a0 [ 2228.125508][T12554] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2228.125536][T12554] ? __alloc_skb+0x18d/0x7a0 [ 2228.125556][T12554] ? __alloc_skb+0x1db/0x7a0 [ 2228.125581][T12554] __alloc_skb+0x1db/0x7a0 [ 2228.125604][T12554] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 2228.125633][T12554] ? irqentry_exit+0x218/0x910 [ 2228.125651][T12554] ? trace_irq_disable+0x3b/0x140 [ 2228.125675][T12554] rtmsg_ifinfo+0x8c/0x1a0 [ 2228.125709][T12554] __dev_notify_flags+0x257/0x510 [ 2228.125736][T12554] ? __pfx___dev_notify_flags+0x10/0x10 [ 2228.125756][T12554] ? __dev_change_flags+0x5f1/0x820 [ 2228.125782][T12554] ? __pfx___dev_change_flags+0x10/0x10 [ 2228.125813][T12554] netif_change_flags+0xde/0x1b0 [ 2228.125839][T12554] do_setlink+0xdd6/0x4670 [ 2228.125865][T12554] ? irqentry_exit+0x218/0x910 [ 2228.125882][T12554] ? lockdep_hardirqs_on+0x7b/0x110 [ 2228.125901][T12554] ? trace_irq_disable+0x3b/0x140 [ 2228.125924][T12554] ? __pfx_do_setlink+0x10/0x10 [ 2228.125957][T12554] ? queue_work_on+0x162/0x1d0 [ 2228.125984][T12554] ? __local_bh_enable_ip+0xd6/0x140 [ 2228.126019][T12554] ? switchdev_deferred_enqueue+0x1fe/0x240 [ 2228.126042][T12554] ? br_switchdev_set_port_flag+0x333/0x3b0 [ 2228.126073][T12554] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 2228.126110][T12554] ? __mutex_lock+0x30b/0x1550 [ 2228.126132][T12554] ? br_port_flags_change+0x19f/0x1f0 [ 2228.126160][T12554] ? br_setport+0x1388/0x17d0 [ 2228.126177][T12554] ? rtnl_newlink+0xc10/0x1c30 [ 2228.126202][T12554] ? __pfx_br_setport+0x10/0x10 [ 2228.126230][T12554] ? lockdep_rtnl_is_held+0x26/0x40 [ 2228.126254][T12554] ? br_port_slave_changelink+0xa3/0x130 [ 2228.126276][T12554] rtnl_newlink+0x15a3/0x1c30 [ 2228.126298][T12554] ? rtnl_newlink+0x8b1/0x1c30 [ 2228.126326][T12554] ? __pfx_rtnl_newlink+0x10/0x10 [ 2228.126344][T12554] ? __do_fast_syscall_32+0x27a/0x6a0 [ 2228.126363][T12554] ? do_fast_syscall_32+0x33/0x70 [ 2228.126381][T12554] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2228.126442][T12554] ? kasan_quarantine_put+0xbb/0x1f0 [ 2228.126462][T12554] ? lockdep_hardirqs_on+0x7b/0x110 [ 2228.126483][T12554] ? nlmon_xmit+0xb0/0x100 [ 2228.126501][T12554] ? kmem_cache_free+0x182/0x650 [ 2228.126531][T12554] ? __lock_acquire+0x747/0x2de0 [ 2228.126555][T12554] ? trace_irq_disable+0x3b/0x140 [ 2228.126591][T12554] ? lock_acquire+0x115/0x350 [ 2228.126624][T12554] ? __pfx_rtnl_newlink+0x10/0x10 [ 2228.126643][T12554] rtnetlink_rcv_msg+0x802/0xc00 [ 2228.126668][T12554] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2228.126687][T12554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2228.126706][T12554] ? ref_tracker_free+0x689/0x830 [ 2228.126730][T12554] ? __pfx_ref_tracker_free+0x10/0x10 [ 2228.126761][T12554] netlink_rcv_skb+0x226/0x4a0 [ 2228.126786][T12554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2228.126809][T12554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2228.126846][T12554] ? netlink_deliver_tap+0x2e/0x1b0 [ 2228.126870][T12554] ? netlink_deliver_tap+0x2e/0x1b0 [ 2228.126900][T12554] netlink_unicast+0x7bd/0x940 [ 2228.126934][T12554] netlink_sendmsg+0x813/0xb40 [ 2228.126968][T12554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2228.127005][T12554] ? apparmor_socket_sendmsg+0x98/0x360 [ 2228.127028][T12554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2228.127052][T12554] sock_sendmsg_nosec+0x13a/0x180 [ 2228.127081][T12554] ____sys_sendmsg+0x54e/0x850 [ 2228.127110][T12554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2228.127148][T12554] ___sys_sendmsg+0x2a5/0x360 [ 2228.127169][T12554] ? __lock_acquire+0x747/0x2de0 [ 2228.127192][T12554] ? __pfx____sys_sendmsg+0x10/0x10 [ 2228.127214][T12554] ? get_pid_task+0x20/0x1f0 [ 2228.127232][T12554] ? get_pid_task+0x20/0x1f0 [ 2228.127248][T12554] ? get_pid_task+0x20/0x1f0 [ 2228.127294][T12554] ? __fget_files+0x2a/0x420 [ 2228.127319][T12554] ? __fget_files+0x3a2/0x420 [ 2228.127354][T12554] __sys_sendmsg+0x177/0x240 [ 2228.127378][T12554] ? __pfx___sys_sendmsg+0x10/0x10 [ 2228.127419][T12554] __do_fast_syscall_32+0x27a/0x6a0 [ 2228.127440][T12554] ? do_fast_syscall_32+0x33/0x70 [ 2228.127459][T12554] ? asm_int80_emulation+0x1a/0x20 [ 2228.127477][T12554] ? do_int80_emulation+0x299/0x500 [ 2228.127500][T12554] do_fast_syscall_32+0x33/0x70 [ 2228.127521][T12554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2228.127544][T12554] RIP: 0023:0xf6fdf0ec [ 2228.127561][T12554] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2228.127577][T12554] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2228.127598][T12554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 2228.127612][T12554] RDX: 00000000000008d6 RSI: 0000000000000000 RDI: 0000000000000000 [ 2228.127624][T12554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2228.127636][T12554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2228.127647][T12554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2228.127675][T12554] [ 2230.021569][T12583] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2230.028537][T12583] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2230.103719][T12583] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2230.111548][T12583] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2230.448778][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11690'. [ 2230.514857][T12593] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11690'. [ 2231.185688][T14738] lwtunnel_output(): recursion limit reached on datapath [ 2231.710761][T12618] FAULT_INJECTION: forcing a failure. [ 2231.710761][T12618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2231.710820][T12618] CPU: 0 UID: 0 PID: 12618 Comm: syz.3.11697 Tainted: G L syzkaller #0 PREEMPT(full) [ 2231.710847][T12618] Tainted: [L]=SOFTLOCKUP [ 2231.710855][T12618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2231.710867][T12618] Call Trace: [ 2231.710874][T12618] [ 2231.710882][T12618] dump_stack_lvl+0xe8/0x150 [ 2231.710910][T12618] should_fail_ex+0x410/0x560 [ 2231.710945][T12618] _copy_from_user+0x2d/0xb0 [ 2231.710970][T12618] memdup_user+0x5e/0xd0 [ 2231.710992][T12618] sctp_getsockopt_connectx3+0x1f7/0x360 [ 2231.711025][T12618] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 2231.711060][T12618] ? __local_bh_enable_ip+0xd6/0x140 [ 2231.711090][T12618] sctp_getsockopt+0x984/0xb90 [ 2231.711120][T12618] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2231.711150][T12618] do_sock_getsockopt+0x51d/0x7e0 [ 2231.711177][T12618] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2231.711215][T12618] ? __fget_files+0x2a/0x420 [ 2231.711240][T12618] ? __fget_files+0x3a2/0x420 [ 2231.711271][T12618] ? __fget_files+0x2a/0x420 [ 2231.711304][T12618] __ia32_sys_getsockopt+0x1a4/0x240 [ 2231.711335][T12618] __do_fast_syscall_32+0x27a/0x6a0 [ 2231.711357][T12618] ? do_fast_syscall_32+0x33/0x70 [ 2231.711376][T12618] ? asm_int80_emulation+0x1a/0x20 [ 2231.711395][T12618] ? do_int80_emulation+0x299/0x500 [ 2231.711414][T12618] ? trace_irq_disable+0x3b/0x140 [ 2231.711438][T12618] do_fast_syscall_32+0x33/0x70 [ 2231.711459][T12618] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2231.711481][T12618] RIP: 0023:0xf708f0ec [ 2231.711499][T12618] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2231.711516][T12618] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 2231.711536][T12618] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 2231.711550][T12618] RDX: 000000000000006f RSI: 0000000080000280 RDI: 0000000080000040 [ 2231.711562][T12618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2231.711574][T12618] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2231.711586][T12618] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2231.711614][T12618] [ 2231.921413][T12620] netlink: 'syz.3.11698': attribute type 1 has an invalid length. [ 2231.921433][T12620] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11698'. [ 2232.332730][T12624] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11699'. [ 2232.545458][T14738] lwtunnel_output(): recursion limit reached on datapath [ 2233.781773][T12637] netlink: 'syz.6.11702': attribute type 1 has an invalid length. [ 2233.781861][T12637] netlink: 'syz.6.11702': attribute type 6 has an invalid length. [ 2233.781894][T12637] netlink: 'syz.6.11702': attribute type 3 has an invalid length. [ 2234.062658][T12637] bond1: entered promiscuous mode [ 2234.077083][T12637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2234.869334][T12655] netlink: 112 bytes leftover after parsing attributes in process `syz.5.11708'. [ 2234.909689][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11708'. [ 2235.391737][T12663] FAULT_INJECTION: forcing a failure. [ 2235.391737][T12663] name failslab, interval 1, probability 0, space 0, times 0 [ 2235.391841][T12663] CPU: 0 UID: 0 PID: 12663 Comm: syz.5.11710 Tainted: G L syzkaller #0 PREEMPT(full) [ 2235.391867][T12663] Tainted: [L]=SOFTLOCKUP [ 2235.391875][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2235.391885][T12663] Call Trace: [ 2235.391893][T12663] [ 2235.391901][T12663] dump_stack_lvl+0xe8/0x150 [ 2235.391934][T12663] should_fail_ex+0x410/0x560 [ 2235.391970][T12663] should_failslab+0xa8/0x100 [ 2235.391994][T12663] __kmalloc_noprof+0xfe/0x720 [ 2235.392021][T12663] ? tomoyo_encode+0x2ad/0x570 [ 2235.392044][T12663] ? tomoyo_encode+0x2ad/0x570 [ 2235.392067][T12663] ? __get_fs_type+0x21/0x280 [ 2235.392088][T12663] tomoyo_encode+0x2ad/0x570 [ 2235.392117][T12663] tomoyo_mount_permission+0x50d/0x9e0 [ 2235.392139][T12663] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 2235.392166][T12663] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 2235.392186][T12663] ? kasan_save_track+0x4f/0x80 [ 2235.392251][T12663] ? kasan_quarantine_put+0xbb/0x1f0 [ 2235.392273][T12663] security_sb_mount+0xe4/0x320 [ 2235.392299][T12663] path_mount+0xbc/0x1050 [ 2235.392328][T12663] ? user_path_at+0xd4/0x160 [ 2235.392357][T12663] __se_sys_mount+0x31d/0x420 [ 2235.392388][T12663] ? __pfx___se_sys_mount+0x10/0x10 [ 2235.392418][T12663] ? __ia32_sys_mount+0x20/0xc0 [ 2235.392445][T12663] __do_fast_syscall_32+0x27a/0x6a0 [ 2235.392468][T12663] ? do_fast_syscall_32+0x33/0x70 [ 2235.392487][T12663] ? asm_int80_emulation+0x1a/0x20 [ 2235.392506][T12663] ? do_int80_emulation+0x299/0x500 [ 2235.392529][T12663] do_fast_syscall_32+0x33/0x70 [ 2235.392550][T12663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2235.392574][T12663] RIP: 0023:0xf704f0ec [ 2235.392591][T12663] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2235.392607][T12663] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 2235.392629][T12663] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 2235.392643][T12663] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000080000080 [ 2235.392656][T12663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2235.392668][T12663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2235.392679][T12663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2235.392708][T12663] [ 2236.398103][T14738] lwtunnel_output(): recursion limit reached on datapath [ 2237.135768][T12681] input input182: cannot allocate more than FF_MAX_EFFECTS effects [ 2237.378238][T12684] FAULT_INJECTION: forcing a failure. [ 2237.378238][T12684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2237.378338][T12684] CPU: 0 UID: 0 PID: 12684 Comm: syz.5.11716 Tainted: G L syzkaller #0 PREEMPT(full) [ 2237.378368][T12684] Tainted: [L]=SOFTLOCKUP [ 2237.378375][T12684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2237.378385][T12684] Call Trace: [ 2237.378392][T12684] [ 2237.378399][T12684] dump_stack_lvl+0xe8/0x150 [ 2237.378429][T12684] should_fail_ex+0x410/0x560 [ 2237.378465][T12684] _copy_from_user+0x2d/0xb0 [ 2237.378490][T12684] __sys_sendto+0x2a9/0x5a0 [ 2237.378510][T12684] ? get_pid_task+0x20/0x1f0 [ 2237.378532][T12684] ? __pfx___sys_sendto+0x10/0x10 [ 2237.378583][T12684] __ia32_compat_sys_socketcall+0x44f/0xa50 [ 2237.378611][T12684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2237.378632][T12684] ? __fget_files+0x3a2/0x420 [ 2237.378662][T12684] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 2237.378694][T12684] ? ksys_write+0x242/0x270 [ 2237.378723][T12684] ? __pfx_ksys_write+0x10/0x10 [ 2237.378754][T12684] ? asm_int80_emulation+0x1a/0x20 [ 2237.378778][T12684] do_int80_emulation+0x198/0x500 [ 2237.378799][T12684] ? asm_int80_emulation+0x1a/0x20 [ 2237.378816][T12684] ? clear_bhb_loop+0x70/0xc0 [ 2237.378836][T12684] ? clear_bhb_loop+0x70/0xc0 [ 2237.378859][T12684] asm_int80_emulation+0x1a/0x20 [ 2237.378885][T12684] RIP: 0023:0xf71875ab [ 2237.378903][T12684] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 2237.378919][T12684] RSP: 002b:00000000f543c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 2237.378940][T12684] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f543c3f4 [ 2237.378954][T12684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2237.378966][T12684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2237.378977][T12684] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2237.378989][T12684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2237.379016][T12684] [ 2237.671839][T22537] lwtunnel_output(): recursion limit reached on datapath [ 2238.977590][T12701] FAULT_INJECTION: forcing a failure. [ 2238.977590][T12701] name failslab, interval 1, probability 0, space 0, times 0 [ 2238.977698][T12701] CPU: 0 UID: 0 PID: 12701 Comm: syz.5.11723 Tainted: G L syzkaller #0 PREEMPT(full) [ 2238.977725][T12701] Tainted: [L]=SOFTLOCKUP [ 2238.977732][T12701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2238.977743][T12701] Call Trace: [ 2238.977750][T12701] [ 2238.977756][T12701] dump_stack_lvl+0xe8/0x150 [ 2238.977784][T12701] should_fail_ex+0x410/0x560 [ 2238.977818][T12701] should_failslab+0xa8/0x100 [ 2238.977844][T12701] __kvmalloc_node_noprof+0x176/0x820 [ 2238.977864][T12701] ? __kmalloc_cache_noprof+0x321/0x600 [ 2238.977883][T12701] ? __kmalloc_cache_noprof+0x14d/0x600 [ 2238.977900][T12701] ? percpu_ref_init+0xc5/0x350 [ 2238.977926][T12701] ? io_alloc_cache_init+0x42/0x140 [ 2238.977952][T12701] ? io_alloc_cache_init+0x42/0x140 [ 2238.977984][T12701] io_alloc_cache_init+0x42/0x140 [ 2238.978014][T12701] io_ring_ctx_alloc+0x508/0xb80 [ 2238.978050][T12701] io_uring_create+0x50/0x990 [ 2238.978081][T12701] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 2238.978172][T12701] ? __fget_files+0x2a/0x420 [ 2238.978200][T12701] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2238.978230][T12701] ? ksys_write+0x242/0x270 [ 2238.978275][T12701] __do_fast_syscall_32+0x27a/0x6a0 [ 2238.978298][T12701] ? do_fast_syscall_32+0x33/0x70 [ 2238.978317][T12701] ? asm_int80_emulation+0x1a/0x20 [ 2238.978334][T12701] ? do_int80_emulation+0x299/0x500 [ 2238.978358][T12701] do_fast_syscall_32+0x33/0x70 [ 2238.978379][T12701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2238.978402][T12701] RIP: 0023:0xf704f0ec [ 2238.978419][T12701] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2238.978435][T12701] RSP: 002b:00000000f543d43c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2238.978455][T12701] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 2238.978469][T12701] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2238.978481][T12701] RBP: 00000000f543d4fc R08: 0000000000000000 R09: 0000000000000000 [ 2238.978493][T12701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2238.978504][T12701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2238.978531][T12701] [ 2241.392924][T12743] FAULT_INJECTION: forcing a failure. [ 2241.392924][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2241.408334][T12743] CPU: 1 UID: 0 PID: 12743 Comm: syz.6.11735 Tainted: G L syzkaller #0 PREEMPT(full) [ 2241.408366][T12743] Tainted: [L]=SOFTLOCKUP [ 2241.408374][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2241.408386][T12743] Call Trace: [ 2241.408393][T12743] [ 2241.408408][T12743] dump_stack_lvl+0xe8/0x150 [ 2241.408473][T12743] should_fail_ex+0x410/0x560 [ 2241.408536][T12743] strncpy_from_user+0x36/0x2c0 [ 2241.408569][T12743] path_setxattrat+0x191/0x450 [ 2241.408599][T12743] ? __pfx_path_setxattrat+0x10/0x10 [ 2241.408647][T12743] ? do_fast_syscall_32+0x33/0x70 [ 2241.408673][T12743] __ia32_sys_fsetxattr+0xbc/0xe0 [ 2241.408704][T12743] __do_fast_syscall_32+0x27a/0x6a0 [ 2241.408725][T12743] ? do_fast_syscall_32+0x33/0x70 [ 2241.408745][T12743] ? asm_int80_emulation+0x1a/0x20 [ 2241.408763][T12743] ? do_int80_emulation+0x299/0x500 [ 2241.408788][T12743] do_fast_syscall_32+0x33/0x70 [ 2241.408809][T12743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2241.408833][T12743] RIP: 0023:0xf6fdf0ec [ 2241.408851][T12743] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2241.408867][T12743] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000e4 [ 2241.408888][T12743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2241.408903][T12743] RDX: 0000000080000000 RSI: 000000000000ff6c RDI: 0000000000000003 [ 2241.408915][T12743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2241.408927][T12743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2241.408940][T12743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2241.408968][T12743] [ 2242.158470][T14738] lwtunnel_output(): recursion limit reached on datapath [ 2242.377434][T12756] netlink: 112 bytes leftover after parsing attributes in process `syz.1.11739'. [ 2242.398931][T12756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11739'. [ 2242.585427][T12761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.586282][T12761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2243.428530][ T2704] lwtunnel_output(): recursion limit reached on datapath [ 2244.194057][T26300] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 2244.355872][T26300] usb 6-1: New USB device found, idVendor=046d, idProduct=00fe, bcdDevice= 0.00 [ 2244.368481][T26300] usb 6-1: too many endpoints for config 0 interface 0 altsetting 16: 250, using maximum allowed: 30 [ 2244.380808][T26300] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 250 [ 2244.380870][T26300] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2244.380940][T26300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.422020][T26300] usb 6-1: config 0 descriptor?? [ 2244.847639][T26300] usbhid 6-1:0.0: can't add hid device: -71 [ 2244.855113][T26300] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2244.892725][T26300] usb 6-1: USB disconnect, device number 43 [ 2245.035950][T12785] fuse: Unknown parameter 'goup_id' [ 2246.861181][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11755'. [ 2247.371609][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.377181][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.390469][T12823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2247.394670][T12823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2247.494443][ T6254] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2247.654989][ T6254] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2247.709997][ T6254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2247.710095][ T6254] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2247.710202][ T6254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.753263][ T6254] usb 6-1: config 0 descriptor?? [ 2247.907205][ T2704] lwtunnel_output(): recursion limit reached on datapath [ 2248.022529][ T6254] usbhid 6-1:0.0: can't add hid device: -71 [ 2248.031765][ T6254] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2248.050844][ T6254] usb 6-1: USB disconnect, device number 44 [ 2248.484528][ T6254] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2248.560623][T14738] lwtunnel_output(): recursion limit reached on datapath [ 2248.624400][ T6254] usb 6-1: device descriptor read/64, error -71 [ 2248.666962][T12836] netlink: 'syz.1.11761': attribute type 10 has an invalid length. [ 2248.802492][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11763'. [ 2248.810385][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11763'. [ 2248.813044][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11763'. [ 2248.894150][ T6254] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2249.035517][ T6254] usb 6-1: device descriptor read/64, error -71 [ 2249.145870][ T6254] usb usb6-port1: attempt power cycle [ 2249.486980][ T6254] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2249.515258][ T6254] usb 6-1: device descriptor read/8, error -71 [ 2249.756032][ T6254] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2249.785435][ T6254] usb 6-1: device descriptor read/8, error -71 [ 2249.894977][ T6254] usb usb6-port1: unable to enumerate USB device [ 2250.625228][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11769'. [ 2250.625330][T12859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11769'. [ 2250.625659][T12859] FAULT_INJECTION: forcing a failure. [ 2250.625659][T12859] name failslab, interval 1, probability 0, space 0, times 0 [ 2250.625706][T12859] CPU: 0 UID: 0 PID: 12859 Comm: syz.3.11769 Tainted: G L syzkaller #0 PREEMPT(full) [ 2250.625732][T12859] Tainted: [L]=SOFTLOCKUP [ 2250.625739][T12859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2250.625751][T12859] Call Trace: [ 2250.625759][T12859] [ 2250.625767][T12859] dump_stack_lvl+0xe8/0x150 [ 2250.625801][T12859] should_fail_ex+0x410/0x560 [ 2250.625835][T12859] should_failslab+0xa8/0x100 [ 2250.625861][T12859] __kmalloc_cache_noprof+0xa3/0x600 [ 2250.625880][T12859] ? rcu_is_watching+0x16/0xb0 [ 2250.625904][T12859] ? __hw_addr_create+0x62/0x240 [ 2250.625924][T12859] ? __hw_addr_create+0x62/0x240 [ 2250.625953][T12859] __hw_addr_create+0x62/0x240 [ 2250.625985][T12859] __hw_addr_add_ex+0x1ce/0x520 [ 2250.626015][T12859] dev_addr_init+0x15a/0x240 [ 2250.626040][T12859] ? __pfx_dev_addr_init+0x10/0x10 [ 2250.626067][T12859] ? __kvmalloc_node_noprof+0x345/0x820 [ 2250.626097][T12859] alloc_netdev_mqs+0x2b4/0x12a0 [ 2250.626120][T12859] ? __pfx_snprintf+0x10/0x10 [ 2250.626145][T12859] ? __pfx_vlan_setup+0x10/0x10 [ 2250.626178][T12859] rtnl_create_link+0x321/0xd70 [ 2250.626210][T12859] rtnl_newlink_create+0x258/0x7b0 [ 2250.626239][T12859] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2250.626266][T12859] ? __pfx___mutex_lock+0x10/0x10 [ 2250.626296][T12859] ? ns_capable+0x89/0xe0 [ 2250.626324][T12859] rtnl_newlink+0x166d/0x1c30 [ 2250.626359][T12859] ? __pfx_rtnl_newlink+0x10/0x10 [ 2250.626378][T12859] ? __do_fast_syscall_32+0x27a/0x6a0 [ 2250.626398][T12859] ? do_fast_syscall_32+0x33/0x70 [ 2250.626417][T12859] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2250.626473][T12859] ? kasan_quarantine_put+0xbb/0x1f0 [ 2250.626493][T12859] ? lockdep_hardirqs_on+0x7b/0x110 [ 2250.626515][T12859] ? nlmon_xmit+0xb0/0x100 [ 2250.626533][T12859] ? kmem_cache_free+0x182/0x650 [ 2250.626564][T12859] ? __lock_acquire+0x747/0x2de0 [ 2250.626593][T12859] ? __local_bh_enable_ip+0xd6/0x140 [ 2250.626619][T12859] ? lockdep_hardirqs_on+0x7b/0x110 [ 2250.626636][T12859] ? __dev_queue_xmit+0x29b/0x3820 [ 2250.626659][T12859] ? __local_bh_enable_ip+0xd6/0x140 [ 2250.626682][T12859] ? __dev_queue_xmit+0x29b/0x3820 [ 2250.626714][T12859] ? lock_acquire+0x115/0x350 [ 2250.626747][T12859] ? __pfx_rtnl_newlink+0x10/0x10 [ 2250.626767][T12859] rtnetlink_rcv_msg+0x802/0xc00 [ 2250.626791][T12859] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2250.626812][T12859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2250.626830][T12859] ? ref_tracker_free+0x689/0x830 [ 2250.626855][T12859] ? __pfx_ref_tracker_free+0x10/0x10 [ 2250.626886][T12859] netlink_rcv_skb+0x226/0x4a0 [ 2250.626913][T12859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2250.626935][T12859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2250.626979][T12859] ? netlink_deliver_tap+0x2e/0x1b0 [ 2250.627004][T12859] ? netlink_deliver_tap+0x2e/0x1b0 [ 2250.627034][T12859] netlink_unicast+0x7bd/0x940 [ 2250.627068][T12859] netlink_sendmsg+0x813/0xb40 [ 2250.627102][T12859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.627135][T12859] ? apparmor_socket_sendmsg+0x98/0x360 [ 2250.627158][T12859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2250.627182][T12859] sock_sendmsg_nosec+0x13a/0x180 [ 2250.627212][T12859] ____sys_sendmsg+0x54e/0x850 [ 2250.627240][T12859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2250.627279][T12859] ___sys_sendmsg+0x2a5/0x360 [ 2250.627300][T12859] ? __lock_acquire+0x747/0x2de0 [ 2250.627323][T12859] ? __pfx____sys_sendmsg+0x10/0x10 [ 2250.627349][T12859] ? __lock_acquire+0x747/0x2de0 [ 2250.627397][T12859] ? __fget_files+0x2a/0x420 [ 2250.627420][T12859] ? __fget_files+0x3a2/0x420 [ 2250.627456][T12859] __sys_sendmsg+0x177/0x240 [ 2250.627481][T12859] ? __pfx___sys_sendmsg+0x10/0x10 [ 2250.627511][T12859] ? lockdep_softirqs_on+0x11e/0x190 [ 2250.627538][T12859] __do_fast_syscall_32+0x27a/0x6a0 [ 2250.627560][T12859] ? do_fast_syscall_32+0x33/0x70 [ 2250.627580][T12859] ? irqentry_exit+0x10f/0x910 [ 2250.627602][T12859] do_fast_syscall_32+0x33/0x70 [ 2250.627622][T12859] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2250.627645][T12859] RIP: 0023:0xf708f0ec [ 2250.627663][T12859] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2250.627680][T12859] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2250.627701][T12859] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 2250.627715][T12859] RDX: 0000000008000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 2250.627727][T12859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2250.627739][T12859] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2250.627751][T12859] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2250.627781][T12859] [ 2251.581895][T12873] binder: 12872:12873 ioctl c0306201 800003c0 returned -14 [ 2252.808009][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 2252.808070][ T30] audit: type=1326 audit(1788832194.723:13726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2252.850619][ T30] audit: type=1326 audit(1788832194.763:13727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2252.906111][ T30] audit: type=1326 audit(1788832194.823:13728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2252.935021][ T30] audit: type=1326 audit(1788832194.853:13729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2252.963909][ T30] audit: type=1326 audit(1788832194.883:13730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2253.003539][ T30] audit: type=1326 audit(1788832194.913:13731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2253.074755][ T30] audit: type=1326 audit(1788832194.993:13732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2253.084389][ T30] audit: type=1326 audit(1788832194.993:13733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2253.084480][ T30] audit: type=1326 audit(1788832194.993:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2253.084554][ T30] audit: type=1326 audit(1788832194.993:13735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12881 comm="syz.1.11777" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x7ffc0000 [ 2253.205227][T12883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.206126][T12883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2253.675573][T12541] lwtunnel_output(): recursion limit reached on datapath [ 2253.748877][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11778'. [ 2253.845049][T12890] FAULT_INJECTION: forcing a failure. [ 2253.845049][T12890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2253.861436][T12890] CPU: 0 UID: 0 PID: 12890 Comm: syz.3.11778 Tainted: G L syzkaller #0 PREEMPT(full) [ 2253.861468][T12890] Tainted: [L]=SOFTLOCKUP [ 2253.861476][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2253.861489][T12890] Call Trace: [ 2253.861497][T12890] [ 2253.861506][T12890] dump_stack_lvl+0xe8/0x150 [ 2253.861540][T12890] should_fail_ex+0x410/0x560 [ 2253.861578][T12890] _copy_from_user+0x2d/0xb0 [ 2253.861603][T12890] __sys_sendto+0x2a9/0x5a0 [ 2253.861625][T12890] ? taprio_dequeue+0x26/0x540 [ 2253.861651][T12890] ? taprio_dequeue+0x26/0x540 [ 2253.861679][T12890] ? __pfx___sys_sendto+0x10/0x10 [ 2253.861712][T12890] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2253.861743][T12890] ? __irq_exit_rcu+0xcb/0x220 [ 2253.861779][T12890] ? lockdep_softirqs_on+0x11e/0x190 [ 2253.861801][T12890] __ia32_sys_sendto+0xdd/0x100 [ 2253.861827][T12890] __do_fast_syscall_32+0x27a/0x6a0 [ 2253.861850][T12890] ? do_fast_syscall_32+0x33/0x70 [ 2253.861871][T12890] ? irqentry_exit+0x10f/0x910 [ 2253.861894][T12890] do_fast_syscall_32+0x33/0x70 [ 2253.861916][T12890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2253.861941][T12890] RIP: 0023:0xf708f0ec [ 2253.861958][T12890] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2253.861975][T12890] RSP: 002b:00000000f53f950c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2253.861996][T12890] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000900 [ 2253.862010][T12890] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000080000a00 [ 2253.862022][T12890] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2253.862034][T12890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2253.862047][T12890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2253.862074][T12890] [ 2254.308334][T29970] lwtunnel_output(): recursion limit reached on datapath [ 2255.972111][T12910] mac80211_hwsim hwsim55 ..ãc¤±: renamed from wlan1 [ 2256.381997][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11783'. [ 2256.638217][T12883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.639240][T12883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2258.122031][T12944] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11793'. [ 2258.372050][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11794'. [ 2258.579318][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2258.580243][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2258.759869][T12954] batman_adv: batadv0: Adding interface: macvtap2 [ 2258.759942][T12954] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2258.760002][T12954] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 2258.822758][T12958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11796'. [ 2258.835575][T12958] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11796'. [ 2258.846526][T12958] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11796'. [ 2259.393237][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11799'. [ 2259.435694][ T2704] lwtunnel_output(): recursion limit reached on datapath [ 2259.446570][T29970] lwtunnel_output(): recursion limit reached on datapath [ 2259.575050][T12968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 2259.575074][T12968] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2259.575263][T12968] vhci_hcd vhci_hcd.0: Device attached [ 2259.750095][T12969] vhci_hcd: connection closed [ 2259.754440][ T2704] vhci_hcd vhci_hcd.3: stop threads [ 2259.754516][ T2704] vhci_hcd vhci_hcd.3: release socket [ 2259.756995][ T2704] vhci_hcd vhci_hcd.3: disconnect device [ 2259.767096][ T3843] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 2260.845386][T13000] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11808'. [ 2260.869646][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2260.870542][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.958739][ T3843] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2261.110855][ T3843] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2261.122983][ T3843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2261.123104][ T3843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.150668][ T3843] usb 4-1: config 0 descriptor?? [ 2261.382967][ T3843] usbhid 4-1:0.0: can't add hid device: -71 [ 2261.383204][ T3843] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2261.404889][ T3843] usb 4-1: USB disconnect, device number 112 [ 2261.966222][ T9906] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2262.129387][ T9906] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2262.131341][ T9906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2262.131417][ T9906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.142646][ T9906] usb 4-1: config 0 descriptor?? [ 2262.773098][T13004] IPVS: You probably need to specify IP address on multicast interface. [ 2262.780735][T13004] IPVS: Error connecting to the multicast addr [ 2262.864527][T13020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2262.878513][T13020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2262.995360][ T9906] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 2263.025387][ T9906] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input187 [ 2263.521667][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2263.556307][T13026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2263.581750][T13026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2263.584812][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2263.709075][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11807'. [ 2265.188623][ T4394] lwtunnel_output(): recursion limit reached on datapath [ 2265.188653][ T1349] lwtunnel_output(): recursion limit reached on datapath [ 2266.365431][ T3843] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2266.474548][T26300] usb 4-1: USB disconnect, device number 113 [ 2266.474550][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 2266.538422][ T3843] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2266.571483][ T3843] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2266.571648][ T3843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2266.571703][ T3843] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2266.596348][ T3843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2266.596389][ T3843] usb 6-1: Product: syz [ 2266.596421][ T3843] usb 6-1: Manufacturer: syz [ 2266.596452][ T3843] usb 6-1: SerialNumber: syz [ 2266.866011][ T3843] usb 6-1: Cannot retrieve CPort count: 0 [ 2266.866143][ T3843] usb 6-1: Cannot retrieve CPort count: -5 [ 2266.866198][ T3843] es2_ap_driver 6-1:1.0: probe with driver es2_ap_driver failed with error -5 [ 2267.111846][T13044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.129832][T13044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.188695][ T9906] usb 6-1: USB disconnect, device number 49 [ 2267.910858][ T30] kauditd_printk_skb: 167 callbacks suppressed [ 2267.910924][ T30] audit: type=1326 audit(1788832209.823:13903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.911038][ T30] audit: type=1326 audit(1788832209.823:13904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.945741][ T30] audit: type=1326 audit(1788832209.833:13905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.945837][ T30] audit: type=1326 audit(1788832209.833:13906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.945915][ T30] audit: type=1326 audit(1788832209.843:13907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.946002][ T30] audit: type=1326 audit(1788832209.843:13908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.946076][ T30] audit: type=1326 audit(1788832209.843:13909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.946166][ T30] audit: type=1326 audit(1788832209.843:13910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.946233][ T30] audit: type=1326 audit(1788832209.843:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2267.946309][ T30] audit: type=1326 audit(1788832209.853:13912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.3.11827" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708f0ec code=0x7ffc0000 [ 2268.283459][T13079] FAULT_INJECTION: forcing a failure. [ 2268.283459][T13079] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.299392][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.1.11829 Tainted: G L syzkaller #0 PREEMPT(full) [ 2268.299425][T13079] Tainted: [L]=SOFTLOCKUP [ 2268.299433][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2268.299445][T13079] Call Trace: [ 2268.299453][T13079] [ 2268.299462][T13079] dump_stack_lvl+0xe8/0x150 [ 2268.299497][T13079] should_fail_ex+0x410/0x560 [ 2268.299531][T13079] ? __alloc_skb+0x1db/0x7a0 [ 2268.299551][T13079] should_failslab+0xa8/0x100 [ 2268.299576][T13079] ? __alloc_skb+0x1db/0x7a0 [ 2268.299594][T13079] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2268.299623][T13079] ? __alloc_skb+0x18d/0x7a0 [ 2268.299643][T13079] ? __alloc_skb+0x1db/0x7a0 [ 2268.299669][T13079] __alloc_skb+0x1db/0x7a0 [ 2268.299693][T13079] netlink_sendmsg+0x5d4/0xb40 [ 2268.299728][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2268.299761][T13079] ? apparmor_socket_sendmsg+0x98/0x360 [ 2268.299792][T13079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2268.299817][T13079] sock_sendmsg_nosec+0x13a/0x180 [ 2268.299848][T13079] ____sys_sendmsg+0x54e/0x850 [ 2268.299877][T13079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2268.299916][T13079] ___sys_sendmsg+0x2a5/0x360 [ 2268.299939][T13079] ? __lock_acquire+0x747/0x2de0 [ 2268.299965][T13079] ? __pfx____sys_sendmsg+0x10/0x10 [ 2268.299988][T13079] ? get_pid_task+0x20/0x1f0 [ 2268.300007][T13079] ? get_pid_task+0x20/0x1f0 [ 2268.300025][T13079] ? get_pid_task+0x20/0x1f0 [ 2268.300072][T13079] ? __fget_files+0x2a/0x420 [ 2268.300098][T13079] ? __fget_files+0x3a2/0x420 [ 2268.300134][T13079] __sys_sendmsg+0x177/0x240 [ 2268.300160][T13079] ? __pfx___sys_sendmsg+0x10/0x10 [ 2268.300203][T13079] __do_fast_syscall_32+0x27a/0x6a0 [ 2268.300226][T13079] ? do_fast_syscall_32+0x33/0x70 [ 2268.300247][T13079] ? asm_int80_emulation+0x1a/0x20 [ 2268.300267][T13079] ? do_int80_emulation+0x299/0x500 [ 2268.300286][T13079] ? trace_irq_disable+0x3b/0x140 [ 2268.300310][T13079] do_fast_syscall_32+0x33/0x70 [ 2268.300332][T13079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2268.300356][T13079] RIP: 0023:0xf6fcf0ec [ 2268.300375][T13079] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2268.300392][T13079] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2268.300414][T13079] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2268.300429][T13079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2268.300440][T13079] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2268.300452][T13079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2268.300465][T13079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2268.300494][T13079] [ 2268.336608][T26300] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2268.496005][T26300] usb 4-1: Using ep0 maxpacket: 16 [ 2268.551777][T26300] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2268.551871][T26300] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 2268.577295][T26300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2268.577334][T26300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2268.622368][T26300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.622427][T26300] usb 4-1: Product: syz [ 2268.622459][T26300] usb 4-1: Manufacturer: syz [ 2268.622490][T26300] usb 4-1: SerialNumber: syz [ 2270.946954][T22537] lwtunnel_output(): recursion limit reached on datapath [ 2270.961353][T22537] lwtunnel_output(): recursion limit reached on datapath [ 2271.733325][T26300] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 2271.733490][T26300] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 2272.029000][T13125] mac80211_hwsim hwsim66 ..ãc¤±: renamed from wlan1 (while UP) [ 2272.236487][T26300] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2272.261227][T26300] usb 4-1: USB disconnect, device number 114 [ 2272.424780][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11842'. [ 2272.585898][T20274] udevd[20274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2273.474344][ T9906] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2273.634571][ T9906] usb 6-1: Using ep0 maxpacket: 16 [ 2273.650802][ T9906] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 2273.663441][ T9906] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2273.670938][ T9906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.683069][ T9906] usb 6-1: config 0 descriptor?? [ 2274.124542][T13148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2274.138012][T13148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2274.253480][ T9906] usbhid 6-1:0.0: can't add hid device: -71 [ 2274.260792][ T9906] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2274.283760][ T9906] usb 6-1: USB disconnect, device number 50 [ 2275.501981][T13175] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11853'. [ 2276.115877][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 2276.115942][ T30] audit: type=1326 audit(1788832218.033:14052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13190 comm="syz.1.11862" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fcf0ec code=0x0 [ 2276.707691][T29970] lwtunnel_output(): recursion limit reached on datapath [ 2276.718102][ T2704] lwtunnel_output(): recursion limit reached on datapath [ 2276.983594][T13205] netlink: 'syz.6.11866': attribute type 1 has an invalid length. [ 2277.041014][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11866'. [ 2277.245562][T13205] bond2: entered promiscuous mode [ 2277.254399][T13205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2279.178108][T13232] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2279.875367][ T6254] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2279.875757][ T6254] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2279.876151][ T6254] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2279.876510][ T6254] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 2279.876548][ T6254] rtc rtc0: __rtc_set_alarm: err=-22 [ 2280.194501][T13246] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0) [ 2280.835864][T13260] syzkaller0: entered promiscuous mode [ 2280.835960][T13260] syzkaller0: entered allmulticast mode [ 2281.828108][ T1349] lwtunnel_output(): recursion limit reached on datapath [ 2282.470675][T29970] lwtunnel_output(): recursion limit reached on datapath [ 2282.747473][ T6254] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2282.907358][ T6254] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2282.908400][ T6254] usb 6-1: config 0 has no interfaces? [ 2282.908464][ T6254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2282.927893][ T6254] usb 6-1: config 0 descriptor?? [ 2283.110492][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.117724][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.204268][T13086] usb 6-1: USB disconnect, device number 51 [ 2285.474251][T13307] netlink: 'syz.7.11894': attribute type 21 has an invalid length. [ 2285.474479][T13307] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11894'. [ 2285.542011][T13307] netlink: 'syz.7.11894': attribute type 10 has an invalid length. [ 2285.542085][T13307] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11894'. [ 2286.479173][T13315] sctp: [Deprecated]: syz.3.11898 (pid 13315) Use of int in max_burst socket option. [ 2286.479173][T13315] Use struct sctp_assoc_value instead [ 2287.139051][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11902'. [ 2287.396809][T13332] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11902'. [ 2287.508053][T22537] lwtunnel_output(): recursion limit reached on datapath [ 2287.587744][ T2704] lwtunnel_output(): recursion limit reached on datapath [ 2288.296048][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2288.296119][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2288.751449][T13343] FAULT_INJECTION: forcing a failure. [ 2288.751449][T13343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2288.771871][T13343] CPU: 0 UID: 0 PID: 13343 Comm: syz.3.11908 Tainted: G L syzkaller #0 PREEMPT(full) [ 2288.771909][T13343] Tainted: [L]=SOFTLOCKUP [ 2288.771917][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2288.771929][T13343] Call Trace: [ 2288.771938][T13343] [ 2288.771948][T13343] dump_stack_lvl+0xe8/0x150 [ 2288.771981][T13343] should_fail_ex+0x410/0x560 [ 2288.772018][T13343] _copy_from_user+0x2d/0xb0 [ 2288.772042][T13343] get_compat_msghdr+0xb3/0x4c0 [ 2288.772073][T13343] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2288.772112][T13343] ___sys_sendmsg+0x201/0x360 [ 2288.772135][T13343] ? __lock_acquire+0x747/0x2de0 [ 2288.772160][T13343] ? __pfx____sys_sendmsg+0x10/0x10 [ 2288.772184][T13343] ? get_pid_task+0x20/0x1f0 [ 2288.772203][T13343] ? get_pid_task+0x20/0x1f0 [ 2288.772220][T13343] ? get_pid_task+0x20/0x1f0 [ 2288.772267][T13343] ? __fget_files+0x2a/0x420 [ 2288.772294][T13343] ? __fget_files+0x3a2/0x420 [ 2288.772329][T13343] __sys_sendmsg+0x177/0x240 [ 2288.772355][T13343] ? __pfx___sys_sendmsg+0x10/0x10 [ 2288.772396][T13343] __do_fast_syscall_32+0x27a/0x6a0 [ 2288.772419][T13343] ? do_fast_syscall_32+0x33/0x70 [ 2288.772440][T13343] ? asm_int80_emulation+0x1a/0x20 [ 2288.772460][T13343] ? do_int80_emulation+0x299/0x500 [ 2288.772485][T13343] do_fast_syscall_32+0x33/0x70 [ 2288.772506][T13343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2288.772530][T13343] RIP: 0023:0xf708f0ec [ 2288.772548][T13343] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2288.772566][T13343] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2288.772588][T13343] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 2288.772602][T13343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2288.772614][T13343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2288.772626][T13343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2288.772639][T13343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2288.772668][T13343] [ 2290.248159][T13355] pim6reg: entered allmulticast mode [ 2290.302492][T13357] pim6reg: left allmulticast mode [ 2290.500426][T13355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2290.501352][T13355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2290.682321][T13355] tap0: tun_chr_ioctl cmd 1074025677 [ 2290.682520][T13355] tap0: linktype set to 804 [ 2292.042722][T13378] netlink: 'syz.5.11922': attribute type 1 has an invalid length. [ 2292.042800][T13378] netlink: 1 bytes leftover after parsing attributes in process `syz.5.11922'. [ 2292.318877][ T9909] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2292.485834][ T9909] usb 4-1: Using ep0 maxpacket: 32 [ 2292.492415][T13387] netlink: 'syz.7.11924': attribute type 1 has an invalid length. [ 2292.502428][ T9909] usb 4-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 2292.524598][ T9909] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 2292.547073][ T9909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.556904][ T9909] usb 4-1: Product: syz [ 2292.561983][ T9909] usb 4-1: Manufacturer: syz [ 2292.568841][ T9909] usb 4-1: SerialNumber: syz [ 2292.758831][T13387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2292.932276][ T9909] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2292.933194][ T9909] usb 4-1: MIDIStreaming interface descriptor not found [ 2293.063443][T13390] bond3: (slave geneve2): making interface the new active one [ 2293.192819][ T9909] usb 4-1: USB disconnect, device number 115 [ 2293.335076][T13390] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 2293.363990][ T1349] lwtunnel_output(): recursion limit reached on datapath [ 2293.382315][T20162] udevd[20162]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2293.425673][T29970] lwtunnel_output(): recursion limit reached on datapath [ 2294.065461][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11926'. [ 2294.734236][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11928'. [ 2294.931932][T13402] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11928'. [ 2298.146809][T13433] FAULT_INJECTION: forcing a failure. [ 2298.146809][T13433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2298.146909][T13433] CPU: 0 UID: 0 PID: 13433 Comm: syz.6.11939 Tainted: G L syzkaller #0 PREEMPT(full) [ 2298.146940][T13433] Tainted: [L]=SOFTLOCKUP [ 2298.146947][T13433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2298.146959][T13433] Call Trace: [ 2298.146967][T13433] [ 2298.146976][T13433] dump_stack_lvl+0xe8/0x150 [ 2298.147010][T13433] should_fail_ex+0x410/0x560 [ 2298.147046][T13433] _copy_from_user+0x2d/0xb0 [ 2298.147070][T13433] do_sys_poll+0x258/0x1110 [ 2298.147110][T13433] ? __pfx_do_sys_poll+0x10/0x10 [ 2298.147133][T13433] ? __lock_acquire+0x747/0x2de0 [ 2298.147214][T13433] ? get_pid_task+0x20/0x1f0 [ 2298.147233][T13433] ? get_pid_task+0x20/0x1f0 [ 2298.147280][T13433] ? set_compat_user_sigmask+0xc7/0x1c0 [ 2298.147308][T13433] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 2298.147335][T13433] ? __fget_files+0x2a/0x420 [ 2298.147370][T13433] __ia32_compat_sys_ppoll_time32+0x2aa/0x320 [ 2298.147402][T13433] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 2298.147428][T13433] ? ksys_write+0x242/0x270 [ 2298.147468][T13433] __do_fast_syscall_32+0x27a/0x6a0 [ 2298.147491][T13433] ? do_fast_syscall_32+0x33/0x70 [ 2298.147512][T13433] ? asm_int80_emulation+0x1a/0x20 [ 2298.147531][T13433] ? do_int80_emulation+0x299/0x500 [ 2298.147556][T13433] do_fast_syscall_32+0x33/0x70 [ 2298.147578][T13433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2298.147601][T13433] RIP: 0023:0xf6fdf0ec [ 2298.147619][T13433] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 2298.147637][T13433] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 2298.147659][T13433] RAX: ffffffffffffffda RBX: 00000000800002c0 RCX: 00000000000000dc [ 2298.147673][T13433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffecb [ 2298.147686][T13433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2298.147698][T13433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2298.147710][T13433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2298.147744][T13433] [ 2298.469709][T12541] lwtunnel_output(): recursion limit reached on datapath [ 2298.471061][T12541] lwtunnel_output(): recursion limit reached on datapath [ 2298.737267][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11940'. [ 2299.237063][T26300] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2299.481359][T13448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2299.498565][T13448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2299.944771][T13453] syzkaller0: entered promiscuous mode [ 2299.944810][T13453] syzkaller0: entered allmulticast mode [ 2302.013681][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11938'. [ 2303.300582][T13476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11952'. [ 2304.227951][T22537] lwtunnel_output(): recursion limit reached on datapath [ 2304.230557][T14738] lwtunnel_output(): recursion limit reached on datapath [ 2304.603507][T13484] tipc: New replicast peer: 172.20.20.187 [ 2304.632508][T13484] tipc: Enabled bearer , priority 10 [ 2305.665556][ T9909] tipc: Node number set to 2878739838 [ 2306.204244][T26300] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2306.233733][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11961'. [ 2306.290098][T13505] syzkaller0: entered promiscuous mode [ 2306.296571][T13505] syzkaller0: entered allmulticast mode [ 2306.359861][T26300] usb 6-1: Using ep0 maxpacket: 8 [ 2306.394900][T26300] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2306.395035][T26300] usb 6-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 2306.404629][T26300] usb 6-1: config 2 has an invalid interface number: 76 but max is 0 [ 2306.404685][T26300] usb 6-1: config 2 has no interface number 0 [ 2306.404732][T26300] usb 6-1: config 2 interface 76 has no altsetting 0 [ 2306.422518][T26300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.422558][T26300] usb 6-1: Product: syz [ 2306.422589][T26300] usb 6-1: Manufacturer: syz [ 2306.422619][T26300] usb 6-1: SerialNumber: syz [ 2306.850806][T26300] go7007 6-1:2.76: Sensoray 2250 found [ 2306.851176][T26300] go7007 6-1:2.76: probe with driver go7007 failed with error -12 [ 2306.862870][T26300] usb 6-1: USB disconnect, device number 52 [ 2307.704015][ T9904] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2307.878870][ T9904] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 2307.891943][ T9904] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.906335][ T9904] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2307.917417][ T9904] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2307.928427][ T9904] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2307.952868][ T9904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.962265][ T9904] usb 4-1: Product: syz [ 2307.967252][ T9904] usb 4-1: Manufacturer: syz [ 2307.972471][ T9904] usb 4-1: SerialNumber: syz [ 2308.084032][ T6254] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2308.234673][ T6254] usb 6-1: Using ep0 maxpacket: 32 [ 2308.240735][ T6254] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2308.246251][ T6254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2308.264071][ T6254] usb 6-1: config 0 descriptor?? [ 2308.274325][ T9904] usb 4-1: Not enough endpoints found in device, aborting! [ 2308.379060][ T6254] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2308.885049][ T6254] gspca_sunplus: reg_w_riv err -110 [ 2308.885278][ T6254] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 2309.151097][ T9909] usb 4-1: USB disconnect, device number 117 [ 2309.345766][ T4396] lwtunnel_output(): recursion limit reached on datapath [ 2309.614645][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11964'. [ 2309.987367][ T1349] lwtunnel_output(): recursion limit reached on datapath [ 2310.336547][ T6254] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2310.487114][ T6254] usb 4-1: Using ep0 maxpacket: 16 [ 2310.490519][ T6254] usb 4-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3 [ 2310.494760][ T6254] usb 4-1: config 2 has an invalid interface number: 12 but max is 0 [ 2310.494819][ T6254] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 2310.494857][ T6254] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2310.494893][ T6254] usb 4-1: config 2 has no interface number 0 [ 2310.494982][ T6254] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2310.495024][ T6254] usb 4-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2310.495077][ T6254] usb 4-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2310.495115][ T6254] usb 4-1: config 2 interface 12 altsetting 7 bulk endpoint 0x8A has invalid maxpacket 0 [ 2310.495154][ T6254] usb 4-1: config 2 interface 12 has no altsetting 0 [ 2310.520769][ T6254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.520809][ T6254] usb 4-1: Product: syz [ 2310.520841][ T6254] usb 4-1: Manufacturer: syz [ 2310.520871][ T6254] usb 4-1: SerialNumber: syz [ 2310.928747][ T6254] em28xx 4-1:2.12: New device syz syz @ 480 Mbps (2040:8265, interface 12, class 12) [ 2310.928879][ T6254] em28xx 4-1:2.12: Video interface 12 found: bulk [ 2310.928951][ T6254] em28xx 4-1:2.12: DVB interface 12 found: [ 2310.998408][ T6254] em28xx 4-1:2.12: unknown em28xx chip ID (0) [ 2311.020201][ T9909] usb 6-1: USB disconnect, device number 53 [ 2311.141524][ T6254] em28xx 4-1:2.12: reading from i2c device at 0xa0 failed (error=-5) [ 2311.141652][ T6254] em28xx 4-1:2.12: board has no eeprom [ 2311.236148][ T6254] em28xx 4-1:2.12: Identified as Hauppauge WinTV-dualHD DVB (card=99) [ 2311.236256][ T6254] em28xx 4-1:2.12: Currently, V4L2 is not supported on this model [ 2311.236290][ T6254] em28xx 4-1:2.12: dvb set to bulk mode. [ 2311.297754][ T6254] em28xx 4-1:2.12: unknown em28xx chip ID (0) [ 2311.397545][ T6254] em28xx 4-1:2.12: reading from i2c device at 0xa0 failed (error=-5) [ 2311.397665][ T6254] em28xx 4-1:2.12: board has no eeprom [ 2311.476116][ T6254] em28xx 4-1:2.12: Identified as Hauppauge WinTV-dualHD DVB (card=99) [ 2311.476192][ T6254] em28xx 4-1:2.12: dvb ts2 set to bulk mode. [ 2311.688201][T13540] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11973'. [ 2311.806931][T13544] syzkaller0: entered promiscuous mode [ 2311.813250][T13544] syzkaller0: entered allmulticast mode [ 2312.135699][ T3843] em28xx 4-1:2.12: Binding DVB extension [ 2312.135829][ T3843] em28xx 4-1:2.12: no endpoint for DVB mode and transfer type 1 [ 2312.135861][ T3843] em28xx 4-1:2.12: failed to pre-allocate USB transfer buffers for DVB. [ 2312.135920][ T3843] em28xx 4-1:2.12: Binding DVB extension [ 2312.136087][ T3843] em28xx 4-1:2.12: no endpoint for DVB mode and transfer type 1 [ 2312.136119][ T3843] em28xx 4-1:2.12: failed to pre-allocate USB transfer buffers for DVB. [ 2312.136181][ T3843] em28xx 4-1:2.12: Registering input extension [ 2312.136476][ T3843] em28xx 4-1:2.12: Remote control support is not available for this card. [ 2312.209236][ T6254] usb 4-1: USB disconnect, device number 118 [ 2312.239710][ T6254] em28xx 4-1:2.12: Disconnecting em28xx #1 [ 2312.239804][ T6254] em28xx 4-1:2.12: Disconnecting em28xx [ 2312.239892][ T6254] em28xx 4-1:2.12: Closing input extension [ 2312.239928][ T6254] em28xx 4-1:2.12: Closing input extension [ 2312.239961][ T6254] list_del corruption, ffff888093060250->next is NULL [ 2312.241245][ T6254] ------------[ cut here ]------------ ** replaying previous printk message ** [ 2312.241245][ T6254] ------------[ cut here ]------------ [ 2312.241272][ T6254] kernel BUG at lib/list_debug.c:53! [ 2312.281458][ T6254] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 2312.302639][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: kworker/1:12 Tainted: G L syzkaller #0 PREEMPT(full) [ 2312.313661][ T6254] Tainted: [L]=SOFTLOCKUP [ 2312.317977][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2312.328026][ T6254] Workqueue: usb_hub_wq hub_event [ 2312.333061][ T6254] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 2312.340004][ T6254] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 c0 97 6d 8c 48 89 de e8 62 a8 3d fc 90 <0f> 0b 48 c7 c7 20 98 6d 8c 48 89 de e8 50 a8 3d fc 90 0f 0b 4c 89 [ 2312.359609][ T6254] RSP: 0018:ffffc900066bf380 EFLAGS: 00010246 [ 2312.365673][ T6254] RAX: 0000000000000033 RBX: ffff888093060250 RCX: 08c340d1b2096000 [ 2312.373641][ T6254] RDX: ffffc9001a60c000 RSI: 000000000000561b RDI: 000000000000561c [ 2312.381609][ T6254] RBP: dead000000000100 R08: ffff8880b8724713 R09: 1ffff110170e48e2 [ 2312.389582][ T6254] R10: dffffc0000000000 R11: ffffed10170e48e3 R12: 1ffffffff1fd0cb9 [ 2312.397548][ T6254] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2312.405512][ T6254] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 2312.414441][ T6254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2312.421026][ T6254] CR2: 0000000080828018 CR3: 000000004c42a000 CR4: 00000000003526f0 [ 2312.428997][ T6254] Call Trace: [ 2312.432269][ T6254] [ 2312.435199][ T6254] ? __pfx_em28xx_ir_fini+0x10/0x10 [ 2312.440416][ T6254] em28xx_close_extension+0x15a/0x390 [ 2312.445804][ T6254] em28xx_usb_disconnect+0x16b/0x2f0 [ 2312.451108][ T6254] usb_unbind_interface+0x295/0x9f0 [ 2312.456313][ T6254] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2312.462043][ T6254] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2312.467773][ T6254] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2312.473501][ T6254] device_release_driver_internal+0x4f5/0x880 [ 2312.479646][ T6254] bus_remove_device+0x444/0x560 [ 2312.484604][ T6254] ? __pfx_bus_remove_device+0x10/0x10 [ 2312.490080][ T6254] ? kernfs_remove_by_name_ns+0x101/0x140 [ 2312.495810][ T6254] device_del+0x524/0x8f0 [ 2312.500151][ T6254] ? __pfx_device_del+0x10/0x10 [ 2312.505007][ T6254] ? kobject_put+0x516/0x550 [ 2312.509610][ T6254] usb_disable_device+0x3d4/0x8d0 [ 2312.514646][ T6254] usb_disconnect+0x346/0x9a0 [ 2312.519344][ T6254] hub_event+0x1bbb/0x4d30 [ 2312.523776][ T6254] ? do_raw_spin_unlock+0xf5/0x200 [ 2312.528909][ T6254] ? register_lock_class+0x31/0x2e0 [ 2312.534131][ T6254] ? __pfx_hub_event+0x10/0x10 [ 2312.538911][ T6254] ? rcu_is_watching+0x16/0xb0 [ 2312.543684][ T6254] ? process_scheduled_works+0x97a/0x1630 [ 2312.549420][ T6254] process_scheduled_works+0xc3d/0x1630 [ 2312.554995][ T6254] ? __pfx_process_scheduled_works+0x10/0x10 [ 2312.560993][ T6254] ? assign_work+0x3cf/0x5d0 [ 2312.565596][ T6254] worker_thread+0xa47/0xfb0 [ 2312.570209][ T6254] kthread+0x38b/0x480 [ 2312.574286][ T6254] ? __pfx_worker_thread+0x10/0x10 [ 2312.579408][ T6254] ? __pfx_kthread+0x10/0x10 [ 2312.584003][ T6254] ret_from_fork+0x514/0xb70 [ 2312.588601][ T6254] ? __pfx_ret_from_fork+0x10/0x10 [ 2312.593730][ T6254] ? load_gs_index+0x97/0xc0 [ 2312.598335][ T6254] ? __switch_to+0xc89/0x1420 [ 2312.603022][ T6254] ? __pfx_kthread+0x10/0x10 [ 2312.607617][ T6254] ret_from_fork_asm+0x1a/0x30 [ 2312.612401][ T6254] [ 2312.615429][ T6254] Modules linked in: [ 2312.643576][ T6254] ---[ end trace 0000000000000000 ]--- [ 2313.149578][ T6254] RIP: 0010:__list_del_entry_valid_or_report+0xdf/0x190 [ 2313.149657][ T6254] Code: 49 39 1f 0f 85 9e 00 00 00 b0 01 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc 48 c7 c7 c0 97 6d 8c 48 89 de e8 62 a8 3d fc 90 <0f> 0b 48 c7 c7 20 98 6d 8c 48 89 de e8 50 a8 3d fc 90 0f 0b 4c 89 [ 2313.149700][ T6254] RSP: 0018:ffffc900066bf380 EFLAGS: 00010246 [ 2313.149739][ T6254] RAX: 0000000000000033 RBX: ffff888093060250 RCX: 08c340d1b2096000 [ 2313.149772][ T6254] RDX: ffffc9001a60c000 RSI: 000000000000561b RDI: 000000000000561c [ 2313.149805][ T6254] RBP: dead000000000100 R08: ffff8880b8724713 R09: 1ffff110170e48e2 [ 2313.149837][ T6254] R10: dffffc0000000000 R11: ffffed10170e48e3 R12: 1ffffffff1fd0cb9 [ 2313.149870][ T6254] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2313.149900][ T6254] FS: 0000000000000000(0000) GS:ffff888124dd6000(0000) knlGS:0000000000000000 [ 2313.149934][ T6254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2313.149965][ T6254] CR2: 0000000080b4e018 CR3: 00000000598fa000 CR4: 00000000003526f0 [ 2313.150021][ T6254] Kernel panic - not syncing: Fatal exception [ 2313.252128][ T6254] Kernel Offset: disabled [ 2313.256442][ T6254] Rebooting in 86400 seconds..