last executing test programs:

5m54.270780225s ago: executing program 0 (id=1479):
r0 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="281effe935fdca24ffffff556ea6e5000b00000000000000000b", 0x20}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}, {{&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0xffffffffffffff2a, 0x0, 0x2, 0xedd}}], 0x18}}], 0x2, 0x4800)

5m54.251222784s ago: executing program 0 (id=1480):
capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000440)='./nfsd\x00', &(0x7f0000000480)='nfsd\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1c0) (async)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd0607013e1bea1c03010902350001010080fa0904000005ff000000070581024000010705010240000107058302400001070503", @ANYRES64], 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ttyUSB0\x00', 0x102, 0x0) (async)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/use-gss-proxy\x00', 0x80841, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1) (async, rerun: 64)
r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/portlist\x00', 0x20002, 0xac) (rerun: 64)
write(r1, &(0x7f0000000500)='udp 2', 0x5)

5m50.814768375s ago: executing program 0 (id=1494):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001680)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a800160020000600046efb8000a007a290457f0105b31621eff59a6aea9f0f277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14f4d930dfe1d9d322fe7c9f8775338d81a99f5cd823ce3238310d299a5e16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405b2fb84b6d2d229a63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d1e58f6ae3642", 0xd8}], 0x1}, 0x0) (fail_nth: 10)

5m50.229291242s ago: executing program 0 (id=1496):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c0000000300000000000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_usb_connect(0x5, 0xe1b, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x31, 0x1a, 0x9d, 0x40, 0x19d2, 0xff5e, 0xfb57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe09, 0x4, 0x4, 0x4, 0x80, 0xc, "", [{{0x9, 0x4, 0x8c, 0x4a, 0x5, 0xff, 0xff, 0xff, 0xd, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "929ac5a34e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xb6, 0x6, 0x4e92, 0x6}, {0x6, 0x24, 0x1a, 0x1, 0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x7}]}, @generic={0xb6, 0x21, "d9c0769fc5acd8592f23cbe8e2b33740da3d7bc2b42db275067fb676902ebbe7bb42c77c11c8baccbccbb6d86a48c8cfe98d077de6ddfd01ddc96e3aaa41930ce45c05c706a122f6ba226f602b7e27b5f7d39fb9c991427ec0658a5d81a89f11786f9c74360e4ecc47b9ad5e7c8653943bab830f1bf0eb761c9d80c8abc950d67eb7834b61d1eb6cbe1eab22e2011caaea03024ba808e7b075b36f0b61800e0108e115aa94c51d867fd9e266024696e19d194553"}], [{{0x9, 0x5, 0x0, 0x3, 0x8, 0x2, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xffff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0xd9, 0x1, 0xa0}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x6, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xfffe}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x0, 0x85, 0xf4, [@generic={0x94, 0x8, "7e8421b2b9fa66d146434e33e1c09a7c9157adc32b92e0d7b0ff3e150f7c71f5d878b2fffddbf77c2ec21a948b7391b9d5fb769efb7365baac36b30b13914a833510d3d3bed0b3f20b7718e4ed69f376cd86b87647b2fca5690629850207e4c10609510a559375c764da6bb463882aa2f44a00786c314c60dfcb4072f94cef987e1da106e33b5d0d7cbb20ae145a6ab57930"}, @generic={0xbb, 0x5, "f753f043a8b747f620ab3223733e5404772662dcf5b99f7e692d87c20d14b080b912042e999355a4ab25f48fcc7d9c3bfbc5508d51beadc8af2153d8871c88bb3859a7a9d182733f6cb6fe47656afe0b7f306f39e31dbf1ad93755de9fc69f78f18d6631e08315e18b859a66187792536f67ffc72568e04431fa0ce91e31b928f78674bcfd163e468560393112964d402dfafccabf3972e9416dccbaa7ae55990be26375009936bcd9739fd83cd3f456774717f8ee504a3cb1"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @generic={0xc3, 0x5, "ebef88cfcc298b949149770372e3e0ee8d72a15a082f5ebd3c58fe5d6d00223826977fd9410e87a30555f824bd62dcbb3d31b2fd56a4564b0d0700f53a0c83342745a20f17d5fe5e728b811c39d0a6f206fe843614fd9c4cbf448beaba8facfbe2467949449fe133b49d39f3242fd06aee9ecec75b3327bdc2461d51cfec28fe4c36504455ff2ca4eca194ee0014f0847c93fbd72b2c5e4bc24a52b3bfcec633741c759f23d3f7b58bb44801c4991af313d036ce33108104d211f119b29edd651a"}]}}]}}, {{0x9, 0x4, 0xa, 0x3, 0x9, 0x3e, 0xef, 0xa, 0x6, [@hid_hid={0x9, 0x21, 0x8, 0x47, 0x1, {0x22, 0x3ed}}], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0xd, 0x6, 0xf9}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0xd2, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x1, 0x9}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x7, 0xff, 0x6}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x7, 0xfd, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x8, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x26, 0x1a, 0x66}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6, 0x1, 0x89}}]}}, {{0x9, 0x4, 0x15, 0x6, 0xc, 0xaa, 0x88, 0x19, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x40}, [@extension_unit={0xc, 0x24, 0x8, 0x1, 0x9, 0xd, "1a282ef800"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x2, "91ce"}, @feature_unit={0x9, 0x24, 0x6, 0x4, 0x1, 0x1, [0x0], 0x14}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x81, 0x4, '\f'}, @processing_unit={0x8, 0x24, 0x7, 0x3, 0x0, 0x6, ' '}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0xc, "f8ea97c715"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "10b3e7"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x0, 0x7f, 0x3}, [@mdlm={0x15}, @ncm={0x6, 0x24, 0x1a, 0x8001, 0x1f}, @dmm={0x7, 0x24, 0x14, 0x6, 0xf9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff9, 0x8, 0x7}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0xd6, 0x81, 0x3, [@generic={0x43, 0x2f, "e0d0b9da7eb8b165a09cae708bb086084c8713f1b1c8841d4d416067b8a16a2fb746ac92d3b6d9a5f5cd8dc898b0ddb67e002ea5d58a7da9f657406ba462091220"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x45, 0x10}]}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x2, 0x9, 0x3, [@generic={0xce, 0x6b13fc991b39b3d3, "87c37efbef7021d72e2b0d3e51648ce94645d2ca6a966d097090f445945b140017679f426ea18969477d0551c83e36b7358763c54ac20c0681cc3ff280411cf133674d1151584fd28f703136e63bd9479386047d786b30bf42a90840dc989fed5f2b4118bfc96cc726031a11404d741e61f30bc6ea8bfade456b0f120c60809143fe7d8357d55850cca1cfc00a504462f09a14b258a69694dde6a8b96fc2620ca22cf530bf1861f4ab1074ec0eade8e0855f92c737c2b1c2e1cc94c155a72d424aee750cf230afc6ef0937ae"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0xda, 0xb2}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x5, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x6, 0x0, 0x8, [@generic={0xaa, 0x23, "db7b9bd76f5b16e97eb29d39973c85a94ac292cff578f0eaab246a1106047f077fef153f802e01b72018f3c300c628b6cb4f9c1ff76d5e0f342324003d0b460cee5135dffbba02d740040e5f5811ee07f97f4d1b21648d2bcfcbf037a9a322c95268680c88c628b69a1cbc0c867dec336ed6163a9bd3e8dd457004f789107647444dcfbad27c04b54842cfdbf61de601ce36ab49f221c724d4d12733188792b3c28cfde54b5796f3"}, @generic={0x21, 0x23, "ebc0d546fe5a893b3d75a7a61847ba9597008169f10b94757a3d8354095668"}]}}, {{0x9, 0x5, 0x97, 0x8, 0x200, 0xcc, 0x8, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x9}, @generic={0xf3, 0x7, "a53a32b4a723a3fd29fc88f7fb4d4951d1e9868248f1bef5fdb47408c4182dc7f83af025893fea6461fd615ab77392aad1381442e57c8742c9c0452a518c793c194bd89dedb0d4be61b606ca7f3c2a2746cad398cbcb7030f676b45cfae5a82d4c2e9f8202c1d602ee86bd7815ea04810e2fd9ca9917e814c755a3506d3a1b6384250c0499bec396e5df216b950922a6661a32937a283d3eac6bae74c9a1a8928cabd9363ba96afd284b238f869da64d5ccfc3332bd2d72837cfe4b1965445de0f29d00467165396c27144f88bc2a3828cffaf1bb63204581bcc8f5d99a1a034154c59281a7787dd4612ec90d4d2bcc67e"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x5, 0x74, 0xf3, [@generic={0xbe, 0xe, "e0f6a752a6818c9fe1543b66eec610fcd0a3727d3b4cd6ed5f9ebc34d5e2f261bf6229ad8aad6e256d0f839dfb6606f467f9dd67d735c4ffab1bcd15dd9b7fe3ccc80ccefe43a9165b0a54c7cd829049ea39b522239c747ce94d97ef61d10a251287fa835bf7f2d3440ed4849bef2918d5b4fc615c4114e3d2402d6827e99261d516ca0fb8d2740ecf27ba5aa2dfd75b697834f1b5d51768a2e574092386b06e2c42ada0fce5ea9a2c8a95b03088206b06aadbce7c561314ba73c225"}]}}, {{0x9, 0x5, 0x80, 0xd, 0x20, 0x8, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x98}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x9, 0x7f, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x2}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x7, 0x2, 0xe, [@generic={0xb9, 0x10, "185015939cde524586c27f45bdf3fdcd4fea94ae6d0fd7d7dac53207876d3e6d1605c82ae786f4510cddb8e95e000588db985b60bc6f2ede3de54b49679f960739e0193fe267f285cad2d54d10c5721a99e322450825e836e02574372ba45797a47ef31a73f623ad99444f750e561715e9e0da3920be0c80e9c5200789563a67a1c3dc81401d5f23b08cd26cf2a0522f81c78a36ce21cd00eda1db10767e3fa27ddcc5228a33f417d1f69bacadfacded482e4f6d5e21ba"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x3ff, 0x10, 0xff, 0x77, [@generic={0xd1, 0xb, "d4f0cd1ea4bdaa780b0b4d11b8afc4c36b658cd609f82a4cbc971729ff26837f5a3c22c0606aa1b361a472131669dba5eff7e8d844400b97bf50e82f70391a26d7f44d2943acb9cc27f16ab01ac81b852b353a6b23efb712d220e33c67dcbea097067b8a850b79bcc81811746e944ae3f77549362fc0085b1cc087c5e895b60d600b93a0154a07ea4b87be2628b38e97513828477abf9cc25d24290ab87356fec3ac794e27346a7c27f61e5465f33a16d1aba8fb77010288e73be42791080599302d1c432bf0879e0f0753231e3c88"}, @generic={0xc7, 0x7c, "09e12147e9b5fd7574c7721c009b0e7fa95e563117b92f5294f57857865b41a14c0634c6a2478185ca4a5cbf3fcd7156d4b91118712187415442e61407ee085288b7f05681bfdc1c60ef792eedb9fc2dfc4e84ea15b7410f825c2d298db502290adb040d99d68a02172c7b90398faba0085f1c7030f2e28a8bc2db67ef6cced5ca2580b3e572a159f87f6538cfb8999fc9673e7b3ee63d3934dbd5ce87e55f7793539c7cb58288a0d9b3859338804abccd1a6a77ef0f3af2d2f4fc943fb957c138be1c9986"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x3, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}]}}, {{0x9, 0x4, 0xf3, 0x6, 0xc, 0x2e, 0x50, 0x91, 0x5, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "ca"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xb9e, 0x6, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x35}, [@network_terminal={0x7, 0x24, 0xa, 0xf8, 0x0, 0x4c}, @acm={0x4, 0x24, 0x2, 0x6}, @dmm={0x7, 0x24, 0x14, 0xe, 0x4}]}], [{{0x9, 0x5, 0x8, 0x3, 0x8, 0x2, 0x4, 0xc}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xc4, 0xd, 0xb3, [@generic={0x89, 0x31, "bc362b5c830fc5b0c4e48dfba3e20c509970758ef88c0c5134a4b9db0aa1b4a521e2ced7030449a683cac89fea435b8a9df0985dbdeaedf7384c3372da684f81f661839362d45e4a5a0bb4aa326290693fc713907bb1e2f4b2edcb0eb2ef220cacd6cc235330f513d4952338bb3dc07c6a8bc7806cc651ad727e1394b299c4bd525429e52067c6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x9}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x1, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x7, 0x80, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1c, 0x2, 0x1}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xd6, 0x0, 0x81, [@generic={0x78, 0xd, "c2ee38ebff317f9aafb37c57c77ff2f269f5f4305bc5ead46d201a85e09be35a17a9acd18c2e05fa5e1c3c67f8de123eca4be351226d42f41a4ddc51575ebbe9347890f71417a21c4472c7cbe92dbeea8338c00e45efa6116de7b6de543cc2726562d8aecfc8672a4a37d33d7f95544084c9d7adf13d"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x0, 0xd}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0xc, 0xa, 0xe6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x0, 0x9, 0x71, [@generic={0x75, 0x10, "843707011f5f68c317b209b3fc4fe2f434f8ae2b638b747fecabd8bf96f7e8c3a2d2e3c5065f9beb7ab9035c5acab418ef451feac8d36fa1ff80c681fe12abf4831495e646b78855a7d8fc2f17e855d31c829d34797cc5cc607a935fec77896b84751f904969672155529330ca357a2fc71d85"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x0, 0x2, 0x8, 0x5}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x81, 0x4, 0xdb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x7}, @generic={0xf2, 0x24, "a2ccc5f5012ed66f06a6186350ba97aac530000289fbb8dd4b453e7e20a4cdc20eaaa303e7b56c32d57632b070251e4a71926d9f984189dc8f4ee4976218fe946844ec4ceac819fa27215a30dd10ea3c4cb86a9e4f47922cee463e544ddde1c5a527e8e3dc6bc52401d4ae04dfd11bdf270fe28ebd44e6cc029579efcd6eccf0587f2721237b3afe975b58d57ea387872672abe3933f1c520e7406296dad21914a4e018006fd690668cf363af63af3505b4df14c069c720dd95b50388292d532e81fa555a0e42647688571b54ae9be06c8a1d02a997ab8cff693860394c44fccb08fdce9116d55a44340462628068786"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x80, 0x5, 0xda}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xe, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x5}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x310, 0x44, 0x4, 0xd1, 0x20, 0x6}, 0x2d, &(0x7f0000000e80)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x9, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "cc6a0ae4f968ca9f3be92ed696d6e1b5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xcd, 0xe, 0x101}]}, 0x4, [{0xf7, &(0x7f0000000ec0)=@string={0xf7, 0x3, "8d4a5cda1929a0ab86b15e246e171825a4007bcb06a7bb4b13aed6ac2c24fc97ab426fdfc4fa9bf800a9083f15ef1d967a3b6e0488e26d9b11b07eeba398c9a17e042d26904932a274e918bca0b81d59c9db56fda1f436d9a9043824600b310ad94058b7049c12465c2600f99dcc624ab60619e4d3f4f9f871b4e9b617ec25e56e1d9a135887d715688d6fce3cd5be419e0d8e936657e906502497173216c9a2ebd0481f36909bd577dd1e269360c957c8287e06f2fb77be4258b5625c3f8e266f7fb23ef452edc1642eeea0109832b567f1c1dcbd35466500e7eb8d4ea6b3f0917414ead51f8a40333c92ff9634244accc427b609"}}, {0xd1, &(0x7f0000000fc0)=@string={0xd1, 0x3, "c0a5af73537aafe9f36e1861908352dd835a9af90e80ea819ab7270b75a747f8be387fbe4f9ab87a3263eaabfd5b303af53f329dda47806a48388095253573b878fed29bf2b25aca071e9365cc7e096654c22beabef2a8058a26fb0754b4397cd2423584a9592e6957f6f55a39fc02b9f31f66060c845333799b814dcd1917f33826437e3dc0af3d1ffaf6e00541f68e77be2e61b26c82e9810e97a0756d56ecce00886eef5ccef6aea39e4295d8105a6f7685cfc151bb00081e3c7bbeeb666bd4d1258e5d38c7e7cb73fd617073ca"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x2009}}, {0x5a, &(0x7f0000001300)=ANY=[@ANYBLOB="5a031222050efd5df491aee01121fa8ac4ab262a44e11f88ca1ebf8e7808a44866b839c0cf4f6333ae989711ec628c87feb89078a8a1d66bb2c1df8805f16749b65e78fc5af94df2196d887090d18efec617e710014be4619f2eed6ecfc777c7d3b1eb"]}]})
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000001200)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab9606aa834d3a9e7cfc120c8ac0ab1e6227c2b6ddaa5ecef690", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67)

5m48.047897202s ago: executing program 0 (id=1501):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0xfffffffffffffd6f, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x13}, [@CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x8}}, {0x0, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
unshare(0x20000000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f00000006c0)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0], 0x1}, 0x58)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000880), &(0x7f0000000900)=0x6e, 0x1800)
recvmsg$unix(r1, &(0x7f0000000cc0)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/38, 0x26}, {&(0x7f0000000ac0)=""/82, 0x52}, {&(0x7f0000000b40)=""/222, 0xde}], 0x3}, 0x102)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/bdi/1:0/strict_limit\x00', 0x1, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3)
write$khugepaged_scan(r2, &(0x7f0000000400), 0x8)
sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0xfffffffffffffd6f, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x13}, [@CTA_EXPECT_NAT={0x38, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x8}}, {0x0, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async)
unshare(0x20000000) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone3(&(0x7f00000006c0)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0], 0x1}, 0x58) (async)
accept4$unix(0xffffffffffffffff, &(0x7f0000000880), &(0x7f0000000900)=0x6e, 0x1800) (async)
recvmsg$unix(r1, &(0x7f0000000cc0)={&(0x7f0000000a00)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/38, 0x26}, {&(0x7f0000000ac0)=""/82, 0x52}, {&(0x7f0000000b40)=""/222, 0xde}], 0x3}, 0x102) (async)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/bdi/1:0/strict_limit\x00', 0x1, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) (async)
write$khugepaged_scan(r2, &(0x7f0000000400), 0x8) (async)
sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)

5m47.280310929s ago: executing program 0 (id=1506):
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000a00)="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"/472, 0x1d8, 0xfffffffffffffffd)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = getpid()
socket$inet6_icmp(0xa, 0x2, 0x3a)
kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, r3, &(0x7f00000000c0)={0xffffffffffffffff, r3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000280)={@flat, @fd={0x66642a85, 0x0, r3}}}}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x100, 0x0, &(0x7f0000000380)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r6}], 0x100, 0x0, &(0x7f0000000c00)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x100, 0x0, &(0x7f0000000780)=@reply={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002600090123bd7008f9ffffff010000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x50, 0x0, &(0x7f00000008c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000940)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f00000009c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r7}]})

5m31.441461992s ago: executing program 32 (id=1506):
add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000a00)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040303303a3138303606035504030c2f4367727469666963617465207665726966696307000000000000004453412073656c662d74657374696e67206b65593020170d32343034313332060000000000000032313201003332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b30730603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8d3300c0603551d130101ff04023000300b2503551d0f040403020780300a06082a8648ce3d044002034700304402201ad7ac07c800000000437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d00"/472, 0x1d8, 0xfffffffffffffffd)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = getpid()
socket$inet6_icmp(0xa, 0x2, 0x3a)
kcmp$KCMP_EPOLL_TFD(r5, r4, 0x7, r3, &(0x7f00000000c0)={0xffffffffffffffff, r3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000280)={@flat, @fd={0x66642a85, 0x0, r3}}}}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=[@enter_looper], 0x100, 0x0, &(0x7f0000000380)=@transaction={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)={@flat=@binder={0x73622a85, 0x0, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x0, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0x3}}, &(0x7f00000005c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r6}], 0x100, 0x0, &(0x7f0000000c00)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740), 0x100, 0x0, &(0x7f0000000780)=@reply={0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002600090123bd7008f9ffffff010000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x50, 0x0, &(0x7f00000008c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000940)={@flat=@handle={0x73682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f00000009c0)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r7}]})

4m32.790516896s ago: executing program 1 (id=1828):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xd0}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="dd71", 0x2}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0x87, 0x89f8}, 0x8)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000e00), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f00000001c0), 0x800001d, 0x300)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0003001000000002800000121f", 0x2e}], 0x1}, 0x20008000)
sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000e40)=0xffffffffffffffff)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000640))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000ec0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xd000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000f00)=0x1)

4m32.510966249s ago: executing program 1 (id=1831):
write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000010300)=0x9, 0x8, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000010340))
mkdirat$rnull(0xffffffffffffff9c, &(0x7f0000000200)={'/sys/kernel/config/rnull/syzrnull', 0x0}, 0x1ff)
r0 = openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000000040)=ANY=[@ANYBLOB="2f7379732f6b65726e656c2f636f6e6669672f726e756c6c2f73797a726e756c6c302f706f776572001c070e8dd5a43e0b9cef5e5b80241c7dafceff8121ed9bad43320ef97b9b753d2512b7ec0ef9e9b7138b44754e3604dea18e7802e69435336f795fe5f5695f5dd20e8feaf9d0cca74a4d0ac598511d20cf1f5523283174a99775e1c7075da3ede874a51834b1f4e888750fe9c408579e759331"], 0x2, 0x0)
write$rnull_attr(r0, &(0x7f0000000280)='1', 0x1)
unlinkat$rnull(0xffffffffffffff9c, &(0x7f0000000000)={'/sys/kernel/config/rnull/syzrnull', 0x0}, 0x200)

4m32.396386033s ago: executing program 1 (id=1833):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f00000007c0)=""/4091, 0xffb}, {&(0x7f00000017c0)=""/175, 0xaf}, {&(0x7f0000001880)=""/256, 0x100}, {&(0x7f0000001980)=""/191, 0xbf}], 0x6}, 0x1}], 0x4, 0x0, 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = userfaultfd(0x80001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000700), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000740))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001a40)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000001a80)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='\x00', 0x163)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0)
getdents64(r3, &(0x7f0000000240)=""/157, 0x9d)

4m32.196891033s ago: executing program 1 (id=1837):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (rerun: 64)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0)
write(r3, &(0x7f0000000080)="0300", 0x2) (async)
ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000740)={0x2, 0x0, 0x2, 0xd, 0x14a, &(0x7f0000000340)="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"}) (async)
ioctl(r1, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@') (async, rerun: 32)
ioctl(r1, 0x4048aec9, &(0x7f0000000300)="0200000000000000aa") (async, rerun: 32)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000a40)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl(r2, 0x4048aecb, &(0x7f0000000400)) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m32.073690214s ago: executing program 1 (id=1840):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44041}, 0x44090)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0)
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4040091)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
syz_open_procfs(0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x77, 0x101341)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0xda04, 0x3, 0x0, 0xfefa, 0x0})
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000280)={0x0})
write(r4, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000004099c61", 0x53)

4m31.943829767s ago: executing program 1 (id=1841):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x474c, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f00000000c0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/33, 0x21, 0x2a}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

4m16.704018491s ago: executing program 33 (id=1841):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x474c, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f00000000c0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/33, 0x21, 0x2a}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

2m51.772476028s ago: executing program 4 (id=2343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x45e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004095)

2m51.619910597s ago: executing program 4 (id=2344):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000001700), &(0x7f0000001740)=0x4)
symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00')
socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000000640)="2700000015000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff)

2m51.576109823s ago: executing program 4 (id=2345):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0)
sendmsg$802154_dgram(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000141, 0x0)

2m51.495155921s ago: executing program 4 (id=2346):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0xc000)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002023a5d40f905ffff9f61810203010902120001bd001002"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x2, 0x4, 0x6d}, 0x7a)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x48004)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m50.229978555s ago: executing program 4 (id=2348):
r0 = syz_create_resource$binfmt(&(0x7f0000000340)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000600), 0x2000413, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) (async)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) (async)
umount2(&(0x7f00000006c0)='./file0\x00', 0xc) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e40), 0x900, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x3401)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x1}, 0x8, 0x4, 0x8, 0x0, 0x5, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000740)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
write(r5, &(0x7f0000000800)="3db06f43e61edc023510a46dd6", 0xd) (async, rerun: 32)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="0000080001007f000000140000004500007f00000000000190700a010100ac1414aa0b00907800040000472600ff006400070104000200000000000000000703f389176cac1414bbe000000100010707d3ac1e0101071392ffffffffac1e0001ac1e0001ac1414aa4408e1b00000000586060000000383034f000000c1a4fb427747af9958c136d0d3c34e8f53fbbf8c2fead403e0b19f835ce39ddf8f15f8ecbb0cf68578118fd5e9eedaf28155dae1efb5510484b5b14f4c6b2fd72cd2846873db29a1843b192a9a811c1b5e471b73054c83af"], 0x8d) (async)
ioctl$NILFS_IOCTL_GET_VINFO(r7, 0xc0186e86, &(0x7f0000000240)={&(0x7f0000000200)=[{0x2, 0x15bc, 0x5, 0xcc}, {0x5, 0xfa6, 0xc0c, 0x7}], 0x2, 0x20, 0x9, 0xe}) (async)
syz_usb_connect$uac2(0x5, 0xa0, &(0x7f0000000100)=ANY=[@ANYBLOB="120110030000004082054c0040000102030109028e000301053009080b00010107208c0904000000010120000924010040041500070c24030207030004000700810904010000010220000904010101ff030000090501", @ANYRESDEC], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000ec0)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async, rerun: 64)
r10 = socket$kcm(0xf, 0x3, 0x2) (rerun: 64)
sendmsg$inet(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="0212000902000000e4a17c45c85686605e", 0x11}], 0x1}, 0x0) (async)
r11 = syz_usb_connect(0x5, 0xbca, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0x8b, 0x2a, 0x58, 0x40, 0xb05, 0x9200, 0x9e52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb8, 0x4, 0x81, 0x6, 0x1d0, 0x8, "", [{{0x9, 0x4, 0xe5, 0x0, 0x8, 0x1e, 0xf0, 0x84, 0xf7, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "014c5dc9"}, {0x5, 0x24, 0x0, 0xf1d3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0x5, 0x7}, [@country_functional={0x10, 0x24, 0x7, 0x70, 0x9, [0x3, 0x2, 0x8, 0x2, 0xe17d]}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xb07, 0x2800, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}]}], [{{0x9, 0x5, 0x2, 0x4, 0x200, 0x9, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3d, 0x6}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0x0, 0x5, 0xf, [@generic={0xac, 0x2, "93539d16cd4f6654afc15f60a59e4eb38db8e596d8cc05d41afb3f9e1c4be1148a98952432f41bc9059f610979b9a4c9b759e190f0cf2c69a01735282db486a16d31ebfe7bcf68e93f814e8bb4aadd9d92d1c2680aab285c99e4f2a2e90ca31891b0a79b290ade077be7bdaed86c6ff21682d5e834e2947d5a3dbc4189c7ba4a28589ff22f03ab74ee93955eb02416bb0fae0d3f2dc98be7971789ca82976e89a725d9aff502701521fb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0xbd, 0x27, 0x7, [@generic={0xb9, 0x21, "2268e238ddd0758ea4097c76bd500f87b154410830680454c1d36afa2684447c1a55f2336193b17a80f1233935d7d92ff8eae771cb20a67c19a49a373d9b6f4c2343489abdb8a9f6fda821cf3687b76519bee44850c15d9492ce845ed4301813430eb37be6a059d23ea122f83614082d3197901888ea6e08a3bce81e4606dcf90580932ddc2a7a220049af3946f5ff4b6004460ad55d61ad02da63b4ec7242ffe36c97b82455bc50d2c92f78571fd4e6d73c91e4f0e0f2"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xe, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x264b428644f16a60, 0x5, 0x8001}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x64, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x2}]}}, {{0x9, 0x5, 0x5, 0xc, 0x7d7, 0x9, 0xf2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x80, 0x8}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xb4, 0x4, 0x0, [@generic={0x37, 0x5f8ec7938fa42253, "e9900d565749a003dcdfa8fed99b8f6d7b46c50315d347cf6b28f4662a0ae56bdfd71b52cc91bc957c62122b4c0cafee4d8371d774"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x6, 0xfc, 0x7, [@generic={0xbe, 0xb, "42f11eecf99e345f8826a3ca5710b3c6924ffd68162a90553d2386d8dad5a244a16a09d66ef9f781717deb61f4b193c2e894cdf8138c4452e49bc448382a236af1fc64782027de5b7e71fae0441e5336ea7c47b529b30a724a2984f52dda9c35cdadb519d2822d6bd2b3d9aa22fc02ba2b2149f22c2761cc042ae1a10c79d1765be52df61f5971e114ffe2f29e49dcb61578f94f2e34fb1e6316b4351609311b15778c79f9ad0c5638c93f886a4d6f7bda427bf712721e65aab1f08e"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x88, 0x5}]}}]}}, {{0x9, 0x4, 0xff, 0x40, 0xf, 0xb4, 0x42, 0xed, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "20df"}, {0x5, 0x24, 0x0, 0xd8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x8, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x94a}]}], [{{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x3, 0x8, 0x7, [@generic={0x33, 0x31, "0752ff30f9aa891bddfbedc64eec1fa11d432482458a4893e309b4d2c95004a5651b1e2b85623681620e45ffa743950b31"}, @generic={0x6c, 0xf, "55b505f42973aefaabbaa642775acab4881ab3a3cf949b25f97dfdb61b0ba18c1d4c6cfc748d06a63c331481685dc5b20af9a1ccc04ae76c09059466186d2afe17eda3baea7759b27d0544511e4f6d997163d519d8358a1a06a34647660356280659e3febf6f1e1d080a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x9, 0x7f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb2, 0x8000}, @generic={0x8e, 0xe, "3150ed8daeda8fa38ddf617d80813ba000c8edcb18a0b5ee5a74c44ef52f01511d94a12e1b332ef445ec322c65def70a97a4daee58b89b3fb46386944dd9dc590e2042e289255f5cd91f0ba10f26c179638c4d68216811784b21a8fba527a04f08e43307ccbbaffc9e455f9c605fb4606cdf954a679734d38690498618c5d38af614ab2540128786ed2f9179"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x95e3b42901e98641, 0xfc, 0x9a, 0x4, [@generic={0x3b, 0x10, "ae2d35a1dea8aadfe086ebfc23b344e50285abe963c4299f49019224a01a338044cbc39900be14830b87d1d4a0b84d2be08dcd0db9b4ed668e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf0, 0xa9a}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x4, 0x8a, 0x68, [@generic={0xc5, 0x7, "9490a87b74acc45e1598050a595a319ac2d286bdbefde7ebfab06bb108ac29d0095f88b8b55d0bc1c51be3133ae177f78e0315981cebe7dfea093b7bb7d1712271d3ec5fc9125fe4156a2f4406b2689813475e466aedd8c677716ee933037f3ad2a2f6c1c1514400cbc65d55ac0933b9d90ce7a82357f929b4f4be44e919f9c16d6dbc69702ad2651533700217f823f2f753fa3f27b835c921db2f4c994eec573b51a0843d67e8b59721d0e2e1c2e0ba54a31e41ec8730f4d2d16ad633d396eb684d84"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xc, 0x2, 0x4, [@generic={0x4a, 0x2, "f922758b5a0feb2c9463de705467d5583c3f42fd429b9a1ea501ec35d0d3e34c305ca61d185992ddd00c6ad43dde65715f186aebbf3fb7e1ccef0a35c1b3200a66819620b10bea05"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0x4, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x94, 0x338}]}}, {{0x9, 0x5, 0xf, 0x8, 0x601, 0x0, 0x1, 0x1, [@generic={0x83, 0x5, "5bac074e8030b81002d32a97737000252a7a51120df5aaa957d0105359bef312a472c5377e4dfb9c584b920a8245c378af09bcda4129e7578663e330f082e58bfb7c0f29c66b7e7a064a58ffc86e94b04afdff3f522a4f141f18bc28fbb4992c74426c715f277770137c5863c410179efae9c5ff32cef9ef84c14ada20a5c99ff1"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0x4, 0xd0, [@generic={0x1b, 0x21, "6ac9b16a6dcd75e5d9edafe1c436c27c515922ff272a50c11c"}, @generic={0xcb, 0x21, "f27ebb8da76784affd66c5fac2778ae1155ac8689373116434acdaa359426d03609ba6c3a3d7df98ea4bf48e8f6b8698bd07012d34c852f4d71ed03873446016e91f0af46b07b19d724984cec6f19fa2430652656a1566c1e67cbf52ddd453ff556003ca2d65a59c35fc6befec730c3f8572445378ef012ce8dadb21f07599e96e7f87d528437c25b2b3b2d94ba29bcb145536b03b190f19eeb1e5b4d774fb32f5e2f8777d9ed3db18fb73614331914ea4e61344cc1194f6395503b12aa70810aecd14c9d539ec040f"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0x10, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x8}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x10, 0x9, 0x2, [@generic={0x14, 0x22, "27c367de33b405f7383d0220c149feb4241d"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x240, 0x8, 0x80, 0x8, [@generic={0x8f, 0x30, "049ff25d461a7b80114bedf6ff4d40db9066ed1694b691c90fe7ddcdf90d2e2175d8942d3306a9e4a1cd39097942cf90343aba0efd0d9d3d38b652c258068bcbd747287f4bd8d1ba02320a04b29e9e3eeda9203b3e3a9340c3f2a9811d52020636523571b0784dde33f2af3ecdea9937f1958a8f8a44fff52f44da11fe8e7491fe044bbbc4e8811f9799819d2b"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1a, 0x7}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0xb, 0x6a, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x2, 0x7, 0x6, [@generic={0x8e, 0x22, "208d044513925b6a026c82d26d10c71207f1e67ab3f19b833d0fcf025b69ab06760d4380417bd3c278d815a7084324daff7bc9636b6c682a4bd15aa8d5e419af73c61d529d733038c0a1364ad0be68030d03d42b6e76abfab3d8412595bf434fd91cbd215589c824a9a7f6a4f0a458bf87fd25b65392a1c7fd8172b305d163b7db0de574b9cd1f65bb7e535c"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x4, 0x7f, 0x2, [@generic={0x3, 0x21, "02"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x100}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0x2, 0x6, [@generic={0xeb, 0xf, "9613eeb074a265c870dc73ce01de8f850b4c0546f4d202a16719a3d893b99776c7a102109af643c7fd53a12825cade0f7b22a00c3401183ae621c832e030603d2e397422b4f680cbfbb6da35685242d8ff1ccb035ade8061173f76d586701fcdc609f7ec7644f94c6270101fe792043ea09d7509fdccae68d738781d2934b2a095f3983e32a076bf23f7e8d13557916f543d8eefc53a6f6fc10ab09329dd6591ebe1b7ca15860728dffd4de39118457883995ab0579169e2137a8637e5438ea593a0b1329e6503e7eeba067e5f59eaaf320595eb6c4018faa255f9b3c4463651a8ffb44cb1561b1a94"}]}}]}}, {{0x9, 0x4, 0x88, 0x81, 0x1, 0x37, 0x71, 0x4f, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xfaa6, 0x1e}, [@processing_unit={0x8, 0x24, 0x7, 0x4, 0x2, 0x3, "aa"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x2, 0x5, 0x2, 0xf5, 0x6f}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0xf2, 0x1}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x40, 0x3}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0x6, 0x96, "ec"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x1, 0x9, 0x1}]}], [{{0x9, 0x5, 0xf, 0x10, 0x200, 0x3, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x2}]}}]}}, {{0x9, 0x4, 0xe0, 0x6, 0x3, 0x3e, 0x55, 0x4b, 0xcb, [@uac_control={{0xa, 0x24, 0x1, 0x47dd, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x4, 0x5, 0x9}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x4, 0xd, "42fb3f"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x9, "1a82"}]}], [{{0x9, 0x5, 0x5, 0x2, 0x200, 0x3e, 0xf1, 0x8, [@generic={0x18, 0x8, "c717981bc5a6b01c602c63dd77a24b55e55d5b98624c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x3, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x4}, @generic={0x45, 0xe, "31adb622fbd8db8f7cfab6f03af6971054e24ef4aa9937932238da3630b0a637bdeff161c395d56b63543372c950a9c9285c5b8ff3a73226ada476b5944fb4266daf3b"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x9, 0x1, 0x8, [@generic={0x6f, 0x8, "0b29183a7fb5c9d03d6d90af07fea21a10b61229e9fa96660b647410c35ef4bca2082ec6ad041cdf6e133364fb193793bdfa99d3e730979cccf08290565ad71cb829ef9a7cadd6c8deb7fd0fb5902f05fe5cf3262a5e0c870436a921cc3e97097fe887a222682de28eb62a7d26"}, @generic={0x23, 0x23, "2649a505bdb4b289c1eb9bf80babb0bdc1b57ab6ff1383b6f7a4fe0a4f31e2f498"}]}}]}}]}}]}}, &(0x7f0000001ec0)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x201, 0x81, 0x5, 0x9, 0xff, 0x7}, 0xb3, &(0x7f0000001b40)={0x5, 0xf, 0xb3, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x4, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3b, 0xbf, 0x40, 0xda3, 0xf}, @generic={0x75, 0x10, 0xb, "1b1bdd3aaf0f4442c20d1b63961244c4898ea5ad8eb6706ccf23288146d3762e170e6fcc10952adc150401cae82b5a009d037f14415732b6130a171165c602809e73601f4bf336c44e12fae0a10a44ff6df40fd4fcac0467f1e3ddc0b4c57acd0d4263c44b5b0e58ebbc41e3b443cd95a596"}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0x0, 0x2, [0xff0000, 0xc000, 0xff00c0, 0xc00f, 0xff0000, 0xff00]}]}, 0x7, [{0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x8f, &(0x7f0000001c40)=@string={0x8f, 0x3, "f2c8ad4b0d7f3f04a473d40da8b887bfa45fe7d004cd63d7219ee84eb414b5826c601f16566f79188a29471e3572302855cde8b350089eec632d83eede3deaea95f9629c00282cd8646f6b40f94d4ffc37dbe11899cf875245529ba7d1ac39380426891999e54b15dfa5e6426e5a973358a3b81335266a412d4d7a167c86758a61755b16684e12a03ae02d800e"}}, {0x4, &(0x7f0000001d00)=@lang_id={0x4, 0x3, 0x100c}}, {0xc, &(0x7f0000001d40)=@string={0xc, 0x3, "cf9335ff8eb0ce42441c"}}, {0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x6d40d92a73b2ea20}}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x3409}}, {0xba, &(0x7f0000001e00)=@string={0xba, 0x3, "e1c3f85ec4aa959dc030fbb49f43b3b05011cb0da4ee909ec225c75f370bd911ef2240d7d00df6b14a0c28a70363f71730b39f80a365f32607e7d4b63821cde2b4f8566c8536e2a4755325b2b2af0c022ad034d988f708fbb1370d55c65b96183e5890027b2a823406bd954f84af81791e8ef3ded5b95b4c4c00b0df9cf74e2e09c61dc6747a7c733b315d221a3140bbc045a729250331ad5b295cd2a7954ddc5f82fc76e52e064d88d1e9bc37218bb6641060ee5d4677e9"}}]})
syz_usb_control_io$cdc_ncm(r11, &(0x7f0000002040)={0x14, &(0x7f0000001f40)={0x20, 0x7, 0xa4, {0xa4, 0x22, "40ea348aaea86f530a8c184c8e8c75e6210f87db03d9f96c33a57c5296c57893546247fc91162158ca8feddcae40c0de3c62582710f6a1b87233e214f60b22ddc2edc0307e83253cc4966144bfd6f5f3e60ebfb755187753926a81040edc91f8ea157132ec7a1c3421adcce0e1f35e4f74198be124abdcaa81adc306293e81163fbf7279058125828efb03c604ec75cbe6e1612c57fc01f9dd19eb3d318ca0a94135"}}, &(0x7f0000002000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002280)={0x44, &(0x7f0000002080)={0x0, 0x11, 0x27, "785342de2b828fdd46bed9f0159163418356f67e98c3cd7ea6569ec9beeda455018104c53d206b"}, &(0x7f00000020c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002100)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002140)={0x20, 0x80, 0x1c, {0x8, 0x2, 0x4, 0x8000, 0x3, 0x4, 0x7b54, 0xc24, 0x5, 0x0, 0x400, 0xfff7}}, &(0x7f0000002180)={0x20, 0x85, 0x4, 0x1}, &(0x7f00000021c0)={0x20, 0x83, 0x2}, &(0x7f0000002200)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000002240)={0x20, 0x89, 0x2}}) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(r10, 0x8004f50e, &(0x7f00000004c0))

2m48.561410074s ago: executing program 4 (id=2359):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000c00)={0x40, 0x0, 0x2, "e676"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, &(0x7f0000000d40)={0x2c, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="00034400000004032008"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000380)={0x5, 0x7})
capset(&(0x7f0000000d00)={0x19980330}, &(0x7f0000001180)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6})
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0))
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x19, &(0x7f0000000240)="b9425bd02396754b7e172ce23a8706b66c78dd26900030fd10")
read$char_usb(r3, &(0x7f0000000280)=""/253, 0x18)
read$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x24, &(0x7f0000000700)={0x20, 0x21, 0x83, {0x83, 0xa, "ed5ffde68ea21bb1f00ca2152d4dd1297f57039bdef45affe55948a6a4aaec1995c6519d21ded56d5890b41d9e2c3605db34be0932ee7b8e56db1b8e1eeb709826ac0ffe5cc8346f92702c6577b80da8abe0fb8e7d1a974a8be20c37edd03565371eb65c30d315ff7fc6a6dcdf73f63b9c2f491bab4dcd17452d39909937f9f2ca"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000800), 0x0}, 0x0)
r4 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014d07df40cc05507d4a0102030109022400027f1c210ffaf9c8070000000000000069f7e323eb176e2400000000a50722505ec2e8016a08"], 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
syz_usb_control_io(r4, &(0x7f00000009c0)={0x2c, &(0x7f0000000400)={0x20, 0x7, 0xc7, {0xc7, 0x4, "766935577e8fa9621fe8d5b9ca48e537b22ae2e081067692d10b7b85b624f60a570cb862a359fb606ac243fcbcb25f53122834274fb990cccba06f644f0b85ccebbc8f99670e12cada4ff7669294c4cda581701ce2e075ab5edf93c60381abefb1b316aea3f83c5440bc4322d67c5e427c1e769b7c134b3f4a1fd2c2c62577179d1138513e2532c7735a564945a070c738c2f65eb5550044824f013c1925dba5005d687f6bd48376479e8a328ee63f30eec8100492a6daebd1fd724f0d6d40389f563de4a9"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f00000008c0)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "0ae9c18601e14c64387b9a0f4d76e273"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "786eda653c230d050ae1b4c93ed1c37e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x4, 0xfdcc, 0xd9}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x3ff, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x9, 0x9, 0xf, 0x9}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0xff, 0x7, "9a66643b", "7e500502"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x1, 0x0, 0x8, 0x6, 0xc000, 0x2}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000a00)={0x0, 0x8d336662ad6a6fef, 0xf, "21e750bfa24b06c773b29d1e0b6b82"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xf]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "d425"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @random="987660450e1f"}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "1fa4"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x3f9c}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x6}})
write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250)

2m32.525732567s ago: executing program 34 (id=2359):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0)
r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000c00)={0x40, 0x0, 0x2, "e676"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000c40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, &(0x7f0000000d40)={0x2c, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="00034400000004032008"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000380)={0x5, 0x7})
capset(&(0x7f0000000d00)={0x19980330}, &(0x7f0000001180)={0x0, 0x0, 0x3, 0x1, 0x80000001, 0x6})
mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000011c0))
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x19, &(0x7f0000000240)="b9425bd02396754b7e172ce23a8706b66c78dd26900030fd10")
read$char_usb(r3, &(0x7f0000000280)=""/253, 0x18)
read$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x24, &(0x7f0000000700)={0x20, 0x21, 0x83, {0x83, 0xa, "ed5ffde68ea21bb1f00ca2152d4dd1297f57039bdef45affe55948a6a4aaec1995c6519d21ded56d5890b41d9e2c3605db34be0932ee7b8e56db1b8e1eeb709826ac0ffe5cc8346f92702c6577b80da8abe0fb8e7d1a974a8be20c37edd03565371eb65c30d315ff7fc6a6dcdf73f63b9c2f491bab4dcd17452d39909937f9f2ca"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000800), 0x0}, 0x0)
r4 = syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110014d07df40cc05507d4a0102030109022400027f1c210ffaf9c8070000000000000069f7e323eb176e2400000000a50722505ec2e8016a08"], 0x0)
r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
syz_usb_control_io(r4, &(0x7f00000009c0)={0x2c, &(0x7f0000000400)={0x20, 0x7, 0xc7, {0xc7, 0x4, "766935577e8fa9621fe8d5b9ca48e537b22ae2e081067692d10b7b85b624f60a570cb862a359fb606ac243fcbcb25f53122834274fb990cccba06f644f0b85ccebbc8f99670e12cada4ff7669294c4cda581701ce2e075ab5edf93c60381abefb1b316aea3f83c5440bc4322d67c5e427c1e769b7c134b3f4a1fd2c2c62577179d1138513e2532c7735a564945a070c738c2f65eb5550044824f013c1925dba5005d687f6bd48376479e8a328ee63f30eec8100492a6daebd1fd724f0d6d40389f563de4a9"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f00000008c0)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "0ae9c18601e14c64387b9a0f4d76e273"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "786eda653c230d050ae1b4c93ed1c37e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x6, 0x4, 0xfdcc, 0xd9}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x3ff, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x9, 0x9, 0xf, 0x9}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0xff, 0x7, "9a66643b", "7e500502"}}, &(0x7f0000000980)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x1, 0x0, 0x8, 0x6, 0xc000, 0x2}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000a00)={0x0, 0x8d336662ad6a6fef, 0xf, "21e750bfa24b06c773b29d1e0b6b82"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000dc0)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xf]}}, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000e40)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e80)={0x40, 0xb, 0x2, "d425"}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0xffff}, &(0x7f0000000f00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000f40)={0x40, 0x17, 0x6, @random="987660450e1f"}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "1fa4"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x3f9c}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001080)={0x40, 0x21, 0x1, 0x6}})
write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250)

2m31.960457384s ago: executing program 5 (id=2385):
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_connect$uac3(0x3, 0x11c, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x2, 0x99, 0x40, 0x8, 0xd7}, 0x53, &(0x7f0000000240)={0x5, 0xf, 0x53, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xfe, 0x1, 0x9f6}, @ss_cap={0xa, 0x10, 0x3, 0xa0be109ffc05088b, 0x0, 0x4, 0x3, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "be1a77597a3a35f7c123fb67ddc24d1a"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x8, 0xfb, 0xef2, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "7252dc4d90861a570c2e3ca4a3eb574e"}]}, 0x6, [{0x8d, &(0x7f0000000080)=ANY=[@ANYBLOB="8d03d6fcfee3ba0ac529f05b42b805f84eadff2975dcb35f5086dab0e1d7284fa3dc00335437c14305297e14afe9dbee209c62f1d0344fca120d67642635f5eb67ad748763228d8be35c336dd583712c77fcae6ee09aabd5448546240a7e02827db40f39620f9a0284cf19dea6496c0a65e63679fa1436d5c916318e8e5332fe5709ccac666dc9e01e409bda003d009e1438ed878ea4b26026f9338d72e28721e0812cfa6f1c9ab4a0ad049fb6e78d7d5f559383dff4d15929b2a138141904d2"]}, {0x9f, &(0x7f0000000dc0)=@string={0x9f, 0x3, "913e9bc9ad1a6bc138c1b83f068564cb52cfe49a9da9a98c12f195f4353b219b8bb165242be9ea3e7534c5ded42e3a96abf327d017776ee776b72f61d269e9093af97403c155ac2cb1e209be7e6ae8a4282a2249e7af73dec13674bcecd7cad2ea36865f4c438f0711104974cc82b490106ad374192b41a93a720ad00d0d82ee16faa77f30c504e7080dc0b737b4d1a2a9e293f3edf845e04d1346ce65"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1419}}, {0x81, &(0x7f0000000480)=@string={0x81, 0x3, "9ebe8b7fb15ee111198ae74980bb1b17aac4f9c6ad92851b6bffe8c9fe642b7e61cddc776cb78417a01921b782a4fe8404e07bea89473147e2a789f509b4b27652f256529e173203fc60e693748b22a2f851528217d474930e6189f749ababbb4e2641e20408ac86d8873f78a607a72631b1750bc81f303d9e77be6cd721c5"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc09}}, {0xcd, &(0x7f0000000580)=@string={0xcd, 0x3, "13b4358bf486b79fd6e6aa6da27f8ca09e5666271446abaf23cb45286d997ee4b66ee42928dd4cc582f0270431b3c09c0557f2d7f612e5e6a3b20514417edb93610e3e55e3b4f029b153c4ec23feb3db1ff4c4ec18c6c60d36165079c4060ebe8a58fcd7e587f8e4870eb6e610410b5b7f224663c171c90ca4d38b8961d92aa4f71e92b3005897e1769177ff0ce1f2afe086a8d142f6c78c9c2116506e854ec037aa0c048eaa9310b6b8668d53e6087031718295b165e82b1570d6f1f4a5cf45c91781ed10e6e32775c77f"}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./mnt\x00', 0x1ff)
mount(&(0x7f00000007c0)=@filename='./dev/sda1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000840)='ext4\x00', 0x8410, 0x0) (async)
mount(&(0x7f00000007c0)=@filename='./dev/sda1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000840)='ext4\x00', 0x8410, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f0000000d40)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000d80), 0x4) (async)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000d80), 0x4)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000880)='./file0\x00')
open$dir(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x82) (async)
open$dir(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x82)
setns(0xc9, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000a00)={0x18, 0x0, {0x0, @remote, 'wlan1\x00'}}, 0x1e)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000a40)=0x808, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000e80)='./debug/tracing/options/context-info\x00', 0x800, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./debug/tracing/options/context-info\x00', 0x800, 0x0)
read(r2, 0x0, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000a80)=0x152, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000a80)=0x152, 0x4)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x40000000000010a, 0x24000000) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x40000000000010a, 0x24000000)
recvmmsg(r3, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x3c70c245}], 0x1, 0x40002042, 0x0)
bind$inet6(r1, &(0x7f0000000b80)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f0000000bc0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x40000)
shutdown(r1, 0x1)

2m30.319345676s ago: executing program 5 (id=2387):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x7})
r0 = msgget$private(0x0, 0x2)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
quotactl_fd$Q_QUOTAON(r1, 0x3, 0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYRES32], 0xdf, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000000c0)=0xfffffffe, 0x4)
syz_usb_connect(0x3, 0x24, &(0x7f0000003200)={{0x12, 0x1, 0x0, 0x14, 0x1d, 0x23, 0x8, 0x93a, 0x10e, 0xa584, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7c, 0x81, 0x0, 0x4, "", [{{0x9, 0x4, 0x1b, 0x6, 0x0, 0xcd, 0x88, 0xe0, 0x80}}]}}]}}, 0x0)

2m29.502789239s ago: executing program 5 (id=2390):
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = fanotify_init(0x1a, 0x1)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x124)
fanotify_mark(r2, 0x541, 0x1023, r3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

2m29.094848735s ago: executing program 5 (id=2392):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x4f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
lsm_list_modules(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0xc)
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)

2m28.79581844s ago: executing program 5 (id=2393):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'wlan0\x00'})
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r2, 0x4004480d, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000002c0)={0x3, 0xcad, 0x30, &(0x7f0000000280)=""/48})

2m28.312905667s ago: executing program 5 (id=2397):
semop(0x0, &(0x7f0000000000)=[{0x0, 0x7, 0x1000}], 0x1)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@id, 0x10, 0x0}, 0x0)
connect$tipc(r0, &(0x7f0000000180)=@name, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0)
r2 = semget(0x0, 0x2, 0x204)
semtimedop(r2, &(0x7f0000000040)=[{0x4, 0x81}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700})

2m27.201005733s ago: executing program 35 (id=2397):
semop(0x0, &(0x7f0000000000)=[{0x0, 0x7, 0x1000}], 0x1)
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)
sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@id, 0x10, 0x0}, 0x0)
connect$tipc(r0, &(0x7f0000000180)=@name, 0x10)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0)
r2 = semget(0x0, 0x2, 0x204)
semtimedop(r2, &(0x7f0000000040)=[{0x4, 0x81}], 0x1, &(0x7f00000002c0)={0x0, 0x3938700})

2m13.917087332s ago: executing program 2 (id=2423):
r0 = timerfd_create(0x0, 0x0)
syz_io_uring_setup(0xf00, &(0x7f00000000c0)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0))
syz_io_uring_modify_offsets$generic(r1, r2, 0x54, 0x10000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./mnt\x00', 0x1ff)
mount$nfs(0x0, &(0x7f0000002340)='./mnt\x00', &(0x7f0000002380), 0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=0'])
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00')
read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2020)
r4 = syz_open_procfs(0x0, &(0x7f0000002280)='fdinfo/3\x00')
read$qrtrtun(r4, &(0x7f00000022c0)=""/57, 0x39)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd)
getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000007802"], &(0x7f0000000080)=0x2a0)
r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0)
syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x121002, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b160000000000000000020000082c00048028000180080001006f7366001c0002800800014000000004"], 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000002580)=@arm64={0xf2, 0x7, 0x0, '\x00', 0x8001})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000025c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xd, 0x10010, r5, 0x52dc3000)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

2m13.137374459s ago: executing program 2 (id=2425):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x18084, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file2'}}, {@metacopy_on}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000080)='./file2/file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpu.stat\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0xffffffffffffff0e}, 0x800)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x28, 0x3})

2m12.930143755s ago: executing program 2 (id=2426):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0xd00, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000000440)="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"})

2m12.671796277s ago: executing program 2 (id=2427):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x20, "", [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x9}}}}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = fsopen(&(0x7f0000000500)='iso9660\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000540)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c0015005b073500", @ANYRES64=r2], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x9)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x0, "0000d220"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0)

2m11.917211849s ago: executing program 2 (id=2429):
socket$inet(0x2, 0x2, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0x4004480d, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000002c0)={0x3, 0xcad, 0x30, &(0x7f0000000280)=""/48})

2m10.729312864s ago: executing program 2 (id=2431):
socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040))
r1 = syz_usb_connect(0x2, 0x239, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

2m9.923165563s ago: executing program 36 (id=2431):
socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040))
r1 = syz_usb_connect(0x2, 0x239, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)

37.982234264s ago: executing program 8 (id=2720):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000900)='/dev/comedi4\x00', 0x90680, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0x6411, 0xfffffffffffffffe)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000940)={{r2}, "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"})

37.897040023s ago: executing program 8 (id=2721):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x7)
ioctl$KVM_TDX_FINALIZE_VM(r6, 0xc008aeba, &(0x7f0000000180))

37.535878696s ago: executing program 8 (id=2727):
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000004c0)={0x2e, 0x64, 0x0, <r4=>0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x118) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x118)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x404, &(0x7f0000000bc0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async)
mount$fuse(0x0, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), 0x404, &(0x7f0000000bc0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r9 = dup(r7)
syz_io_uring_complete(r1, r2) (async)
syz_io_uring_complete(r1, r2)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x80400, 0x0)
ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0xda)
mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x40, 0x0) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x40, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000740)='./file0\x00', 0x2200, 0x1)
unlink(&(0x7f0000000780)='./file0\x00') (async)
unlink(&(0x7f0000000780)='./file0\x00')
mknod$loop(&(0x7f00000007c0)='./file0\x00', 0x208c, 0x1)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000240)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000240)={0x6, 0x2, 0x4, 0x1, 0x10, 0x8, 0x0, 0x9, 0x0, 0x8}, 0xe)
shutdown(r11, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f00000002c0)={<r12=>0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000640)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000680)={r12, 0xfffd}, 0x8)
syz_ublk_setup_queues(r9, r6, &(0x7f00000006c0)={0x0, 0x0, 0x4000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc8f, 0x2, 0x1000000, 0x10000000, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8, 0x400, 0x2f5, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x2, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, r4}, <r13=>0xffffffffffffffff}], 0x1, &(0x7f0000000540)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r5, '\x00', {0x1, 0x6ec, 0x0, 0x0}}, 0x0)
r14 = socket$can_j1939(0x1d, 0x2, 0x7)
mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x2000000, 0x10010, r13, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r15=>0x0})
bind$can_j1939(r14, &(0x7f00000000c0)={0x1d, r15, 0x1, {0x0, 0xff}, 0xfe}, 0x18)
sendmsg$can_j1939(r14, &(0x7f0000000180)={&(0x7f00000001c0)={0x1d, r15, 0x7, {0x0, 0xff, 0x2}, 0xff}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80d0) (async)
sendmsg$can_j1939(r14, &(0x7f0000000180)={&(0x7f00000001c0)={0x1d, r15, 0x7, {0x0, 0xff, 0x2}, 0xff}, 0x18, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80d0)
setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108) (async)
setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e32, @loopback}}}, 0x108)

37.384990739s ago: executing program 8 (id=2729):
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys\x00', 0x1ff)
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0)
recvfrom$inet6(r1, 0x0, 0x0, 0x10000, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0))
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000ac0)={'dummy0\x00'})
write(0xffffffffffffffff, &(0x7f0000000b00), 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000200)={{&(0x7f00008d9000/0x3000)=nil, 0x3000}})
close(0xffffffffffffffff)
r4 = openat(0xffffffffffffffff, &(0x7f0000000b40)='./sys/class/net/bond1/bonding/mode\x00', 0x404344, 0x5)
write(r4, &(0x7f0000000b80)='balance-al', 0xa)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./sys/class/net/bond1/bonding/slaves\x00', 0x2, 0x0)
write(r5, &(0x7f0000000c00)='+dum', 0x4)
close(r5)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000c40)="626f6e643100000000000000000000000100")
ioctl(r0, 0x8983, &(0x7f0000000c80))
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0)

36.531414095s ago: executing program 8 (id=2733):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40203)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000700)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000740)="2a000200010078", 0x7)

36.322714732s ago: executing program 8 (id=2735):
getpid()
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
mount(&(0x7f0000002780), &(0x7f00000027c0)='.\x00', &(0x7f0000002800)='tmpfs\x00', 0xa145cf, 0x0)
r4 = syz_pidfd_open(r1, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000140)=[{r2, 0x4000}, {r3, 0x8000}, {r2}, {0xffffffffffffffff, 0x3180}, {r3, 0x2000}, {r3, 0x200}, {r3, 0x100}, {r4, 0x6}], 0x8, &(0x7f00000001c0)={r5, r6+60000000}, &(0x7f0000000240)={[0x5]}, 0x8)
sync()
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002840)='mounts\x00')
read$FUSE(r7, &(0x7f0000002880)={0x2020}, 0x2020)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r9, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5b3e, 0x49}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x20000014)

21.27776114s ago: executing program 37 (id=2735):
getpid()
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, <r3=>0xffffffffffffffff})
mount(&(0x7f0000002780), &(0x7f00000027c0)='.\x00', &(0x7f0000002800)='tmpfs\x00', 0xa145cf, 0x0)
r4 = syz_pidfd_open(r1, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000140)=[{r2, 0x4000}, {r3, 0x8000}, {r2}, {0xffffffffffffffff, 0x3180}, {r3, 0x2000}, {r3, 0x200}, {r3, 0x100}, {r4, 0x6}], 0x8, &(0x7f00000001c0)={r5, r6+60000000}, &(0x7f0000000240)={[0x5]}, 0x8)
sync()
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002840)='mounts\x00')
read$FUSE(r7, &(0x7f0000002880)={0x2020}, 0x2020)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r9, 0x5, 0x0, 0x1, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5b3e, 0x49}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x844}, 0x20000014)

10.645887437s ago: executing program 3 (id=2907):
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x8010, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=tcp,port=0']) (fail_nth: 5)

10.421373026s ago: executing program 3 (id=2910):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00')
exit(0xffff)
read$snapshot(r0, &(0x7f0000000100)=""/149, 0x95)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/i2c/devices/i2c-0/name\x00', 0x0, 0x0)
read(r1, &(0x7f0000000540)=""/100, 0x64)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/bus/i2c/devices/i2c-1/name\x00', 0x0, 0x0)
read(r2, &(0x7f0000000600)=""/100, 0x64)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x25)
mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1600019, 0x0)
chroot(&(0x7f00000003c0)='./file0\x00')
umount2(&(0x7f0000000400)='./file0\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='1', 0x1)
syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404c17aa5600010102030109025100010100c032090400000208065000070501020002000705820200020009040001050806620007050102000200032401070502020002000324020705030200020003240307058402000200032404"], 0x0)

9.553947978s ago: executing program 7 (id=2922):
r0 = fsopen(&(0x7f00000001c0)='virtiofs\x00', 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000005c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000800)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000840)={0x1, [0x0]}, &(0x7f0000000880)=0x8)
r3 = socket(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000008c0)={&(0x7f0000000900)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="01", 0x1}], 0x1}, 0xc2f1788970f1e6ef)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000009c0)={0x1, [<r5=>0x0]}, &(0x7f0000000a00)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000a40)={r5, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x80}, &(0x7f0000000b00)=0x90)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)={0x40, 0xf, 0x5, "89b5d97eac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000480)={0x20, 0x5, 0x37, {0x37, 0x22, "f66f3e06a0859521c77de722510cb4073a628198057c98e55a57b7ff3ced46b3f2f08186930e0078fd1129fd5e3e24a29e22504a78"}}, &(0x7f00000004c0)={0x0, 0x3, 0xa7, @string={0xa7, 0x3, "cebb25d36d4f6c0d8e27d0b1eb00cc66cf9837913f99ffc704445028eb88cdeb144258a04b011ce87244d29bcb9d5d13aa1907eb79fbec5ee4195f0738aa1d9cdc28669bd897403321ddb1d1d8ca73d5082283ba51794dd78ab7b705dc32982abe30ef417c8218c81767816f3f0dda696fabda73015511b1daaa4d0a4e082ea932c56f8b7ec1351707e840cbded0a96866bf0e4e801577dc811fa8e07b98f0f59d77a4f424"}}, &(0x7f0000000580), &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x954, 0x4, 0x1, {0x22, 0x660}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000640)={0x20, 0x8, 0x64, "7bf3323f971a7fb8f9fdcc2007c43fc01149abedf590eb50d9408974d8dccaf4ac4fedbc5307579dbd93bdf2e5016d746e52350fd85f58dd58b4b944a8e80c40bcacc5cbc12e0e340d78f21654712c7b1eef7249eb7efb826c8f2b069f40da2aaaa8e09f"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000700)={0x0, 0x8, 0x1}, &(0x7f0000000740)={0x20, 0x1, 0x6b, "532e4c81efe14bd2a070cfab9054177b3f86fc98999fedbd63c32a011f65fbfc953308685d08b3b6e1f396011f9ad5e319c65b80852ef0e77741dbe233664fa94d8666bc98eabf8ad2e3c26f68751934efd6645409e7e578016d95534abdbe1f6d4db1d4892d0f420f4227"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x6}})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = socket$l2tp(0x2, 0x2, 0x73)
sendto$inet(r7, 0x0, 0x0, 0x1, &(0x7f0000000b40)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10)
setsockopt(r6, 0x84, 0x81, &(0x7f0000000080)="5a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000100)={0x6}, 0x1)
sendmsg$inet_sctp(r6, &(0x7f0000000240)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="4dd878e8ca395c93c77f88fe5b9ea4a039c9f019cdb50267593fb6d8389bcc16779bbe32b25631762754aae5ac6bc7f3a9d1aa0b233f55ca0de1fa999bedacdf3085a3e6e0db03f4361defc41b4f250991f45f671279ff2f1a1597dfe29d8a00351e8092a2c6c31db7c0533beec780ddea63a9f9111f6987df26d0747542d68e4871e7fbda974ead53d74225aeaa287838c096ad0ce00278625233b1c0832a41b6b261754a68b79c9b7df157fb1aaf3bb48d84", 0xb3}], 0x1}, 0x20000000)
close_range(r0, 0xffffffffffffffff, 0x0)

7.279964793s ago: executing program 3 (id=2942):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201010102"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0])
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201500200000040532b24004000010202010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200000102200009040201010102"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0]) (async)

6.453964047s ago: executing program 7 (id=2947):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010000000000020001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

6.316460031s ago: executing program 7 (id=2949):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x100, 0xd0b})
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000100)={0x20000009})
write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "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"}, 0x109)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3e)
ioctl$KVM_TDX_FINALIZE_VM(r3, 0xc008aeba, &(0x7f0000000380))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
syz_usb_control_io$uac2(r4, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="200149"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x13a1910ebc955f11)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88010}, 0x8000)
sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x10c, r6, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004004}, 0x804)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4.264387283s ago: executing program 3 (id=2956):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4, 0x0, @dev, 0x9}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000080)=0x3, 0x4)
write$binfmt_misc(r1, &(0x7f00000000c0), 0xfe46)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x6, 0x11b, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x3, 0x1, 0x9, 0x10, 0x80, {0x8, 0xb, 0x1, 0x1, 0x1, 0x0, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x68, 0x6}, [@source_unit={0xc, 0x24, 0xb, 0x9, 0x1, 0x1, 0x7, 0x7ff}, @extension_unit={0x19, 0x24, 0xa, 0x6, 0x1, [0x2, 0x1, 0x1, 0x2, 0x1]}, @source_unit={0xc, 0x24, 0xb, 0xc, 0x1, 0x1, 0x40, 0x7}, @extension_unit={0x19, 0x24, 0xa, 0x2, 0x3, [0x1, 0x0, 0x1, 0x1, 0x3]}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x402, 0x6, 0xe, 0x100000, 0x8, 0xfffa, 0x73, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x9, 0x4, 0x10, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x1, 0x5d, 0x8}, @as_header={0x17, 0x24, 0x1, 0x40, 0x4388, 0x8, 0x5, 0x80, 0x8, 0x280, 0x4}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x1, 0x2, 0x26, "11078967"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x0, 0x6, {0xa, 0x25, 0x25, 0x7ff, 0x6, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x7, 0x8, {0xa, 0x25, 0x25, 0x1, 0x59, 0x6}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x110, 0x7, 0x7f, 0x6, 0x10, 0x2}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x55, &(0x7f0000000400)=@string={0x55, 0x3, "b7d1c984356b04bd0102ac3dd6b0e84a7711b1b683ead3192c5ca1fc03207bc6e0dcc23cf5ecfbae0a593655ddc34f3eb5d6c198d3d916ccf15c0a25832f083dba8123282bdd784bb89f374f4f7b8303ebd8da"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x200a}}, {0x7f, &(0x7f0000000640)=@string={0x7f, 0x3, "7563e8d670b8f46a8c2aa5ba4400f17d9da9d2349438a3e7ac2ba10e68df575bca8d62bb0a6fdfa14d9f7005b494c9e1e1c8f0ebd5e747ee25e912b57b5972f48968b66e7ae1e0ebffdc02573c63f39f38c7123ee6bd03f2662d2e636cb6171f01e941f3b608dc5f11fe814e63cd20119e3dbe7f8fc62cbd63a93ff0f7"}}]})
syz_usb_connect(0x0, 0x186, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x90, 0x53, 0x1c, 0x8, 0x2c7c, 0x306, 0xf571, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x174, 0x1, 0x6, 0x8, 0x80, 0x7, "", [{{0x9, 0x4, 0xf, 0x4, 0x5, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x3, 0x1, 0x10, 0x40, 0x7, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x8, 0x7, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x2, 0x9, 0x0, [@generic={0x11, 0x23, "cf348bfc8de1e7b1f0bc86e64cddd2"}, @generic={0xe0, 0x10, "77e267485742ce39ca35e59ec9f29813bdf7d67060236631dc5dc8a294120f76e50066c5bdde1a7859df9be6d26b753b9bc641a4e204240489f036ceda9dfedc8b0b674fb903718bf8fd89eaf65db6de15a740669418cacdbe7e6fa7c6126a84040148647ce8a0aa992976b4ad1cb2d812423d5293ccf6233a6f7be7b07012ad70270cd66c7f25e1cbcc4d0a93d3276535cdd1d1cd7b42d0711d83deb575ce5d6848bedfb74855cf5befa1a3d5d4e8dc44ee9e1cbc291050224165309499186c99e987933616d977d1a4c9fd03bc666af1655a286ce2b69ab382de7020a8"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0xf, 0x3, 0x55, [@generic={0x3d, 0xf, "451191be0880de977005f28a87c948a5e91611f846c2f25bfe9928c119e2680952c0b07905cb04e0712b0b8002df0bf6f6896e1a66a4182347f2e2"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x40, 0x8, 0xff, 0x7}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x200, 0x9, 0x40, 0x72, 0x10, 0x5}, 0xc, &(0x7f0000000940)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x4, 0x95d}]}, 0x2, [{0x66, &(0x7f0000000980)=@string={0x66, 0x3, "7610c1c4d402fb2e0c92df7db74fb74af01902f433556a6f8440fe8d02baf0be0aecc9a49910f35e126aa9c23d919a525f1f38ddbc954819fc045340424c65e342071390907777e5bee2dab7556443de9cf44b1eaf0da2bb850dcd5c4ac850bb62979525"}}, {0x6f, &(0x7f0000000a00)=@string={0x6f, 0x3, "fd2adac9112bf7aca8df28ab83b0fb1c10150d2022a90a73595fb7eb096a6f1bc052ab91cc3c04917f27faa3d9825dd002b2693e0e547c2704b64ba367db2b8285fbfb4d5508dfced82f901d0f2aa4e511f9d89f85c0e521031a22a7627053798f6d6edf02f4a3acf07683414d"}}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000000)={0x20, 0x1, 0x6, "cceae82237e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.199518698s ago: executing program 7 (id=2962):
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x48100, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x21, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x4, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000500), 0x0}, 0x0)
r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000680)={0x40, 0x0, 0x2, "e676"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, &(0x7f0000000780)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x19, &(0x7f0000000800)="b9425bd02396754b7e172ce23a8706b66c78dd26900030fd10")
read$char_usb(r4, &(0x7f0000000840)=""/253, 0x18)
read$hidraw(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000009c0)={0x24, &(0x7f0000000a00)={0x20, 0x21, 0x83, {0x83, 0xa, "ed5ffde68ea21bb1f00ca2152d4dd1297f57039bdef45affe55948a6a4aaec1995c6519d21ded56d5890b41d9e2c3605db34be0932ee7b8e56db1b8e1eeb709826ac0ffe5cc8346f92702c6577b80da8abe0fb8e7d1a974a8be20c37edd03565371eb65c30d315ff7fc6a6dcdf73f63b9c2f491bab4dcd17452d39909937f9f2ca"}}, &(0x7f0000000ac0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, &(0x7f0000000b00), 0x0}, 0x0)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000b40)=ANY=[], 0x0)
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000b80)=ANY=[@ANYBLOB="120110014d07df40cc05507d4a0102030109022400027f1c210ffaf9c8070000000000000069f7e323eb176e2400000000a50722505ec2e8016a08"], 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000bc0), 0x2, 0x963b01)
ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000c00)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r6, &(0x7f0000000c40)="e2", 0x2250)
syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000cc0)={0x0, 0xa, 0x71, "a8c76d8b814f34224fc0b3d791c1a4490dd0e0ddbcbe518ddd9a7067b5c128e8f35242ae4db8784218f67a8ee167ccb0498b8545c3f4c9ff61fe1a686e501e5fa7df7653e91f08a61171e5cd9158ea7e63a72fed0b6f0b7adf00b1584c18395423692eb493bc1bcf948977ae07e1c22542"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000dc0)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000e00)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000080)={0xc0, 0xa2, 0x2f, "80c28a0d8a60b13cc9fdaf3e50c676eb878c42a0c90afaef20066d176a2b6afe945ffb7c388aef940ec0e6162572ad"}})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3)
r7 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x38}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x800)

2.750823473s ago: executing program 9 (id=2964):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f00000000c0)=0xfff, 0x5)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000100)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0xffc9)

2.683396428s ago: executing program 6 (id=2965):
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="034886dd1200befd0000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES64=r1], 0xfdef)

2.589167708s ago: executing program 9 (id=2966):
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x77)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x10)
truncate(&(0x7f0000000400)='./bus\x00', 0x900000)
lsetxattr$security_ima(&(0x7f0000000440)='./bus\x00', &(0x7f0000000540), &(0x7f0000000580)=ANY=[@ANYBLOB="0407"], 0x2, 0x1)
dup3(r1, r0, 0x80000)
finit_module(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, 0x40})
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, 0x0, 0x0, &(0x7f00000005c0)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred], 0x70}, 0x9f6861c48177be3f)

2.355505415s ago: executing program 6 (id=2967):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x1f7)
mount(&(0x7f0000000680)=@filename='mtd0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000740)='./file0\x00')
setresuid(0xee00, 0xee00, 0x0)
fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb)

2.270422153s ago: executing program 9 (id=2968):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc4e48aa31086b8712350000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) (async)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x2004, 0x0)
ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, 0x0)
r2 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/features/oneway_spam_detection\x00', 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000080)={0x1, 0x9, 0x5c01})

2.269933442s ago: executing program 3 (id=2969):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000e00)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000e40)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="700088caffffffffffffaaaaaaaaaaaa0800451c002400004000002f9078ac1eff01e0000001202486dd00109078c2a80001000004119a2c61b8a788e1a938768cc10ba66632e49b9b7ce7af1e05fe75247f644a3294a64157b5a43b930c994ae593657171f237cfbbab5694ac4d61800cf6522d71483b031cef1bcd916368ad42dd0dee1bb7634c8b47556714d7e4014c0389e9e34dbadec7cdf0e6a5d8a8f9d658745a3475f9b8040a3687091ba22e83b5ff59e147e8eee6367e22357fda790243"], 0x36)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={<r5=>r0})
syz_usb_connect(0x0, 0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="32010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000480)={{0x7, 0x4, 0xe, 0x10, '\x00', 0x8001}, 0x1, [0x6, 0x9, 0xf, 0xffffffffffff2d8c, 0x6, 0x5, 0x7, 0x3, 0x56ef, 0x6, 0x100, 0x7ffffffffffffffb, 0x0, 0x3, 0xb03, 0x0, 0xffff, 0xffffffffffffffff, 0x5, 0x4, 0x6, 0xfffffffffffffff7, 0x81, 0xea6b, 0xffffffffffffffc3, 0x6, 0x6, 0x7e, 0x7, 0xfffffffffffffffb, 0x9, 0x6, 0x40, 0x6, 0x7, 0x5, 0x7fe, 0x3, 0x7, 0x4, 0xcb9, 0x800, 0x3, 0x9, 0x1000000000010001, 0x4, 0x0, 0x2, 0x6, 0x2, 0x8000, 0x2, 0xfffffffffffffffd, 0x4, 0x2, 0x1, 0xaabe, 0x7, 0xfffffffffffffff7, 0x6, 0x10003, 0x8, 0x101, 0xc, 0x80000000000080, 0xd09, 0x5e, 0x2, 0xffffffffffffffff, 0x8c, 0xe, 0x6, 0xfff, 0xed5, 0x6, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0xea, 0xd, 0x1ff, 0x8, 0x1000, 0xffffffffffffffff, 0x9, 0x5, 0x107, 0x3, 0x2, 0x0, 0x9, 0x6e5, 0x1, 0x81, 0xffffffffffffffff, 0x0, 0xb, 0xc, 0x4, 0x6, 0x2, 0x800000, 0xf6, 0x6, 0x6, 0x8, 0xe, 0x100000001, 0x7, 0xce32, 0xffdffffffffffff9, 0x0, 0x4, 0x2, 0x1, 0x1261, 0x9, 0xfffffffffffffff7, 0x0, 0xffffffff, 0x5, 0x667c9b49, 0xea2, 0x1, 0x4df21eb6, 0x1, 0x6]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0)
r8 = openat(r7, &(0x7f0000000140)='driver_override\x00', 0x12000, 0x0)
write(r8, &(0x7f0000000180)='i', 0x1)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, 0x0)
r9 = fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='j\x95\'\x8aC\x16\xca\\', &(0x7f00000002c0)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000380)='{:\'@-\x00', &(0x7f00000003c0)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000400)='\x00', &(0x7f0000000440)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000980)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f00000009c0)="82", 0x1)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000a00)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG<v\xb8\x18\x80\xe1Kf\xf8R\x01\x01\x00\x00\x02\x00\x00\x00\x05\x05\xd8\xdb\xfd`\xf9\xf8\x915\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\x8f\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80\x12W\xb3\xfb\xf3&!0\xe8\xc3\xce', &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000b80)='^,/\x00', &(0x7f0000000bc0)='fusebl_\x00\t\xf5\xf3\xcc\xd7x\xaf\xd9\xa3\xb2\x12\xf2f1\x05\x8b\xcf\xe8AJ\xd7\x9bq\xf5\x0e\"\x0f\xab\x8a\xae/&\xbc\xd7\xaf\xcf\xb9f(p\x00\a\x81\xfe\x13\xad*\"gd\x80X\x8e\xcd}-Z\v\x15\xd6l\xd1\x03-\xfe\x96$I\xfb\x9a\x1e\x12\x9e\xb1\xc3\x96#\x18\x9b[\xc5;\xf0\x96\xb8\f\xb6\x06-\xe1\x06\xca\xc2\x13', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000c40)='\x1c@\\\x00', &(0x7f0000000c80)='\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000cc0)='\xe6usek\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\b\xe1\x9fo\x9d\xe69\x0e\x19_\xc9\xef\xe0Q\xdb\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f\xe0\x00\x00\x00', &(0x7f0000000d80)="70a8", 0x2)
close(r9)
close_range(r0, 0xffffffffffffffff, 0x0)

2.244015735s ago: executing program 6 (id=2970):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2.178955147s ago: executing program 9 (id=2971):
r0 = landlock_create_ruleset(&(0x7f00000006c0)={0x4000, 0x3}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000700)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x7)
landlock_restrict_self(r0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)

2.048978411s ago: executing program 6 (id=2972):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="13", 0x1}], 0x1}, 0x48043)
r2 = dup(r0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='ip6gretap0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000280)={0x7, 0x1b, 0x2}, 0xffffff9a)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
splice(r3, 0x0, r0, 0x0, 0xffff, 0x2)
syz_open_procfs(0x0, &(0x7f0000000480)='net/mcfilter6\x00')

2.000217305s ago: executing program 9 (id=2973):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f00000005c0)='9', 0x1)
syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)

1.912316028s ago: executing program 9 (id=2974):
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000100)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000100010000000000000000000000000000010000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000c80080001000000000008000200dc050000", 0xa0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101240, 0x0)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000e80)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a24010001020002"], 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000ec0), 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000f00)={{0xa, 0x4, 0x5, 0x7ff, 'syz1\x00', 0x7}, 0x1, [0xf, 0x7, 0xd3fc, 0x4, 0x0, 0x8, 0x5, 0xffff, 0x1ff, 0x7fff, 0x5, 0x3, 0x0, 0x6, 0x1, 0x100, 0xc2f, 0x4, 0x264b, 0x6, 0x5, 0x9, 0x7, 0x4, 0x81, 0xdf8, 0x8, 0x456, 0x5, 0x3ff, 0x4, 0x1, 0x0, 0x8, 0x6, 0x9, 0xff, 0xc36e, 0x5, 0x3, 0x9, 0x3, 0x1, 0x1, 0x3, 0xdc87, 0x7fffffff, 0x6cd, 0x6, 0x6, 0x3, 0x7, 0x401, 0x76c9, 0x2, 0x8000000000000000, 0xff, 0x1, 0x101, 0x1, 0xffff, 0x2429, 0x1, 0x7, 0x8, 0x1, 0x9, 0x40, 0x81, 0x4, 0xfffffffffffffff9, 0x3, 0xffffffffffffffff, 0x7, 0x0, 0xcbe0, 0x0, 0xe, 0x3, 0x6ef, 0x81, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0xfff, 0xfffffffffffffffa, 0xc441, 0x32, 0x9, 0x71f5, 0x3, 0x1, 0xff, 0xa, 0x4, 0x2, 0x1, 0x6, 0xfffffffffffffffa, 0x5, 0xa, 0x8, 0x7fff, 0x7fffffffffffffff, 0xfffffffffffffe01, 0x9, 0x5, 0x9, 0x7, 0x5, 0x34000, 0x200, 0x401, 0x0, 0x4, 0x6, 0x3, 0x7, 0x84, 0x4, 0x8001, 0x7fff, 0xffff, 0x40, 0x528bfb0e, 0x4]})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdir(&(0x7f00000001c0)='proc_dir\x00', 0x1ff)
fremovexattr(r0, &(0x7f0000000e40)=@known='security.apparmor\x00')
mount(0x0, &(0x7f0000000200)='proc_dir\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000280), 0x3bdabd1f, 0x1a1000)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x1a4bf000)
r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='proc_dir/scsi/scsi\x00', 0x42, 0x183)
write(r5, &(0x7f0000000300)="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", 0xb01)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x400)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x67}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.156375339s ago: executing program 6 (id=2975):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket(0x8, 0x5, 0x5)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f000034f000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x1, 0x2)

934.030483ms ago: executing program 6 (id=2976):
r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20)
ioctl(r1, 0xc4c85513, &(0x7f0000000200))

803.57504ms ago: executing program 3 (id=2977):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100395e341203c41c2814bc90102030109021b00020e06d003090408d8008effff080904000500ff"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000518000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0xfffff000)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x4000009d, 0x0, 0x7000000000000}]}) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0xffffff39, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) (async)
recvmsg$kcm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001980)=""/4123, 0x101b}, {&(0x7f0000002a40)=""/4074, 0xfea}, {&(0x7f0000000240)=""/256, 0x100}, {&(0x7f0000003a40)=""/213, 0xd5}, {&(0x7f0000000080)=""/47, 0x5d}], 0x5}, 0x120)

199.076789ms ago: executing program 7 (id=2978):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000140)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000200)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000240)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0x5e, 0xfffffffffffffff9})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f0000000280)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c5, 0x4, 0x1011, 0x385a2d2f, 0x4, 0x100000080}) (fail_nth: 2)

0s ago: executing program 7 (id=2979):
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./security\x00', 0x1ff)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000140), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000180)={0x5, &(0x7f00000001c0)=[{0x41, '\x00', @buffer={"9434e04e3d433a46422d3c339667b7658f00", 0x20}, 0xc}, {0x9, '\x00', @st={0x4, [{0x0, @uvalue=0x2}, {0x0, @uvalue=0x1}, {0x1, @svalue=0x80000000}, {0x3, @svalue=0x40000000100000f}]}, 0x5}, {0xd, '\x00', @st={0x4, [{0x1, @uvalue=0x4}, {0x3, @uvalue=0x4}, {0x3, @svalue}, {0x1, @uvalue=0xa6}]}, 0xd02d}, {0x34, '\x00', @buffer={"02d848d078dcfe7b3154300848a04f774cf30400320466d89ae788a6e4048b6a", 0x20}, 0x9}, {0x1b, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x2, @uvalue=0xf}, {0x2, @uvalue=0x2}, {0x1, @svalue=0x6f474fd0}]}, 0x8}]})
mount(0x0, &(0x7f0000000700)='./security\x00', &(0x7f0000000740)='securityfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r1, &(0x7f0000000000)="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", 0x138)

kernel console output (not intermixed with test programs):

656.078654][    T9] usb 7-1: USB disconnect, device number 21
[  656.231873][T12755] usb 4-1: USB disconnect, device number 18
[  656.313117][T14814] ceph: No mds server is up or the cluster is laggy
[  656.344515][T14818] FAULT_INJECTION: forcing a failure.
[  656.344515][T14818] name failslab, interval 1, probability 0, space 0, times 0
[  656.344550][T14818] CPU: 0 UID: 0 PID: 14818 Comm: syz.8.2676 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  656.344606][T14818] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  656.344620][T14818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  656.344631][T14818] Call Trace:
[  656.344639][T14818]  <TASK>
[  656.344648][T14818]  dump_stack_lvl+0xe8/0x150
[  656.344679][T14818]  should_fail_ex+0x3eb/0x540
[  656.344708][T14818]  should_failslab+0xa8/0x100
[  656.344732][T14818]  __kmalloc_cache_noprof+0x9e/0x600
[  656.344761][T14818]  ? nbd_alloc_and_init_config+0x87/0x250
[  656.344780][T14818]  ? nbd_alloc_and_init_config+0x87/0x250
[  656.344808][T14818]  nbd_alloc_and_init_config+0x87/0x250
[  656.344831][T14818]  nbd_genl_connect+0xa17/0x1cd0
[  656.344870][T14818]  ? __pfx_nbd_genl_connect+0x10/0x10
[  656.344902][T14818]  ? rcu_is_watching+0x16/0xb0
[  656.344926][T14818]  ? trace_kmalloc+0x2a/0xf0
[  656.344956][T14818]  ? __kmalloc_noprof+0x387/0x710
[  656.344986][T14818]  ? __nla_parse+0x40/0x60
[  656.345017][T14818]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  656.345051][T14818]  genl_family_rcv_msg_doit+0x233/0x340
[  656.345083][T14818]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  656.345119][T14818]  ? __lock_acquire+0x747/0x2de0
[  656.345149][T14818]  genl_rcv_msg+0x614/0x7a0
[  656.345181][T14818]  ? __pfx_genl_rcv_msg+0x10/0x10
[  656.345205][T14818]  ? __pfx_nbd_genl_connect+0x10/0x10
[  656.345248][T14818]  netlink_rcv_skb+0x226/0x4a0
[  656.345274][T14818]  ? __pfx_genl_rcv_msg+0x10/0x10
[  656.345301][T14818]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  656.345335][T14818]  ? down_read+0x2b9/0x320
[  656.345365][T14818]  genl_rcv+0x28/0x40
[  656.345387][T14818]  netlink_unicast+0x8ef/0xa80
[  656.345432][T14818]  netlink_sendmsg+0x7f0/0xb20
[  656.345458][T14818]  ? __pfx_netlink_sendmsg+0x10/0x10
[  656.345482][T14818]  ? aa_sock_msg_perm+0x144/0x210
[  656.345514][T14818]  ? apparmor_socket_sendmsg+0x18b/0x360
[  656.345546][T14818]  ? __pfx_netlink_sendmsg+0x10/0x10
[  656.345564][T14818]  sock_sendmsg_nosec+0x14e/0x190
[  656.345586][T14818]  ____sys_sendmsg+0x54e/0x850
[  656.345614][T14818]  ? __pfx_____sys_sendmsg+0x10/0x10
[  656.345644][T14818]  ? import_iovec+0x73/0xa0
[  656.345669][T14818]  ___sys_sendmsg+0x2a5/0x360
[  656.345689][T14818]  ? __lock_acquire+0x747/0x2de0
[  656.345711][T14818]  ? __pfx____sys_sendmsg+0x10/0x10
[  656.345768][T14818]  ? __fget_files+0x3a2/0x420
[  656.345793][T14818]  ? __fget_files+0x2a/0x420
[  656.345824][T14818]  __x64_sys_sendmsg+0x1b1/0x290
[  656.345846][T14818]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  656.345882][T14818]  do_syscall_64+0x166/0x520
[  656.345901][T14818]  ? trace_irq_disable+0x3b/0x140
[  656.345918][T14818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.345934][T14818]  ? clear_bhb_loop+0x70/0xc0
[  656.345952][T14818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.345968][T14818] RIP: 0033:0x7f1cfa19e559
[  656.345983][T14818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.345996][T14818] RSP: 002b:00007f1cfb079028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  656.346013][T14818] RAX: ffffffffffffffda RBX: 00007f1cfa425fa0 RCX: 00007f1cfa19e559
[  656.346026][T14818] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000007
[  656.346035][T14818] RBP: 00007f1cfb079090 R08: 0000000000000000 R09: 0000000000000000
[  656.346046][T14818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.346055][T14818] R13: 00007f1cfa426038 R14: 00007f1cfa425fa0 R15: 00007ffcd36c7d08
[  656.346080][T14818]  </TASK>
[  656.357211][T14818] nbd: couldn't allocate config
[  656.727891][T14823] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2678'.
[  656.808959][T14826] 9p: Bad value for 'rfdno'
[  656.814988][T14827] profile_transition: unconfined exec no attachment
[  656.851403][  T993] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  656.851647][  T993] ath9k_htc: Failed to initialize the device
[  656.855115][T12755] usb 4-1: ath9k_htc: USB layer deinitialized
[  657.081337][T14831] nbd0: detected capacity change from 0 to 63
[  657.107409][ T5621] block nbd0: Receive control failed (result -104)
[  657.188455][T14844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  657.189203][T14844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  657.947211][T14864] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2692'.
[  658.019043][T14863] Bluetooth: (null): Invalid header checksum
[  658.019765][  T993] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  658.180020][  T993] usb 7-1: Using ep0 maxpacket: 16
[  658.184183][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2695'.
[  658.187097][  T993] usb 7-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  658.188762][  T993] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  658.188782][  T993] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  658.191933][  T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.191952][  T993] usb 7-1: Product: syz
[  658.191965][  T993] usb 7-1: Manufacturer: syz
[  658.191979][  T993] usb 7-1: SerialNumber: syz
[  658.194020][T14869] profile_transition: unconfined exec no attachment
[  658.207699][  T993] usb 7-1: 0:2 : does not exist
[  658.334449][T14877] profile_transition: unconfined exec no attachment
[  658.370200][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  658.474612][  T993] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  658.517293][T14874] nvme_tcp: queue 0: failed to receive icresp, error -4
[  658.529460][  T993] usb 7-1: USB disconnect, device number 22
[  658.536452][    T9] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  658.537909][    T9] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  658.537931][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253
[  658.574125][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.574143][    T9] usb 4-1: Product: syz
[  658.574189][    T9] usb 4-1: Manufacturer: syz
[  658.574204][    T9] usb 4-1: SerialNumber: syz
[  658.632661][    T9] usb 4-1: config 0 descriptor??
[  658.643026][T14061] udevd[14061]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  658.663794][    T9] gspca_main: sunplus-2.14.0 probing 055f:c630
[  659.035804][T14885] binder: Failed to allocate buffer. len:18446744073709550704, is_oneway:true
[  659.035845][T14885] binder: Failure in copy_transaction_data: ENOSPC
[  659.055845][T14887] sit0: entered promiscuous mode
[  659.063500][T14887] netlink: 'syz.6.2699': attribute type 1 has an invalid length.
[  659.063516][T14887] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2699'.
[  659.225952][T14894] profile_transition: unconfined exec no attachment
[  659.257742][T14895] profile_transition: unconfined exec no attachment
[  659.553498][T14881] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  659.555535][T14881] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  659.557941][T14881] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  659.582808][T14881] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  659.582918][T14881] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  659.587769][T14881] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  659.605958][T14881] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  659.606061][T14881] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  659.625953][T14881] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  659.638586][    T9] videodev: could not get a free minor
[  659.638594][    T9] gspca_main: video_register_device err -23
[  659.638847][    T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -23
[  659.969774][  T993] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  660.129949][  T993] usb 7-1: Using ep0 maxpacket: 8
[  660.130734][  T993] usb 7-1: New USB device found: idVendor=0458, idProduct=5019, bcdDevice=0.00
[  660.132011][  T993] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.132037][  T993] usb 7-1: config 0 interface 0 has no altsetting 0
[  660.132086][  T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.175632][  T993] usb 7-1: config 0 descriptor??
[  660.397746][T14912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  660.398725][T14912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  660.587876][  T993] usbhid 7-1:0.0: can't add hid device: -71
[  660.588004][  T993] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  660.606433][  T993] usb 7-1: USB disconnect, device number 23
[  660.627087][   T32] audit: type=1326 audit(1792497396.824:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=14911 comm="syz.8.2706" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cfa19e559 code=0x0
[  660.769964][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout
[  661.222184][   T26] usb 4-1: USB disconnect, device number 19
[  661.330038][    C0] net_ratelimit: 308 callbacks suppressed
[  661.380654][  T993] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  661.430151][T14919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2709'.
[  661.430172][T14919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2709'.
[  661.539826][  T993] usb 7-1: Using ep0 maxpacket: 8
[  661.540632][  T993] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  661.542048][  T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  661.542073][  T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  661.542128][  T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.546793][  T993] usb 7-1: config 0 descriptor??
[  661.649979][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout
[  661.650145][ T5621] Bluetooth: hci3: command 0x0405 tx timeout
[  661.759089][T14917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  661.771123][T14917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  661.784862][  T993] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  661.978818][T14917] iowarrior 7-1:0.0: Error -90 while submitting URB
[  662.032240][T14917] syz.6.2708: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  662.032337][T14917] CPU: 1 UID: 0 PID: 14917 Comm: syz.6.2708 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  662.032375][T14917] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  662.032384][T14917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  662.032395][T14917] Call Trace:
[  662.032403][T14917]  <TASK>
[  662.032413][T14917]  dump_stack_lvl+0xe8/0x150
[  662.032444][T14917]  warn_alloc+0x24d/0x270
[  662.032479][T14917]  ? __pfx_warn_alloc+0x10/0x10
[  662.032506][T14917]  ? policy_nodemask+0x2cc/0x8e0
[  662.032535][T14917]  ? alloc_pages_mpol+0x256/0x390
[  662.032568][T14917]  __vmalloc_node_range_noprof+0x12fd/0x16f0
[  662.032627][T14917]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  662.032652][T14917]  ? rcu_is_watching+0x16/0xb0
[  662.032678][T14917]  ? hash_netportnet_create+0x35d/0x1080
[  662.032707][T14917]  ? rcu_is_watching+0x16/0xb0
[  662.032731][T14917]  ? hash_netportnet_create+0x35d/0x1080
[  662.032748][T14917]  __kvmalloc_node_noprof+0x59c/0x820
[  662.032763][T14917]  ? hash_netportnet_create+0x35d/0x1080
[  662.032788][T14917]  ? __kmalloc_noprof+0x387/0x710
[  662.032817][T14917]  ? hash_netportnet_create+0x2f9/0x1080
[  662.032842][T14917]  ? hash_netportnet_create+0x35d/0x1080
[  662.032877][T14917]  hash_netportnet_create+0x35d/0x1080
[  662.032912][T14917]  ? ip_set_create+0x4ef/0x1a50
[  662.032925][T14917]  ? __pfx_hash_netportnet_create+0x10/0x10
[  662.032946][T14917]  ip_set_create+0xae8/0x1a50
[  662.032968][T14917]  ? ip_set_create+0x4ef/0x1a50
[  662.033002][T14917]  ? __pfx_ip_set_create+0x10/0x10
[  662.033022][T14917]  ? lock_acquire+0x115/0x350
[  662.033061][T14917]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  662.033078][T14917]  ? nfnetlink_rcv_msg+0x228/0x12b0
[  662.033108][T14917]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  662.033186][T14917]  netlink_rcv_skb+0x226/0x4a0
[  662.033203][T14917]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  662.033219][T14917]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  662.033236][T14917]  ? bpf_lsm_capable+0x9/0x20
[  662.033248][T14917]  ? security_capable+0x7e/0x2c0
[  662.033277][T14917]  nfnetlink_rcv+0x2b9/0x28c0
[  662.033315][T14917]  ? __dev_queue_xmit+0x29b/0x3920
[  662.033347][T14917]  ? __local_bh_enable_ip+0xd6/0x140
[  662.033369][T14917]  ? lockdep_hardirqs_on+0x7b/0x110
[  662.033384][T14917]  ? __dev_queue_xmit+0x29b/0x3920
[  662.033399][T14917]  ? __local_bh_enable_ip+0xd6/0x140
[  662.033410][T14917]  ? __dev_queue_xmit+0x29b/0x3920
[  662.033434][T14917]  ? __dev_queue_xmit+0x1efb/0x3920
[  662.033467][T14917]  ? __dev_queue_xmit+0x29b/0x3920
[  662.033501][T14917]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  662.033527][T14917]  ? __pfx___dev_queue_xmit+0x10/0x10
[  662.033547][T14917]  ? __copy_skb_header+0xa3/0x4a0
[  662.033561][T14917]  ? __asan_memcpy+0x40/0x70
[  662.033577][T14917]  ? __skb_clone+0x5c/0x6c0
[  662.033636][T14917]  ? __skb_clone+0x449/0x6c0
[  662.033668][T14917]  ? skb_clone+0x246/0x3a0
[  662.033686][T14917]  ? __netlink_deliver_tap+0x681/0x6e0
[  662.033697][T14917]  ? netlink_deliver_tap+0x2e/0x1b0
[  662.033711][T14917]  ? netlink_deliver_tap+0x2e/0x1b0
[  662.033722][T14917]  ? netlink_deliver_tap+0x2e/0x1b0
[  662.033743][T14917]  netlink_unicast+0x8ef/0xa80
[  662.033790][T14917]  netlink_sendmsg+0x7f0/0xb20
[  662.033817][T14917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.033836][T14917]  ? aa_sock_msg_perm+0x144/0x210
[  662.033854][T14917]  ? apparmor_socket_sendmsg+0x98/0x360
[  662.033885][T14917]  ? __pfx_netlink_sendmsg+0x10/0x10
[  662.033905][T14917]  sock_sendmsg_nosec+0x14e/0x190
[  662.033928][T14917]  ____sys_sendmsg+0x54e/0x850
[  662.033958][T14917]  ? __pfx_____sys_sendmsg+0x10/0x10
[  662.033993][T14917]  ? import_iovec+0x73/0xa0
[  662.034022][T14917]  ___sys_sendmsg+0x2a5/0x360
[  662.034040][T14917]  ? __lock_acquire+0x747/0x2de0
[  662.034053][T14917]  ? __pfx____sys_sendmsg+0x10/0x10
[  662.034078][T14917]  ? futex_wait+0x2a2/0x390
[  662.034127][T14917]  ? __fget_files+0x3a2/0x420
[  662.034156][T14917]  ? __fget_files+0x2a/0x420
[  662.034178][T14917]  __x64_sys_sendmsg+0x1b1/0x290
[  662.034193][T14917]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  662.034220][T14917]  do_syscall_64+0x166/0x520
[  662.034244][T14917]  ? trace_irq_disable+0x3b/0x140
[  662.034265][T14917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.034286][T14917]  ? clear_bhb_loop+0x70/0xc0
[  662.034310][T14917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.034325][T14917] RIP: 0033:0x7f0c86b9e559
[  662.034336][T14917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.034346][T14917] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  662.034365][T14917] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  662.034373][T14917] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000007
[  662.034384][T14917] RBP: 00007f0c86c35ad8 R08: 0000000000000000 R09: 0000000000000000
[  662.034397][T14917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  662.034409][T14917] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  662.034441][T14917]  </TASK>
[  662.034526][T14917] Mem-Info:
[  662.034534][T14917] active_anon:9390 inactive_anon:541 isolated_anon:0
[  662.034534][T14917]  active_file:1991 inactive_file:55498 isolated_file:0
[  662.034534][T14917]  unevictable:0 dirty:118 writeback:0
[  662.034534][T14917]  slab_reclaimable:11729 slab_unreclaimable:107133
[  662.034534][T14917]  mapped:26370 shmem:551 pagetables:2001
[  662.034534][T14917]  sec_pagetables:0 bounce:0
[  662.034534][T14917]  kernel_misc_reclaimable:0
[  662.034534][T14917]  free:1287205 free_pcp:11319 free_cma:0
[  662.034585][T14917] Node 0 active_anon:37560kB inactive_anon:2164kB active_file:7964kB inactive_file:221784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105480kB dirty:468kB writeback:0kB shmem:2204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:13152kB pagetables:7836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  662.034642][T14917] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  662.034670][T14917] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB
[  662.034704][T14917] lowmem_reserve[]: 0 2462 2463 2463 2463
[  662.034740][T14917] Node 0 DMA32 free:1193304kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37560kB inactive_anon:2164kB active_file:7964kB inactive_file:221784kB unevictable:0kB writepending:468kB zspages:4kB present:3129332kB managed:2521088kB mlocked:0kB bounce:0kB free_pcp:45252kB local_pcp:26288kB free_cma:0kB
[  662.034798][T14917] lowmem_reserve[]: 0 0 1 1 1
[  662.034816][T14917] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1376kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  662.034845][T14917] lowmem_reserve[]: 0 0 0 0 0
[  662.034866][T14917] Node 1 Normal free:3940152kB boost:0kB min:55964kB low:69952kB high:83940kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  662.034924][T14917] lowmem_reserve[]: 0 0 0 0 0
[  662.034956][T14917] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB
[  662.035043][T14917] Node 0 DMA32: 1305*4kB (UME) 1629*8kB (UM) 1001*16kB (UME) 467*32kB (UME) 221*64kB (UME) 88*128kB (ME) 20*256kB (UME) 23*512kB (UM) 20*1024kB (UM) 10*2048kB (UME) 259*4096kB (UM) = 1193340kB
[  662.035175][T14917] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  662.035281][T14917] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 6*16kB (UM) 2*32kB (UM) 8*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3940152kB
[  662.035393][T14917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  662.035410][T14917] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  662.035427][T14917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  662.035442][T14917] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  662.035451][T14917] 58594 total pagecache pages
[  662.035456][T14917] 558 pages in swap cache
[  662.035461][T14917] Free swap  = 121596kB
[  662.035465][T14917] Total swap = 124996kB
[  662.035470][T14917] 2097051 pages RAM
[  662.035474][T14917] 0 pages HighMem/MovableOnly
[  662.035478][T14917] 434819 pages reserved
[  662.035482][T14917] 0 pages cma reserved
[  662.089776][  T993] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  662.101102][   T26] usb 7-1: USB disconnect, device number 24
[  662.272551][  T993] usb 4-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  662.274226][  T993] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  662.274288][  T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.295811][  T993] gspca_main: stv0680-2.14.0 probing 041e:4007
[  662.853408][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout
[  663.494502][T14930] profile_transition: unconfined exec no attachment
[  663.538891][T14931] profile_transition: unconfined exec no attachment
[  663.543346][  T993] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  663.543364][  T993] stv0680 4-1:4.0: last error: 86,  command = 0x78
[  663.562707][  T993] usb 4-1: USB disconnect, device number 20
[  663.611904][T14932] 9p: Bad value for 'wfdno'
[  663.730167][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout
[  663.730299][ T5621] Bluetooth: hci3: command 0x0405 tx timeout
[  664.139262][T14941] bonding: bond0 is being deleted...
[  664.274287][T14941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  664.325839][T14941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  664.345202][T14941] bond0 (unregistering): Released all slaves
[  664.399167][T14948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.402868][T14948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.445734][T14945] kvm [14943]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0x4
[  664.929823][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout
[  665.019268][T14957] profile_transition: unconfined exec no attachment
[  665.105490][T14955] kvm: emulating exchange as write

syzkaller
syzkaller login: [  665.452038][ T5612] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  665.472750][T14970] profile_transition: unconfined exec no attachment
[  665.491790][T14970] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  665.491947][T14971] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  665.611306][ T5612] usb 7-1: Using ep0 maxpacket: 32
[  665.616747][ T5612] usb 7-1: New USB device found: idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  665.620602][ T5612] usb 7-1: config 0 has an invalid interface number: 196 but max is 0
[  665.620623][ T5612] usb 7-1: config 0 has no interface number 0
[  665.620716][ T5612] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  665.620744][ T5612] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  665.620764][ T5612] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  665.620790][ T5612] usb 7-1: config 0 interface 196 has no altsetting 0
[  665.629620][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.629638][ T5612] usb 7-1: Product: syz
[  665.629726][ T5612] usb 7-1: Manufacturer: syz
[  665.629742][ T5612] usb 7-1: SerialNumber: syz
[  665.643469][ T5612] usb 7-1: config 0 descriptor??
[  665.645932][T14962] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  665.809788][ T5610] Bluetooth: hci1: command 0x0c1a tx timeout
[  665.809862][ T5621] Bluetooth: hci3: command 0x0405 tx timeout
[  665.924104][T14982] kvm [14981]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x1
[  666.043769][T14962] FAULT_INJECTION: forcing a failure.
[  666.043769][T14962] name fail_futex, interval 1, probability 0, space 0, times 0
[  666.043801][T14962] CPU: 0 UID: 0 PID: 14962 Comm: syz.6.2723 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  666.043831][T14962] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  666.043840][T14962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  666.043852][T14962] Call Trace:
[  666.043860][T14962]  <TASK>
[  666.043870][T14962]  dump_stack_lvl+0xe8/0x150
[  666.043899][T14962]  should_fail_ex+0x3eb/0x540
[  666.043928][T14962]  get_futex_key+0x1ab/0x1410
[  666.043958][T14962]  ? mt_find+0x481/0x630
[  666.043990][T14962]  ? __pfx_get_futex_key+0x10/0x10
[  666.044013][T14962]  ? __pfx_mt_find+0x10/0x10
[  666.044038][T14962]  ? security_capable+0x7e/0x2c0
[  666.044071][T14962]  futex_wake+0x119/0x5f0
[  666.044107][T14962]  ? __pfx_futex_wake+0x10/0x10
[  666.044133][T14962]  ? populate_vma_page_range+0x29e/0x3f0
[  666.044166][T14962]  ? __pfx___up_read+0x10/0x10
[  666.044201][T14962]  do_futex+0x458/0x4e0
[  666.044233][T14962]  ? __pfx_do_futex+0x10/0x10
[  666.044266][T14962]  __se_sys_futex+0x3a8/0x450
[  666.044295][T14962]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  666.044323][T14962]  ? __pfx___se_sys_futex+0x10/0x10
[  666.044349][T14962]  ? rcu_is_watching+0x16/0xb0
[  666.044380][T14962]  ? __x64_sys_futex+0x21/0xf0
[  666.044408][T14962]  do_syscall_64+0x166/0x520
[  666.044440][T14962]  ? trace_irq_disable+0x3b/0x140
[  666.044462][T14962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.044482][T14962]  ? clear_bhb_loop+0x70/0xc0
[  666.044506][T14962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  666.044526][T14962] RIP: 0033:0x7f0c86b9e559
[  666.044544][T14962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  666.044561][T14962] RSP: 002b:00007f0c87a310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  666.044583][T14962] RAX: ffffffffffffffda RBX: 00007f0c86e25fa8 RCX: 00007f0c86b9e559
[  666.044597][T14962] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0c86e25fac
[  666.044612][T14962] RBP: 00007f0c86e25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  666.044627][T14962] R10: 0000200000001000 R11: 0000000000000246 R12: 0000000000000000
[  666.044640][T14962] R13: 00007f0c86e26038 R14: 00007ffdb48d04c0 R15: 00007ffdb48d05a8
[  666.044669][T14962]  </TASK>
[  666.090581][T14985] profile_transition: unconfined exec no attachment
[  666.125281][T14962] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[13256] was attempted by ""[14962]
[  666.283423][T14986] profile_transition: unconfined exec no attachment
[  666.610133][    C0] net_ratelimit: 772 callbacks suppressed
[  666.711524][ T5612] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  666.711871][ T5612] ipheth 7-1:0.196: probe with driver ipheth failed with error -71
[  666.740889][ T5612] usb 7-1: USB disconnect, device number 25
[  666.950522][T15007] profile_transition: unconfined exec no attachment
[  667.027532][T15009] profile_transition: unconfined exec no attachment
[  667.184263][T15011] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd29
[  667.185321][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2738'.
[  667.633456][  T993] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  667.793768][  T993] usb 7-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06
[  667.794754][  T993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.794774][  T993] usb 7-1: config 0 has no interfaces?
[  667.795744][  T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  667.795754][  T993] usb 7-1: SerialNumber: syz
[  667.798026][  T993] usb 7-1: config 0 descriptor??
[  667.895149][T15032] FAULT_INJECTION: forcing a failure.
[  667.895149][T15032] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  667.895180][T15032] CPU: 1 UID: 0 PID: 15032 Comm: syz.3.2747 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  667.895208][T15032] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  667.895216][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  667.895227][T15032] Call Trace:
[  667.895235][T15032]  <TASK>
[  667.895241][T15032]  dump_stack_lvl+0xe8/0x150
[  667.895259][T15032]  should_fail_ex+0x3eb/0x540
[  667.895277][T15032]  _copy_from_user+0x2d/0xb0
[  667.895291][T15032]  __se_sys_mount+0x18b/0x420
[  667.895322][T15032]  ? __pfx___se_sys_mount+0x10/0x10
[  667.895356][T15032]  ? __x64_sys_mount+0x20/0xc0
[  667.895385][T15032]  do_syscall_64+0x166/0x520
[  667.895403][T15032]  ? trace_irq_disable+0x3b/0x140
[  667.895415][T15032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.895426][T15032]  ? clear_bhb_loop+0x70/0xc0
[  667.895439][T15032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.895449][T15032] RIP: 0033:0x7f5b1cb9e559
[  667.895463][T15032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  667.895480][T15032] RSP: 002b:00007f5b1d9ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  667.895500][T15032] RAX: ffffffffffffffda RBX: 00007f5b1ce25fa0 RCX: 00007f5b1cb9e559
[  667.895515][T15032] RDX: 0000200000000600 RSI: 00002000000005c0 RDI: 0000200000000580
[  667.895530][T15032] RBP: 00007f5b1d9ab090 R08: 0000200000000640 R09: 0000000000000000
[  667.895543][T15032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.895555][T15032] R13: 00007f5b1ce26038 R14: 00007f5b1ce25fa0 R15: 00007ffecf6ed2d8
[  667.895571][T15032]  </TASK>
[  667.898037][T15032] jffs2: notice: (15032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  668.011312][T15034] profile_transition: unconfined exec no attachment
[  668.144425][T15040] profile_transition: unconfined exec no attachment
[  668.201665][  T993] usb 7-1: USB disconnect, device number 26
[  670.233511][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  670.328368][T15077] overlayfs: upper fs does not support file handles, falling back to index=off.
[  670.328377][T15077] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  670.392284][   T10] usb 4-1: Using ep0 maxpacket: 32
[  670.393376][   T10] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  670.395180][   T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  670.395221][   T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  670.395245][   T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  670.395308][   T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  670.399070][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.399089][   T10] usb 4-1: Product: syz
[  670.399103][   T10] usb 4-1: Manufacturer: syz
[  670.399157][   T10] usb 4-1: SerialNumber: syz
[  670.498004][    C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  670.513076][   T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input91
[  670.720798][   T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  670.720814][   T10]  (id 0x00)
[  670.723506][T15083] profile_transition: unconfined exec no attachment
[  670.831530][   T10] rc_core: IR keymap rc-imon-pad not found
[  670.831557][   T10] Registered IR keymap rc-empty
[  670.831673][   T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  670.831689][   T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  670.834262][T15086] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  670.835004][T15086] comedi comedi1: 8255: I/O base address not correctly aligned
[  670.845865][T15087] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint
[  670.922228][   T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[  670.940435][   T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input92
[  670.964779][   T10] imon 4-1:155.0: iMON device (15c2:ffdc) on usb<4:21> initialized
[  671.338064][T15099] aa_policy_admin_capable: cap_mac_admin? 1
[  671.338359][T15099] aa_policy_admin_capable: policy locked? 0
[  671.338716][T15099] aa_free_profile: aa_free_profile(0000000000000000)
[  671.340879][   T32] audit: type=1400 audit(1792497663.580:574): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=15098 comm="syz.7.2768" name="unknown" offset=16
[  671.438828][T15103] cifs: Unknown parameter '·ñf]Ôl?'
[  671.525924][T15105] imon:send_packet: task interrupted
[  671.525939][T15105] imon:send_packet: packet tx failed (-512)
[  671.526905][T15105] imon:vfd_write: send packet #1 failed
[  671.528990][T15105] imon:send_packet: packet tx failed (-32)
[  671.553761][T15105] imon:vfd_write: send packet #0 failed
[  671.568461][T15107] kvm: requested 5028 ns i8254 timer period limited to 200000 ns
[  671.593472][  T993] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  671.674246][   T10] usb 4-1: USB disconnect, device number 21
[  671.699375][T14020] net_ratelimit: 93 callbacks suppressed
[  671.746600][  T993] usb 7-1: New USB device found: idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[  671.757940][  T993] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[  671.757962][  T993] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  671.757988][  T993] usb 7-1: config 0 has no interface number 0
[  671.758025][  T993] usb 7-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  671.762194][  T993] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  671.762213][  T993] usb 7-1: Product: syz
[  671.762227][  T993] usb 7-1: SerialNumber: syz
[  671.766158][  T993] usb 7-1: config 0 descriptor??
[  671.837498][  T993] usbhid 7-1:0.8: couldn't find an input interrupt endpoint
[  671.971504][T15101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.972289][T15101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.974409][T13706] usb 7-1: USB disconnect, device number 27
[  672.671824][T15132] profile_transition: unconfined exec no attachment
[  672.703766][T15133] profile_transition: unconfined exec no attachment
[  672.792470][T15134] ovs-dp0: entered promiscuous mode
[  672.960341][T15141] binder: Failed to allocate buffer. len:8, is_oneway:false
[  672.960360][T15141] binder: Failure in copy_transaction_data: BR_DEAD_REPLY
[  672.960383][T15141] binder: 15140:15141 reply to 15140 failed: BR_DEAD_REPLY
[  673.072465][T15146] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  673.388842][T15153] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2787'.
[  673.722692][T15159] FAULT_INJECTION: forcing a failure.
[  673.722692][T15159] name failslab, interval 1, probability 0, space 0, times 0
[  673.722710][T15159] CPU: 0 UID: 0 PID: 15159 Comm: syz.6.2789 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  673.722726][T15159] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  673.722730][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  673.722737][T15159] Call Trace:
[  673.722742][T15159]  <TASK>
[  673.722747][T15159]  dump_stack_lvl+0xe8/0x150
[  673.722772][T15159]  should_fail_ex+0x3eb/0x540
[  673.722800][T15159]  should_failslab+0xa8/0x100
[  673.722821][T15159]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  673.722848][T15159]  kmem_cache_alloc_noprof+0x9c/0x600
[  673.722868][T15159]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  673.722881][T15159]  ? kmem_cache_alloc_noprof+0x151/0x600
[  673.722894][T15159]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  673.722911][T15159]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  673.722931][T15159]  mmu_topup_memory_caches+0x21/0x1a0
[  673.722948][T15159]  kvm_mmu_load+0x9d/0x21e0
[  673.722960][T15159]  ? kvm_msr_allowed+0x9a/0x490
[  673.722974][T15159]  ? kvm_msr_allowed+0x9a/0x490
[  673.722989][T15159]  ? kvm_msr_allowed+0x9a/0x490
[  673.723002][T15159]  ? kvm_msr_allowed+0x3f4/0x490
[  673.723016][T15159]  ? kvm_msr_allowed+0x9a/0x490
[  673.723030][T15159]  ? kvm_apic_has_interrupt+0x740/0x770
[  673.723049][T15159]  vcpu_run+0x4f5b/0x7a90
[  673.723100][T15159]  ? __pfx_vcpu_run+0x10/0x10
[  673.723114][T15159]  ? lock_acquire+0x115/0x350
[  673.723130][T15159]  ? fpu_swap_kvm_fpstate+0xbe/0x510
[  673.723143][T15159]  ? vmx_unhandleable_emulation_required+0x77/0x230
[  673.723160][T15159]  kvm_arch_vcpu_ioctl_run+0xe83/0x18b0
[  673.723176][T15159]  ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0
[  673.723191][T15159]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  673.723209][T15159]  kvm_vcpu_ioctl+0xa61/0xfd0
[  673.723227][T15159]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  673.723252][T15159]  ? __fget_files+0x2a/0x420
[  673.723268][T15159]  ? __fget_files+0x2a/0x420
[  673.723283][T15159]  ? __fget_files+0x2a/0x420
[  673.723299][T15159]  ? bpf_lsm_file_ioctl+0x9/0x20
[  673.723311][T15159]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  673.723326][T15159]  __se_sys_ioctl+0xfc/0x170
[  673.723340][T15159]  do_syscall_64+0x166/0x520
[  673.723353][T15159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.723364][T15159]  ? clear_bhb_loop+0x70/0xc0
[  673.723377][T15159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.723387][T15159] RIP: 0033:0x7f0c86b9e559
[  673.723398][T15159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.723406][T15159] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  673.723418][T15159] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  673.723426][T15159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  673.723433][T15159] RBP: 00007f0c87a31090 R08: 0000000000000000 R09: 0000000000000000
[  673.723439][T15159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  673.723445][T15159] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  673.723462][T15159]  </TASK>
[  673.923429][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2790'.
[  674.515867][T15175] netlink: 'syz.6.2795': attribute type 83 has an invalid length.
[  674.622019][   T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  674.665834][T15179] netlink: 'syz.6.2797': attribute type 27 has an invalid length.
[  674.665845][T15179] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2797'.
[  674.772660][   T10] usb 4-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01
[  674.773751][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  674.773767][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  674.773779][   T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  674.773810][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.780338][T15168] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  674.911871][T15186] FAULT_INJECTION: forcing a failure.
[  674.911871][T15186] name failslab, interval 1, probability 0, space 0, times 0
[  674.911896][T15186] CPU: 0 UID: 0 PID: 15186 Comm: syz.7.2800 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  674.911924][T15186] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  674.911932][T15186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  674.911944][T15186] Call Trace:
[  674.911954][T15186]  <TASK>
[  674.911963][T15186]  dump_stack_lvl+0xe8/0x150
[  674.911985][T15186]  should_fail_ex+0x3eb/0x540
[  674.912001][T15186]  should_failslab+0xa8/0x100
[  674.912017][T15186]  __kmalloc_cache_noprof+0x9e/0x600
[  674.912035][T15186]  ? alloc_fs_context+0x66/0xd00
[  674.912054][T15186]  ? alloc_fs_context+0x66/0xd00
[  674.912081][T15186]  alloc_fs_context+0x66/0xd00
[  674.912103][T15186]  ? __se_sys_fsopen+0x109/0x370
[  674.912127][T15186]  __se_sys_fsopen+0x118/0x370
[  674.912141][T15186]  do_syscall_64+0x166/0x520
[  674.912155][T15186]  ? trace_irq_disable+0x3b/0x140
[  674.912167][T15186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.912177][T15186]  ? clear_bhb_loop+0x70/0xc0
[  674.912195][T15186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.912214][T15186] RIP: 0033:0x7f68d539e559
[  674.912232][T15186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  674.912249][T15186] RSP: 002b:00007f68d6218028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  674.912269][T15186] RAX: ffffffffffffffda RBX: 00007f68d5625fa0 RCX: 00007f68d539e559
[  674.912279][T15186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000840
[  674.912286][T15186] RBP: 00007f68d6218090 R08: 0000000000000000 R09: 0000000000000000
[  674.912292][T15186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  674.912299][T15186] R13: 00007f68d5626038 R14: 00007f68d5625fa0 R15: 00007ffe3bc5b938
[  674.912315][T15186]  </TASK>
[  675.009194][ T5610] Bluetooth: hci2: unexpected event 0x07 length: 0 < 255
[  675.009342][ T5610] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  675.029388][  T993] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[  675.205495][   T10] usb 4-1: USB disconnect, device number 22
[  675.210518][ T5621] Bluetooth: hci2: Reading Intel version command failed (-71)
[  675.227471][  T993] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  675.238189][  T993] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  675.238215][  T993] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 513, setting to 64
[  675.238239][  T993] usb 7-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  675.238264][  T993] usb 7-1: config 1 interface 0 has no altsetting 0
[  675.239428][  T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  675.239446][  T993] usb 7-1: SerialNumber: syz
[  675.246918][T15184] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  675.247043][T15184] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  675.492931][T15184] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  675.493083][T15184] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  675.896123][  T993] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  675.911282][  T993] usb 7-1: USB disconnect, device number 28
[  676.141686][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  676.266999][T15209] FAULT_INJECTION: forcing a failure.
[  676.266999][T15209] name failslab, interval 1, probability 0, space 0, times 0
[  676.267015][T15209] CPU: 0 UID: 0 PID: 15209 Comm: syz.7.2810 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  676.267032][T15209] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  676.267036][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  676.267043][T15209] Call Trace:
[  676.267048][T15209]  <TASK>
[  676.267054][T15209]  dump_stack_lvl+0xe8/0x150
[  676.267075][T15209]  should_fail_ex+0x3eb/0x540
[  676.267091][T15209]  should_failslab+0xa8/0x100
[  676.267106][T15209]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  676.267123][T15209]  ? __lock_acquire+0x747/0x2de0
[  676.267134][T15209]  ? __kernfs_new_node+0xa9/0x980
[  676.267146][T15209]  ? __kernfs_new_node+0xa9/0x980
[  676.267163][T15209]  kstrdup+0x42/0x100
[  676.267178][T15209]  __kernfs_new_node+0xa9/0x980
[  676.267197][T15209]  ? __pfx___kernfs_new_node+0x10/0x10
[  676.267210][T15209]  ? kernfs_root+0x1c/0x230
[  676.267226][T15209]  ? kernfs_root+0x1c/0x230
[  676.267238][T15209]  ? kernfs_root+0x1c/0x230
[  676.267248][T15209]  ? kernfs_root+0x1c/0x230
[  676.267262][T15209]  kernfs_create_dir_ns+0xf7/0x220
[  676.267280][T15209]  sysfs_create_dir_ns+0x12f/0x2a0
[  676.267294][T15209]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  676.267308][T15209]  ? do_raw_spin_unlock+0xf5/0x200
[  676.267324][T15209]  kobject_add_internal+0x622/0xcd0
[  676.267340][T15209]  kobject_add+0x163/0x240
[  676.267356][T15209]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  676.267374][T15209]  ? __pfx_kobject_add+0x10/0x10
[  676.267401][T15209]  ? get_device_parent+0x366/0x3a0
[  676.267415][T15209]  device_add+0x3fa/0xb80
[  676.267428][T15209]  __add_disk+0x517/0xdb0
[  676.267445][T15209]  add_disk_fwnode+0x100/0x3a0
[  676.267460][T15209]  null_add_dev+0x130b/0x1d70
[  676.267478][T15209]  ? __pfx_null_add_dev+0x10/0x10
[  676.267512][T15209]  nullb_device_power_store+0x240/0x380
[  676.267529][T15209]  ? __pfx_nullb_device_power_store+0x10/0x10
[  676.267546][T15209]  ? down_read+0x2b9/0x320
[  676.267561][T15209]  ? __pfx_nullb_device_power_store+0x10/0x10
[  676.267577][T15209]  configfs_write_iter+0x337/0x430
[  676.267594][T15209]  vfs_write+0x612/0xba0
[  676.267609][T15209]  ? __pfx_vfs_write+0x10/0x10
[  676.267622][T15209]  ? __fget_files+0x3a2/0x420
[  676.267637][T15209]  ? __fget_files+0x2a/0x420
[  676.267655][T15209]  ? fdget+0x1ac/0x250
[  676.267673][T15209]  ksys_write+0x150/0x270
[  676.267686][T15209]  ? __pfx_ksys_write+0x10/0x10
[  676.267703][T15209]  do_syscall_64+0x166/0x520
[  676.267717][T15209]  ? trace_irq_disable+0x3b/0x140
[  676.267728][T15209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.267740][T15209]  ? clear_bhb_loop+0x70/0xc0
[  676.267753][T15209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  676.267764][T15209] RIP: 0033:0x7f68d539e559
[  676.267775][T15209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  676.267790][T15209] RSP: 002b:00007f68d6218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  676.267810][T15209] RAX: ffffffffffffffda RBX: 00007f68d5625fa0 RCX: 00007f68d539e559
[  676.267824][T15209] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000008
[  676.267836][T15209] RBP: 00007f68d5435ad8 R08: 0000000000000000 R09: 0000000000000000
[  676.267847][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  676.267858][T15209] R13: 00007f68d5626038 R14: 00007f68d5625fa0 R15: 00007ffe3bc5b938
[  676.267892][T15209]  </TASK>
[  676.267927][T15209] kobject: kobject_add_internal failed for nullb1 (error: -12 parent: block)
[  676.282243][   T10] usb 4-1: device descriptor read/64, error -71
[  676.524073][   T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  676.642601][T15216] profile_transition: unconfined exec no attachment
[  676.648131][   T10] usb 4-1: device descriptor read/64, error -71
[  676.678682][T15214] net_ratelimit: 743 callbacks suppressed
[  676.720147][T15218] profile_transition: unconfined exec no attachment
[  676.760746][   T10] usb usb4-port1: attempt power cycle
[  676.895359][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2815'.
[  676.895869][T15222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2815'.
[  676.914001][T15222] overlayfs: overlapping lowerdir path
[  676.980475][T15227] netlink: 'syz.7.2817': attribute type 4 has an invalid length.
[  677.097331][   T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  677.122475][   T10] usb 4-1: device descriptor read/8, error -71
[  677.353967][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  677.373972][   T10] usb 4-1: device descriptor read/8, error -71
[  677.487263][   T10] usb usb4-port1: unable to enumerate USB device
[  678.098286][   T26] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  678.248173][   T26] usb 7-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00
[  678.249385][   T26] usb 7-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  678.249408][   T26] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.249418][   T26] usb 7-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  678.249530][   T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.251947][   T26] usb 7-1: config 0 descriptor??
[  678.308984][   T26] uvcvideo 7-1:0.0: Found UVC 9.00 device <unnamed> (046d:0825)
[  678.658917][   T26] uvcvideo 7-1:0.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  678.833667][T15260] netlink: 'syz.3.2825': attribute type 83 has an invalid length.
[  679.531959][T15265] FAULT_INJECTION: forcing a failure.
[  679.531959][T15265] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  679.531991][T15265] CPU: 1 UID: 0 PID: 15265 Comm: syz.6.2827 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  679.532019][T15265] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  679.532026][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  679.532033][T15265] Call Trace:
[  679.532038][T15265]  <TASK>
[  679.532047][T15265]  dump_stack_lvl+0xe8/0x150
[  679.532065][T15265]  should_fail_ex+0x3eb/0x540
[  679.532081][T15265]  _copy_from_user+0x2d/0xb0
[  679.532104][T15265]  kstrtouint_from_user+0xd6/0x180
[  679.532128][T15265]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  679.532158][T15265]  ? lock_acquire+0x115/0x350
[  679.532182][T15265]  proc_fail_nth_write+0x8e/0x210
[  679.532197][T15265]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  679.532213][T15265]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  679.532225][T15265]  vfs_write+0x296/0xba0
[  679.532240][T15265]  ? __pfx_vfs_write+0x10/0x10
[  679.532258][T15265]  ? __fget_files+0x2a/0x420
[  679.532285][T15265]  ? __fget_files+0x3a2/0x420
[  679.532310][T15265]  ? __fget_files+0x2a/0x420
[  679.532341][T15265]  ? fdget+0x1ac/0x250
[  679.532360][T15265]  ksys_write+0x150/0x270
[  679.532372][T15265]  ? __pfx_ksys_write+0x10/0x10
[  679.532388][T15265]  do_syscall_64+0x166/0x520
[  679.532402][T15265]  ? trace_irq_disable+0x3b/0x140
[  679.532423][T15265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.532442][T15265]  ? clear_bhb_loop+0x70/0xc0
[  679.532466][T15265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.532485][T15265] RIP: 0033:0x7f0c86b5ed8e
[  679.532500][T15265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  679.532515][T15265] RSP: 002b:00007f0c87a0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  679.532528][T15265] RAX: ffffffffffffffda RBX: 00007f0c87a106c0 RCX: 00007f0c86b5ed8e
[  679.532535][T15265] RDX: 0000000000000001 RSI: 00007f0c87a100a0 RDI: 0000000000000004
[  679.532542][T15265] RBP: 00007f0c87a10090 R08: 0000000000000000 R09: 0000000000000000
[  679.532553][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.532564][T15265] R13: 00007f0c86e26128 R14: 00007f0c86e26090 R15: 00007ffdb48d05a8
[  679.532595][T15265]  </TASK>
[  679.664180][T15267] FAULT_INJECTION: forcing a failure.
[  679.664180][T15267] name failslab, interval 1, probability 0, space 0, times 0
[  679.664228][T15267] CPU: 1 UID: 0 PID: 15267 Comm: syz.6.2828 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  679.664256][T15267] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  679.664264][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  679.664276][T15267] Call Trace:
[  679.664284][T15267]  <TASK>
[  679.664292][T15267]  dump_stack_lvl+0xe8/0x150
[  679.664320][T15267]  should_fail_ex+0x3eb/0x540
[  679.664351][T15267]  should_failslab+0xa8/0x100
[  679.664373][T15267]  ? skb_clone+0x212/0x3a0
[  679.664398][T15267]  kmem_cache_alloc_noprof+0x9c/0x600
[  679.664426][T15267]  ? skb_clone+0x212/0x3a0
[  679.664456][T15267]  skb_clone+0x212/0x3a0
[  679.664485][T15267]  __netlink_deliver_tap+0x355/0x6e0
[  679.664522][T15267]  ? netlink_deliver_tap+0x2e/0x1b0
[  679.664543][T15267]  netlink_deliver_tap+0x19c/0x1b0
[  679.664564][T15267]  netlink_unicast+0x8c1/0xa80
[  679.664607][T15267]  netlink_sendmsg+0x7f0/0xb20
[  679.664632][T15267]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.664653][T15267]  ? aa_sock_msg_perm+0x144/0x210
[  679.664683][T15267]  ? apparmor_socket_sendmsg+0x98/0x360
[  679.664711][T15267]  ? __pfx_netlink_sendmsg+0x10/0x10
[  679.664729][T15267]  sock_sendmsg_nosec+0x14e/0x190
[  679.664750][T15267]  ____sys_sendmsg+0x54e/0x850
[  679.664780][T15267]  ? __pfx_____sys_sendmsg+0x10/0x10
[  679.664812][T15267]  ? import_iovec+0x73/0xa0
[  679.664838][T15267]  ___sys_sendmsg+0x2a5/0x360
[  679.664859][T15267]  ? __lock_acquire+0x747/0x2de0
[  679.664883][T15267]  ? __pfx____sys_sendmsg+0x10/0x10
[  679.664940][T15267]  ? __fget_files+0x3a2/0x420
[  679.664965][T15267]  ? __fget_files+0x2a/0x420
[  679.664999][T15267]  __x64_sys_sendmsg+0x1b1/0x290
[  679.665025][T15267]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  679.665069][T15267]  do_syscall_64+0x166/0x520
[  679.665092][T15267]  ? trace_irq_disable+0x3b/0x140
[  679.665112][T15267]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.665131][T15267]  ? clear_bhb_loop+0x70/0xc0
[  679.665152][T15267]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  679.665171][T15267] RIP: 0033:0x7f0c86b9e559
[  679.665188][T15267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  679.665204][T15267] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  679.665224][T15267] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  679.665238][T15267] RDX: 0000000004000000 RSI: 0000200000000240 RDI: 0000000000000003
[  679.665251][T15267] RBP: 00007f0c87a31090 R08: 0000000000000000 R09: 0000000000000000
[  679.665262][T15267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  679.665273][T15267] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  679.665303][T15267]  </TASK>
[  679.887915][T15273] netlink: 'syz.6.2831': attribute type 3 has an invalid length.
[  680.035785][T12755] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  680.185701][T12755] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  680.187022][T12755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  680.187048][T12755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  680.187065][T12755] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  680.187113][T12755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.190449][T12755] usb 4-1: config 0 descriptor??
[  680.627450][T12755] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xd
[  680.636188][T12755] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  680.664463][T15280] profile_transition: unconfined exec no attachment
[  680.854755][   T10] usb 4-1: USB disconnect, device number 27
[  680.972219][T15282] FAULT_INJECTION: forcing a failure.
[  680.972219][T15282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  680.972277][T15282] CPU: 0 UID: 0 PID: 15282 Comm: syz.6.2834 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  680.972305][T15282] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  680.972313][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  680.972324][T15282] Call Trace:
[  680.972332][T15282]  <TASK>
[  680.972341][T15282]  dump_stack_lvl+0xe8/0x150
[  680.972370][T15282]  should_fail_ex+0x3eb/0x540
[  680.972400][T15282]  _copy_from_user+0x2d/0xb0
[  680.972424][T15282]  memdup_user+0x5e/0xd0
[  680.972448][T15282]  msr_io+0x116/0x8b0
[  680.972470][T15282]  ? lock_acquire+0x115/0x350
[  680.972486][T15282]  ? __pfx_do_get_msr+0x10/0x10
[  680.972507][T15282]  ? __pfx_msr_io+0x10/0x10
[  680.972530][T15282]  ? __srcu_check_read_flavor+0x13d/0x2e0
[  680.972553][T15282]  ? kvm_get_msrs+0x68/0x100
[  680.972569][T15282]  kvm_get_msrs+0x9f/0x100
[  680.972591][T15282]  kvm_arch_vcpu_ioctl+0x11b6/0x23a0
[  680.972616][T15282]  ? lock_acquire+0x115/0x350
[  680.972633][T15282]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  680.972658][T15282]  ? lock_acquire+0x115/0x350
[  680.972686][T15282]  ? is_bpf_text_address+0x26/0x2b0
[  680.972715][T15282]  ? is_bpf_text_address+0x292/0x2b0
[  680.972737][T15282]  ? is_bpf_text_address+0x26/0x2b0
[  680.972763][T15282]  ? kernel_text_address+0xa5/0xe0
[  680.972782][T15282]  ? __kernel_text_address+0xd/0x30
[  680.972800][T15282]  ? unwind_get_return_address+0x4d/0x90
[  680.972820][T15282]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  680.972838][T15282]  ? arch_stack_walk+0xfb/0x150
[  680.972868][T15282]  ? stack_trace_save+0xa9/0x100
[  680.972895][T15282]  ? __pfx_stack_trace_save+0x10/0x10
[  680.972912][T15282]  ? kasan_save_track+0x4f/0x80
[  680.972933][T15282]  ? stack_depot_save_flags+0x33/0x7f0
[  680.972962][T15282]  ? __lock_acquire+0x747/0x2de0
[  680.972983][T15282]  ? kfree+0x1c5/0x650
[  680.973007][T15282]  ? __se_sys_ioctl+0x47/0x170
[  680.973027][T15282]  ? do_syscall_64+0x166/0x520
[  680.973050][T15282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.973086][T15282]  ? __mutex_trylock_common+0x15f/0x270
[  680.973113][T15282]  ? __pfx___mutex_trylock_common+0x10/0x10
[  680.973140][T15282]  ? rcu_is_watching+0x16/0xb0
[  680.973162][T15282]  ? trace_contention_end+0x3d/0x140
[  680.973187][T15282]  ? __mutex_lock+0x305/0x15a0
[  680.973215][T15282]  ? kasan_quarantine_put+0xbb/0x1f0
[  680.973247][T15282]  ? kvm_vcpu_ioctl+0x27f/0xfd0
[  680.973276][T15282]  ? __pfx___mutex_lock+0x10/0x10
[  680.973302][T15282]  ? tomoyo_path_number_perm+0x219/0x5f0
[  680.973330][T15282]  ? do_vfs_ioctl+0x116f/0x1530
[  680.973354][T15282]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  680.973379][T15282]  kvm_vcpu_ioctl+0x7e3/0xfd0
[  680.973412][T15282]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  680.973459][T15282]  ? __fget_files+0x2a/0x420
[  680.973490][T15282]  ? __fget_files+0x2a/0x420
[  680.973517][T15282]  ? __fget_files+0x2a/0x420
[  680.973547][T15282]  ? bpf_lsm_file_ioctl+0x9/0x20
[  680.973568][T15282]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  680.973595][T15282]  __se_sys_ioctl+0xfc/0x170
[  680.973619][T15282]  do_syscall_64+0x166/0x520
[  680.973642][T15282]  ? trace_irq_disable+0x3b/0x140
[  680.973662][T15282]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.973682][T15282]  ? clear_bhb_loop+0x70/0xc0
[  680.973706][T15282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  680.973725][T15282] RIP: 0033:0x7f0c86b9e559
[  680.973744][T15282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  680.973761][T15282] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  680.973782][T15282] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  680.973797][T15282] RDX: 0000200000000080 RSI: 00000000c008ae88 RDI: 0000000000000005
[  680.973809][T15282] RBP: 00007f0c87a31090 R08: 0000000000000000 R09: 0000000000000000
[  680.973820][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  680.973832][T15282] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  680.973863][T15282]  </TASK>
[  681.190553][T15284] FAULT_INJECTION: forcing a failure.
[  681.190553][T15284] name failslab, interval 1, probability 0, space 0, times 0
[  681.190582][T15284] CPU: 1 UID: 0 PID: 15284 Comm: syz.6.2835 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  681.190611][T15284] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  681.190621][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  681.190633][T15284] Call Trace:
[  681.190641][T15284]  <TASK>
[  681.190650][T15284]  dump_stack_lvl+0xe8/0x150
[  681.190680][T15284]  should_fail_ex+0x3eb/0x540
[  681.190710][T15284]  should_failslab+0xa8/0x100
[  681.190734][T15284]  __kmalloc_noprof+0xf9/0x710
[  681.190761][T15284]  ? __kmalloc_noprof+0x1a6/0x710
[  681.190787][T15284]  ? sock_kmalloc+0xd6/0x160
[  681.190812][T15284]  ? sock_kmalloc+0xd6/0x160
[  681.190843][T15284]  sock_kmalloc+0xd6/0x160
[  681.190871][T15284]  skcipher_accept_parent_nokey+0x97/0x2b0
[  681.190897][T15284]  ? __pfx_skcipher_accept_parent_nokey+0x10/0x10
[  681.190923][T15284]  af_alg_accept+0x1ed/0x520
[  681.190949][T15284]  do_accept+0x501/0x730
[  681.190975][T15284]  ? __pfx_do_accept+0x10/0x10
[  681.191017][T15284]  __sys_accept4+0x135/0x230
[  681.191041][T15284]  ? __pfx___sys_accept4+0x10/0x10
[  681.191072][T15284]  __x64_sys_accept+0x7d/0x90
[  681.191095][T15284]  do_syscall_64+0x166/0x520
[  681.191119][T15284]  ? trace_irq_disable+0x3b/0x140
[  681.191139][T15284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.191159][T15284]  ? clear_bhb_loop+0x70/0xc0
[  681.191181][T15284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  681.191200][T15284] RIP: 0033:0x7f0c86b9e559
[  681.191218][T15284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  681.191234][T15284] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  681.191255][T15284] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  681.191269][T15284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  681.191282][T15284] RBP: 00007f0c86c35ad8 R08: 0000000000000000 R09: 0000000000000000
[  681.191294][T15284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  681.191307][T15284] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  681.191339][T15284]  </TASK>
[  681.657296][T15295] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  681.693526][T15299] profile_transition: unconfined exec no attachment
[  681.843138][  T993] usb 9-1: USB disconnect, device number 11
[  681.864204][    C1] net_ratelimit: 119 callbacks suppressed
[  682.001915][T15300] kvm: user requested TSC rate below hardware speed
[  682.049152][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  682.060618][ T8004] rtrs_client L1784: <s+>: Resolving route failed, err: -ENODEV
[  682.065438][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  682.075713][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  682.103685][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  682.112430][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  682.129805][T15309] FAULT_INJECTION: forcing a failure.
[  682.129805][T15309] name failslab, interval 1, probability 0, space 0, times 0
[  682.129833][T15309] CPU: 1 UID: 0 PID: 15309 Comm: syz.6.2844 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  682.129862][T15309] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  682.129870][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  682.129882][T15309] Call Trace:
[  682.129889][T15309]  <TASK>
[  682.129898][T15309]  dump_stack_lvl+0xe8/0x150
[  682.129931][T15309]  should_fail_ex+0x3eb/0x540
[  682.129959][T15309]  should_failslab+0xa8/0x100
[  682.129983][T15309]  __kmalloc_noprof+0xf9/0x710
[  682.130012][T15309]  ? __kmalloc_noprof+0x1a6/0x710
[  682.130039][T15309]  ? sock_kmalloc+0xd6/0x160
[  682.130063][T15309]  ? sock_kmalloc+0xd6/0x160
[  682.130093][T15309]  sock_kmalloc+0xd6/0x160
[  682.130119][T15309]  skcipher_accept_parent_nokey+0x97/0x2b0
[  682.130154][T15309]  ? __pfx_skcipher_accept_parent_nokey+0x10/0x10
[  682.130179][T15309]  af_alg_accept+0x1ed/0x520
[  682.130202][T15309]  do_accept+0x501/0x730
[  682.130228][T15309]  ? __pfx_do_accept+0x10/0x10
[  682.130278][T15309]  __sys_accept4+0x135/0x230
[  682.130303][T15309]  ? __pfx___sys_accept4+0x10/0x10
[  682.130336][T15309]  __x64_sys_accept+0x7d/0x90
[  682.130357][T15309]  do_syscall_64+0x166/0x520
[  682.130383][T15309]  ? trace_irq_disable+0x3b/0x140
[  682.130404][T15309]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.130425][T15309]  ? clear_bhb_loop+0x70/0xc0
[  682.130449][T15309]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.130470][T15309] RIP: 0033:0x7f0c86b9e559
[  682.130487][T15309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  682.130504][T15309] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  682.130526][T15309] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  682.130541][T15309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  682.130553][T15309] RBP: 00007f0c86c35ad8 R08: 0000000000000000 R09: 0000000000000000
[  682.130566][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  682.130577][T15309] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  682.130608][T15309]  </TASK>
[  682.375418][T15295] rtrs_client L2656: <s+>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  682.405805][T15311] profile_transition: unconfined exec no attachment
[  682.460315][T15312] profile_transition: unconfined exec no attachment
[  682.501798][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.505186][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.532463][T15315] profile_transition: unconfined exec no attachment
[  682.598290][T15317] profile_transition: unconfined exec no attachment
[  682.658551][T15320] profile_transition: unconfined exec no attachment
[  682.716019][T15324] profile_transition: unconfined exec no attachment
[  682.775605][T15326] profile_transition: unconfined exec no attachment
[  682.836463][T15327] profile_transition: unconfined exec no attachment
[  682.946809][T15305] rxe_eth0 speed is unknown, defaulting to 1000
[  683.108542][  T993] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  683.245669][  T993] usb 4-1: device descriptor read/64, error -71
[  683.495014][  T993] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  683.635655][  T993] usb 4-1: device descriptor read/64, error -71
[  683.654575][T15332] profile_transition: unconfined exec no attachment
[  683.703365][   T26] uvcvideo 7-1:0.1: Failed to query (GET_CUR) UVC probe control : -110 (exp. 48).
[  683.703490][   T26] uvcvideo 7-1:0.1: Failed to initialize the device (-5).
[  683.704164][   T26] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -5
[  683.756181][  T993] usb usb4-port1: attempt power cycle
[  684.002960][T15305] bridge0: port 1(bridge_slave_0) entered blocking state
[  684.003164][T15305] bridge0: port 1(bridge_slave_0) entered disabled state
[  684.003718][T15305] bridge_slave_0: entered allmulticast mode
[  684.006068][T15305] bridge_slave_0: entered promiscuous mode
[  684.009945][T15305] bridge0: port 2(bridge_slave_1) entered blocking state
[  684.010140][T15305] bridge0: port 2(bridge_slave_1) entered disabled state
[  684.010310][T15305] bridge_slave_1: entered allmulticast mode
[  684.017642][T15305] bridge_slave_1: entered promiscuous mode
[  684.121858][  T993] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  684.124701][T15305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  684.129732][T15305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  684.160666][  T993] usb 4-1: device descriptor read/8, error -71
[  684.187327][T15305] team0: Port device team_slave_0 added
[  684.192570][T15305] team0: Port device team_slave_1 added
[  684.249664][ T5621] Bluetooth: hci2: command tx timeout
[  684.273760][T15305] batman_adv: batadv0: Adding interface: batadv_slave_0
[  684.273768][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.273802][T15305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  684.277236][T15305] batman_adv: batadv0: Adding interface: batadv_slave_1
[  684.277247][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  684.277271][T15305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  684.390462][T15305] hsr_slave_0: entered promiscuous mode
[  684.393972][T15305] hsr_slave_1: entered promiscuous mode
[  684.428565][  T993] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  684.452617][  T993] usb 4-1: device descriptor read/8, error -71
[  684.559808][  T993] usb usb4-port1: unable to enumerate USB device
[  684.980513][T15305] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  684.999032][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  685.001822][T15305] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  685.025487][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  685.027464][T15305] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  685.056596][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  685.057873][T15305] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  685.068737][T15305] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  685.252905][T15305] 8021q: adding VLAN 0 to HW filter on device bond0
[  685.287058][T15305] 8021q: adding VLAN 0 to HW filter on device team0
[  685.299394][ T3041] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.299498][ T3041] bridge0: port 1(bridge_slave_0) entered forwarding state
[  685.349607][ T3041] bridge0: port 2(bridge_slave_1) entered blocking state
[  685.349705][ T3041] bridge0: port 2(bridge_slave_1) entered forwarding state
[  685.685129][T15359] FAULT_INJECTION: forcing a failure.
[  685.685129][T15359] name failslab, interval 1, probability 0, space 0, times 0
[  685.685156][T15359] CPU: 1 UID: 0 PID: 15359 Comm: syz.6.2853 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  685.685185][T15359] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  685.685194][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  685.685205][T15359] Call Trace:
[  685.685213][T15359]  <TASK>
[  685.685222][T15359]  dump_stack_lvl+0xe8/0x150
[  685.685251][T15359]  should_fail_ex+0x3eb/0x540
[  685.685283][T15359]  should_failslab+0xa8/0x100
[  685.685307][T15359]  __kmalloc_cache_noprof+0x9e/0x600
[  685.685338][T15359]  ? __kasan_kmalloc+0x93/0xb0
[  685.685357][T15359]  ? __v4l2_subdev_state_alloc+0x5a/0x3d0
[  685.685381][T15359]  ? __v4l2_subdev_state_alloc+0x5a/0x3d0
[  685.685410][T15359]  __v4l2_subdev_state_alloc+0x5a/0x3d0
[  685.685438][T15359]  subdev_open+0xad/0x430
[  685.685465][T15359]  v4l2_open+0x1bc/0x3a0
[  685.685492][T15359]  chrdev_open+0x4d9/0x600
[  685.685516][T15359]  ? __pfx_chrdev_open+0x10/0x10
[  685.685539][T15359]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  685.685563][T15359]  ? devcgroup_check_permission+0x31/0x8f0
[  685.685591][T15359]  ? __pfx_chrdev_open+0x10/0x10
[  685.685614][T15359]  do_dentry_open+0x80e/0x1360
[  685.685649][T15359]  vfs_open_consume+0x4a/0x350
[  685.685671][T15359]  ? path_openat+0x16e1/0x20f0
[  685.685694][T15359]  path_openat+0x16fc/0x20f0
[  685.685731][T15359]  do_file_open+0x23e/0x4a0
[  685.685756][T15359]  ? __pfx_do_file_open+0x10/0x10
[  685.685794][T15359]  ? _raw_spin_unlock+0x28/0x50
[  685.685815][T15359]  ? alloc_fd+0x6af/0x760
[  685.685852][T15359]  do_sys_openat2+0x115/0x200
[  685.685877][T15359]  ? __pfx_do_sys_openat2+0x10/0x10
[  685.685912][T15359]  ? do_user_addr_fault+0xd3f/0x1480
[  685.685942][T15359]  __x64_sys_openat+0x138/0x170
[  685.685973][T15359]  do_syscall_64+0x166/0x520
[  685.685996][T15359]  ? trace_irq_disable+0x3b/0x140
[  685.686016][T15359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.686035][T15359]  ? clear_bhb_loop+0x70/0xc0
[  685.686061][T15359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.686079][T15359] RIP: 0033:0x7f0c86b5ed8e
[  685.686098][T15359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  685.686115][T15359] RSP: 002b:00007f0c87a30b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  685.686136][T15359] RAX: ffffffffffffffda RBX: 00007f0c87a316c0 RCX: 00007f0c86b5ed8e
[  685.686151][T15359] RDX: 0000000000080002 RSI: 00007f0c87a30c00 RDI: ffffffffffffff9c
[  685.686165][T15359] RBP: 00007f0c87a30c00 R08: 0000000000000000 R09: 0000000000000000
[  685.686178][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  685.686191][T15359] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  685.686221][T15359]  </TASK>
[  685.686671][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  685.686751][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  686.318915][ T5621] Bluetooth: hci2: command tx timeout
[  686.350176][T15305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  686.692153][T15386] profile_transition: 16 callbacks suppressed
[  686.692166][T15386] profile_transition: unconfined exec no attachment
[  686.817273][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 10 > 9
[  686.817323][ T5621] Bluetooth: hci1: unexpected event for opcode 0x1001
[  686.817987][ T5621] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  686.871369][T15305] veth0_vlan: entered promiscuous mode
[  686.890138][T15305] veth1_vlan: entered promiscuous mode
[  686.938313][T15305] veth0_macvtap: entered promiscuous mode
[  686.942901][T15305] veth1_macvtap: entered promiscuous mode
[  686.959244][ T3041] net_ratelimit: 86 callbacks suppressed
[  686.962222][ T2014] block nbd0: Possible stuck request ffff888028447000: control (read@0,1024B). Runtime 30 seconds
[  686.972090][ T2014] block nbd0: Possible stuck request ffff8880284471c0: control (read@1024,1024B). Runtime 30 seconds
[  686.972121][ T2014] block nbd0: Possible stuck request ffff888028447380: control (read@2048,2048B). Runtime 30 seconds
[  687.040785][T15392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.041434][T15392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.044849][T15305] batman_adv: batadv0: Interface activated: batadv_slave_0
[  687.076257][T15305] batman_adv: batadv0: Interface activated: batadv_slave_1
[  687.115581][ T7998] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  687.137364][ T7998] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  687.139467][ T8002] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  687.139799][ T8002] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  687.263657][ T7988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.263669][ T7988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.323807][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  687.323823][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  687.548915][T15397] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2861'.
[  687.696923][T15403] block nbd1: shutting down sockets
[  687.710246][T15403] tmpfs: Unknown parameter '00000000000000000000000'
[  688.010170][T15420] profile_transition: unconfined exec no attachment
[  688.055478][T15422] profile_transition: unconfined exec no attachment
[  688.056467][T15424] profile_transition: unconfined exec no attachment
[  688.168897][T15427] profile_transition: unconfined exec no attachment
[  688.235881][T15430] profile_transition: unconfined exec no attachment
[  688.290182][T15432] profile_transition: unconfined exec no attachment
[  688.341627][T15433] profile_transition: unconfined exec no attachment
[  688.385921][ T5621] Bluetooth: hci2: command tx timeout
[  688.390881][T15434] profile_transition: unconfined exec no attachment
[  688.469921][T15436] profile_transition: unconfined exec no attachment
[  688.504580][T15438] FAULT_INJECTION: forcing a failure.
[  688.504580][T15438] name failslab, interval 1, probability 0, space 0, times 0
[  688.505107][T15438] CPU: 0 UID: 0 PID: 15438 Comm: syz.3.2870 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  688.505142][T15438] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  688.505152][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  688.505164][T15438] Call Trace:
[  688.505172][T15438]  <TASK>
[  688.505181][T15438]  dump_stack_lvl+0xe8/0x150
[  688.505213][T15438]  should_fail_ex+0x3eb/0x540
[  688.505242][T15438]  ? __pfx_sock_alloc_inode+0x10/0x10
[  688.505262][T15438]  should_failslab+0xa8/0x100
[  688.505285][T15438]  ? __pfx_sock_alloc_inode+0x10/0x10
[  688.505303][T15438]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  688.505332][T15438]  ? sock_alloc_inode+0x2c/0x1a0
[  688.505349][T15438]  ? sock_alloc_inode+0x2c/0x1a0
[  688.505373][T15438]  ? __pfx_sock_alloc_inode+0x10/0x10
[  688.505391][T15438]  sock_alloc_inode+0x2c/0x1a0
[  688.505410][T15438]  ? __pfx_sock_alloc_inode+0x10/0x10
[  688.505426][T15438]  alloc_inode+0x6a/0x1b0
[  688.505455][T15438]  __sock_create+0x127/0xac0
[  688.505482][T15438]  __sys_socket+0xd6/0x1b0
[  688.505507][T15438]  __x64_sys_socket+0x7a/0x90
[  688.505529][T15438]  do_syscall_64+0x166/0x520
[  688.505555][T15438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.505575][T15438]  ? clear_bhb_loop+0x70/0xc0
[  688.505607][T15438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.505627][T15438] RIP: 0033:0x7f5b1cb9e559
[  688.505645][T15438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.505661][T15438] RSP: 002b:00007f5b1d9ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  688.505682][T15438] RAX: ffffffffffffffda RBX: 00007f5b1ce25fa0 RCX: 00007f5b1cb9e559
[  688.505696][T15438] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002
[  688.505708][T15438] RBP: 00007f5b1cc35ad8 R08: 0000000000000000 R09: 0000000000000000
[  688.505721][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  688.505732][T15438] R13: 00007f5b1ce26038 R14: 00007f5b1ce25fa0 R15: 00007ffecf6ed2d8
[  688.505763][T15438]  </TASK>
[  688.511002][T15438] netlink: 'syz.3.2870': attribute type 2 has an invalid length.
[  688.680346][T15438] : entered promiscuous mode
[  688.855440][T10429] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  688.860667][T15446] netlink: 'syz.6.2873': attribute type 10 has an invalid length.
[  689.005738][T10429] usb 4-1: Using ep0 maxpacket: 16
[  689.011027][T10429] usb 4-1: unable to get BOS descriptor or descriptor too short
[  689.011072][T10429] usb 4-1: New USB device found: idVendor=0c88, idProduct=0021, bcdDevice=cc.c5
[  689.017589][T10429] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  689.025652][T10429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.025672][T10429] usb 4-1: Product: syz
[  689.025723][T10429] usb 4-1: Manufacturer: syz
[  689.025738][T10429] usb 4-1: SerialNumber: syz
[  689.090297][T15459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.095364][T15459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.114494][T15461] FAULT_INJECTION: forcing a failure.
[  689.114494][T15461] name failslab, interval 1, probability 0, space 0, times 0
[  689.114523][T15461] CPU: 1 UID: 0 PID: 15461 Comm: syz.7.2878 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  689.114551][T15461] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  689.114560][T15461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  689.114571][T15461] Call Trace:
[  689.114578][T15461]  <TASK>
[  689.114586][T15461]  dump_stack_lvl+0xe8/0x150
[  689.114616][T15461]  should_fail_ex+0x3eb/0x540
[  689.114643][T15461]  should_failslab+0xa8/0x100
[  689.114666][T15461]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  689.114691][T15461]  ? __lock_acquire+0x747/0x2de0
[  689.114711][T15461]  ? __d_alloc+0x37/0x820
[  689.114731][T15461]  ? __d_alloc+0x37/0x820
[  689.114755][T15461]  __d_alloc+0x37/0x820
[  689.114777][T15461]  d_alloc_pseudo+0x21/0xc0
[  689.114798][T15461]  alloc_path_pseudo+0x107/0x220
[  689.114826][T15461]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  689.114861][T15461]  alloc_file_pseudo+0xa8/0x1e0
[  689.114888][T15461]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  689.114924][T15461]  anon_inode_getfd+0xca/0x1f0
[  689.114954][T15461]  __se_sys_fsopen+0x2bd/0x370
[  689.114981][T15461]  do_syscall_64+0x166/0x520
[  689.115004][T15461]  ? trace_irq_disable+0x3b/0x140
[  689.115024][T15461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.115044][T15461]  ? clear_bhb_loop+0x70/0xc0
[  689.115065][T15461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.115091][T15461] RIP: 0033:0x7f68d539e559
[  689.115108][T15461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.115125][T15461] RSP: 002b:00007f68d6218028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  689.115145][T15461] RAX: ffffffffffffffda RBX: 00007f68d5625fa0 RCX: 00007f68d539e559
[  689.115160][T15461] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140
[  689.115172][T15461] RBP: 00007f68d6218090 R08: 0000000000000000 R09: 0000000000000000
[  689.115185][T15461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.115197][T15461] R13: 00007f68d5626038 R14: 00007f68d5625fa0 R15: 00007ffe3bc5b938
[  689.115227][T15461]  </TASK>
[  689.291314][T10429] usb 4-1: palm_os_4_probe - error -71 getting connection info
[  689.291383][T10429] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  689.335060][T10429] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  689.351220][T10429] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  689.358504][T10429] usb 4-1: USB disconnect, device number 32
[  689.376386][T10429] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  689.396376][T10429] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  689.397463][T10429] visor 4-1:1.0: device disconnected
[  689.721381][T15469] FAULT_INJECTION: forcing a failure.
[  689.721381][T15469] name failslab, interval 1, probability 0, space 0, times 0
[  689.721401][T15469] CPU: 0 UID: 0 PID: 15469 Comm: syz.6.2882 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  689.721417][T15469] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  689.721421][T15469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  689.721428][T15469] Call Trace:
[  689.721432][T15469]  <TASK>
[  689.721438][T15469]  dump_stack_lvl+0xe8/0x150
[  689.721458][T15469]  should_fail_ex+0x3eb/0x540
[  689.721474][T15469]  should_failslab+0xa8/0x100
[  689.721487][T15469]  ? skb_clone+0x212/0x3a0
[  689.721501][T15469]  kmem_cache_alloc_noprof+0x9c/0x600
[  689.721524][T15469]  ? skb_clone+0x212/0x3a0
[  689.721541][T15469]  skb_clone+0x212/0x3a0
[  689.721557][T15469]  __netlink_deliver_tap+0x355/0x6e0
[  689.721574][T15469]  ? netlink_deliver_tap+0x2e/0x1b0
[  689.721585][T15469]  netlink_deliver_tap+0x19c/0x1b0
[  689.721597][T15469]  netlink_unicast+0x8c1/0xa80
[  689.721621][T15469]  netlink_sendmsg+0x7f0/0xb20
[  689.721635][T15469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.721648][T15469]  ? aa_sock_msg_perm+0x144/0x210
[  689.721666][T15469]  ? apparmor_socket_sendmsg+0x98/0x360
[  689.721681][T15469]  ? __pfx_netlink_sendmsg+0x10/0x10
[  689.721692][T15469]  sock_sendmsg_nosec+0x14e/0x190
[  689.721704][T15469]  ____sys_sendmsg+0x54e/0x850
[  689.721720][T15469]  ? __pfx_____sys_sendmsg+0x10/0x10
[  689.721738][T15469]  ? import_iovec+0x73/0xa0
[  689.721753][T15469]  ___sys_sendmsg+0x2a5/0x360
[  689.721765][T15469]  ? __lock_acquire+0x747/0x2de0
[  689.721779][T15469]  ? __pfx____sys_sendmsg+0x10/0x10
[  689.721810][T15469]  ? __fget_files+0x3a2/0x420
[  689.721825][T15469]  ? __fget_files+0x2a/0x420
[  689.721845][T15469]  __x64_sys_sendmsg+0x1b1/0x290
[  689.721859][T15469]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  689.721884][T15469]  do_syscall_64+0x166/0x520
[  689.721897][T15469]  ? trace_irq_disable+0x3b/0x140
[  689.721908][T15469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.721923][T15469]  ? clear_bhb_loop+0x70/0xc0
[  689.721945][T15469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  689.721961][T15469] RIP: 0033:0x7f0c86b9e559
[  689.721972][T15469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.721982][T15469] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  689.721994][T15469] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  689.722001][T15469] RDX: 0000000000080000 RSI: 0000200000000340 RDI: 0000000000000003
[  689.722009][T15469] RBP: 00007f0c87a31090 R08: 0000000000000000 R09: 0000000000000000
[  689.722018][T15469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  689.722025][T15469] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  689.722042][T15469]  </TASK>
[  690.458982][ T5621] Bluetooth: hci2: command tx timeout
[  690.764299][T15505] FAULT_INJECTION: forcing a failure.
[  690.764299][T15505] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.764327][T15505] CPU: 1 UID: 0 PID: 15505 Comm: syz.3.2892 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  690.764353][T15505] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  690.764370][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  690.764381][T15505] Call Trace:
[  690.764388][T15505]  <TASK>
[  690.764397][T15505]  dump_stack_lvl+0xe8/0x150
[  690.764427][T15505]  should_fail_ex+0x3eb/0x540
[  690.764453][T15505]  _copy_from_user+0x2d/0xb0
[  690.764478][T15505]  kstrtouint_from_user+0xd6/0x180
[  690.764502][T15505]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  690.764531][T15505]  ? lock_acquire+0x115/0x350
[  690.764555][T15505]  proc_fail_nth_write+0x8e/0x210
[  690.764584][T15505]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  690.764613][T15505]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  690.764635][T15505]  vfs_write+0x296/0xba0
[  690.764663][T15505]  ? __pfx_vfs_write+0x10/0x10
[  690.764685][T15505]  ? __fget_files+0x2a/0x420
[  690.764712][T15505]  ? __fget_files+0x3a2/0x420
[  690.764738][T15505]  ? __fget_files+0x2a/0x420
[  690.764770][T15505]  ? fdget+0x1ac/0x250
[  690.764802][T15505]  ksys_write+0x150/0x270
[  690.764824][T15505]  ? __pfx_ksys_write+0x10/0x10
[  690.764855][T15505]  do_syscall_64+0x166/0x520
[  690.764878][T15505]  ? trace_irq_disable+0x3b/0x140
[  690.764898][T15505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.764917][T15505]  ? clear_bhb_loop+0x70/0xc0
[  690.764941][T15505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.764959][T15505] RIP: 0033:0x7f5b1cb5ed8e
[  690.764978][T15505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  690.764994][T15505] RSP: 002b:00007f5b1d9aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  690.765014][T15505] RAX: ffffffffffffffda RBX: 00007f5b1d9ab6c0 RCX: 00007f5b1cb5ed8e
[  690.765028][T15505] RDX: 0000000000000001 RSI: 00007f5b1d9ab0a0 RDI: 0000000000000005
[  690.765041][T15505] RBP: 00007f5b1d9ab090 R08: 0000000000000000 R09: 0000000000000000
[  690.765053][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.765064][T15505] R13: 00007f5b1ce26038 R14: 00007f5b1ce25fa0 R15: 00007ffecf6ed2d8
[  690.765095][T15505]  </TASK>
[  691.033899][T15512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.035712][T15512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.125843][T15508] FAULT_INJECTION: forcing a failure.
[  691.125843][T15508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  691.125877][T15508] CPU: 1 UID: 0 PID: 15508 Comm: syz.9.2893 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  691.125907][T15508] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  691.125917][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  691.125930][T15508] Call Trace:
[  691.125938][T15508]  <TASK>
[  691.125947][T15508]  dump_stack_lvl+0xe8/0x150
[  691.125979][T15508]  should_fail_ex+0x3eb/0x540
[  691.126009][T15508]  copy_fpstate_to_sigframe+0xa83/0xd20
[  691.126039][T15508]  ? copy_fpstate_to_sigframe+0x188/0xd20
[  691.126071][T15508]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  691.126120][T15508]  ? fpu__alloc_mathframe+0xac/0x130
[  691.126149][T15508]  get_sigframe+0x603/0x830
[  691.126183][T15508]  ? __pfx_get_sigframe+0x10/0x10
[  691.126220][T15508]  x64_setup_rt_frame+0x163/0xc50
[  691.126254][T15508]  ? _raw_spin_unlock_irq+0x2e/0x50
[  691.126277][T15508]  ? get_signal+0x10d8/0x12c0
[  691.126306][T15508]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  691.126350][T15508]  arch_do_signal_or_restart+0x456/0x860
[  691.126380][T15508]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  691.126424][T15508]  exit_to_user_mode_loop+0x10e/0x770
[  691.126447][T15508]  ? rcu_is_watching+0x16/0xb0
[  691.126476][T15508]  do_syscall_64+0x328/0x520
[  691.126501][T15508]  ? trace_irq_disable+0x3b/0x140
[  691.126522][T15508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.126554][T15508]  ? clear_bhb_loop+0x70/0xc0
[  691.126579][T15508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.126599][T15508] RIP: 0033:0x7f7877d9e559
[  691.126617][T15508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.126636][T15508] RSP: 002b:00007f7875ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7
[  691.126658][T15508] RAX: fffffffffffffff2 RBX: 00007f7878025fa0 RCX: 00007f7877d9e559
[  691.126673][T15508] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0200000000000000
[  691.126686][T15508] RBP: 00007f7877e35ad8 R08: 9999999999999999 R09: 0000000000000000
[  691.126700][T15508] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[  691.126713][T15508] R13: 00007f7878026038 R14: 00007f7878025fa0 R15: 00007ffd930d50f8
[  691.126745][T15508]  </TASK>
[  691.384437][T15521] ieee802154 phy0 wpan0: encryption failed: -22
[  691.386355][T15521] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2898'.
[  691.404915][T15521] aa_setprocattr_changehat: aa_setprocattr_changehat: (pid 15521) Magic 0x4 count 0 hat 'ct'
[  691.404931][T15521] aa_setprocattr_changehat: aa_setprocattr_changehat: (pid 15521) Magic 0x4 count 1 hat 'ct'
[  691.404941][T15521] aa_setprocattr_changehat: aa_setprocattr_changehat: (pid 15521) Magic 0x4 count 2 hat ')'
[  691.404950][T15521] aa_setprocattr_changehat: aa_setprocattr_changehat: (pid 15521) Magic 0x4 count 3 hat 'ct'
[  691.405088][   T32] audit: type=1400 audit(1792497683.766:575): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15520 comm="syz.3.2898"
[  691.416696][T10429] hid_parser_main: 4 callbacks suppressed
[  691.416711][T10429] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0
[  691.449663][T10429] hid-generic 0000:0000:0000.0035: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  691.638359][T15530] FAULT_INJECTION: forcing a failure.
[  691.638359][T15530] name failslab, interval 1, probability 0, space 0, times 0
[  691.638387][T15530] CPU: 1 UID: 0 PID: 15530 Comm: syz.9.2901 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  691.638414][T15530] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  691.638421][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  691.638433][T15530] Call Trace:
[  691.638442][T15530]  <TASK>
[  691.638450][T15530]  dump_stack_lvl+0xe8/0x150
[  691.638478][T15530]  should_fail_ex+0x3eb/0x540
[  691.638506][T15530]  should_failslab+0xa8/0x100
[  691.638528][T15530]  ? security_file_alloc+0x34/0x310
[  691.638552][T15530]  kmem_cache_alloc_noprof+0x9c/0x600
[  691.638577][T15530]  ? rcu_is_watching+0x16/0xb0
[  691.638600][T15530]  ? security_file_alloc+0x34/0x310
[  691.638629][T15530]  security_file_alloc+0x34/0x310
[  691.638654][T15530]  init_file+0x90/0x2b0
[  691.638680][T15530]  alloc_empty_file+0x74/0x1d0
[  691.638706][T15530]  path_openat+0x96/0x20f0
[  691.638747][T15530]  do_file_open+0x23e/0x4a0
[  691.638772][T15530]  ? __pfx_do_file_open+0x10/0x10
[  691.638812][T15530]  ? _raw_spin_unlock+0x28/0x50
[  691.638832][T15530]  ? alloc_fd+0x6af/0x760
[  691.638868][T15530]  do_sys_openat2+0x115/0x200
[  691.638895][T15530]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.638920][T15530]  ? ksys_write+0x242/0x270
[  691.638939][T15530]  ? __pfx_ksys_write+0x10/0x10
[  691.638961][T15530]  __x64_sys_openat+0x138/0x170
[  691.638990][T15530]  do_syscall_64+0x166/0x520
[  691.639013][T15530]  ? trace_irq_disable+0x3b/0x140
[  691.639032][T15530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.639052][T15530]  ? clear_bhb_loop+0x70/0xc0
[  691.639075][T15530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.639094][T15530] RIP: 0033:0x7f7877d9e559
[  691.639112][T15530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.639128][T15530] RSP: 002b:00007f7875ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  691.639148][T15530] RAX: ffffffffffffffda RBX: 00007f7878025fa0 RCX: 00007f7877d9e559
[  691.639163][T15530] RDX: 000000000000275a RSI: 0000200000000c40 RDI: ffffffffffffff9c
[  691.639177][T15530] RBP: 00007f7875ff6090 R08: 0000000000000000 R09: 0000000000000000
[  691.639190][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.639201][T15530] R13: 00007f7878026038 R14: 00007f7878025fa0 R15: 00007ffd930d50f8
[  691.639231][T15530]  </TASK>
[  692.047385][    C0] net_ratelimit: 1717 callbacks suppressed
[  692.300655][T15545] FAULT_INJECTION: forcing a failure.
[  692.300655][T15545] name failslab, interval 1, probability 0, space 0, times 0
[  692.300691][T15545] CPU: 1 UID: 0 PID: 15545 Comm: syz.3.2907 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  692.300719][T15545] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  692.300726][T15545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  692.300737][T15545] Call Trace:
[  692.300745][T15545]  <TASK>
[  692.300753][T15545]  dump_stack_lvl+0xe8/0x150
[  692.300782][T15545]  should_fail_ex+0x3eb/0x540
[  692.300806][T15545]  should_failslab+0xa8/0x100
[  692.300829][T15545]  __kmalloc_cache_noprof+0x9e/0x600
[  692.300860][T15545]  ? __se_sys_mount+0x166/0x420
[  692.300885][T15545]  ? __se_sys_mount+0x166/0x420
[  692.300911][T15545]  ? memdup_user+0x99/0xd0
[  692.300939][T15545]  __se_sys_mount+0x166/0x420
[  692.300969][T15545]  ? __pfx___se_sys_mount+0x10/0x10
[  692.301002][T15545]  ? __x64_sys_mount+0x20/0xc0
[  692.301029][T15545]  do_syscall_64+0x166/0x520
[  692.301052][T15545]  ? trace_irq_disable+0x3b/0x140
[  692.301072][T15545]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.301091][T15545]  ? clear_bhb_loop+0x70/0xc0
[  692.301112][T15545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  692.301129][T15545] RIP: 0033:0x7f5b1cb9e559
[  692.301147][T15545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.301163][T15545] RSP: 002b:00007f5b1d9ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  692.301182][T15545] RAX: ffffffffffffffda RBX: 00007f5b1ce25fa0 RCX: 00007f5b1cb9e559
[  692.301196][T15545] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000200000000000
[  692.301210][T15545] RBP: 00007f5b1d9ab090 R08: 00002000000001c0 R09: 0000000000000000
[  692.301223][T15545] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001
[  692.301235][T15545] R13: 00007f5b1ce26038 R14: 00007f5b1ce25fa0 R15: 00007ffecf6ed2d8
[  692.301266][T15545]  </TASK>
[  692.557686][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.560450][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.561456][T15551] profile_transition: 5 callbacks suppressed
[  692.561469][T15551] profile_transition: unconfined exec no attachment
[  692.569331][T15549] Bluetooth: MGMT ver 1.23
[  693.105387][T15570] netlink: 'syz.7.2916': attribute type 10 has an invalid length.
[  693.193680][T15574] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  693.197087][T15572] netlink: 'syz.9.2917': attribute type 21 has an invalid length.
[  693.197176][T15572] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2917'.
[  693.291454][T15579] jffs2: notice: (15579) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  693.338263][T15582] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2920'.
[  693.343083][T15582] i2c i2c-0: new_device: Can't parse I2C address
[  693.409628][T15586] profile_transition: unconfined exec no attachment
[  693.570069][T15584] null_blk: disk nullb1 created
[  693.672031][T15592] netlink: 'syz.9.2924': attribute type 7 has an invalid length.
[  693.672050][T15592] netlink: 'syz.9.2924': attribute type 5 has an invalid length.
[  693.672063][T15592] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2924'.
[  693.684179][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  693.686587][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.749589][T15594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  693.752858][T15594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.061858][T15605] jffs2: notice: (15605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  694.121059][T15608] 9p: Unknown access argument 18446744073709551615: -34
[  694.167104][T15611] profile_transition: unconfined exec no attachment
[  694.356765][T15617] profile_transition: unconfined exec no attachment
[  694.384621][T15622] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  694.437782][T15624] dummy0: entered allmulticast mode
[  694.448988][T15624] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2936'.
[  694.467958][T15623] dummy0: left allmulticast mode
[  694.574452][T15628] jffs2: notice: (15628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  694.610674][T15631] FAULT_INJECTION: forcing a failure.
[  694.610674][T15631] name failslab, interval 1, probability 0, space 0, times 0
[  694.610703][T15631] CPU: 0 UID: 0 PID: 15631 Comm: syz.6.2939 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  694.610730][T15631] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  694.610739][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  694.610758][T15631] Call Trace:
[  694.610766][T15631]  <TASK>
[  694.610775][T15631]  dump_stack_lvl+0xe8/0x150
[  694.610804][T15631]  should_fail_ex+0x3eb/0x540
[  694.610832][T15631]  should_failslab+0xa8/0x100
[  694.610855][T15631]  __kmalloc_noprof+0xf9/0x710
[  694.610879][T15631]  ? rcu_is_watching+0x16/0xb0
[  694.610902][T15631]  ? tomoyo_realpath_from_path+0xef/0x640
[  694.610922][T15631]  ? tomoyo_realpath_from_path+0xef/0x640
[  694.610949][T15631]  tomoyo_realpath_from_path+0xef/0x640
[  694.610978][T15631]  ? tomoyo_path_number_perm+0x219/0x5f0
[  694.611012][T15631]  tomoyo_path_number_perm+0x246/0x5f0
[  694.611041][T15631]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  694.611064][T15631]  ? __lock_acquire+0x747/0x2de0
[  694.611090][T15631]  ? handle_mm_fault+0xee/0x3540
[  694.611141][T15631]  ? __fget_files+0x2a/0x420
[  694.611171][T15631]  ? __fget_files+0x2a/0x420
[  694.611198][T15631]  ? __fget_files+0x2a/0x420
[  694.611230][T15631]  security_file_ioctl+0xc3/0x2a0
[  694.611257][T15631]  __se_sys_ioctl+0x47/0x170
[  694.611282][T15631]  do_syscall_64+0x166/0x520
[  694.611305][T15631]  ? trace_irq_disable+0x3b/0x140
[  694.611326][T15631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.611345][T15631]  ? clear_bhb_loop+0x70/0xc0
[  694.611368][T15631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.611386][T15631] RIP: 0033:0x7f0c86b9e1eb
[  694.611403][T15631] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  694.611420][T15631] RSP: 002b:00007f0c87a2ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  694.611441][T15631] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0c86b9e1eb
[  694.611455][T15631] RDX: 00007f0c87a2ffd0 RSI: 0000000041015500 RDI: 0000000000000004
[  694.611468][T15631] RBP: 00007f0c87a2ffd0 R08: 0000000000000001 R09: 00000000ffffffff
[  694.611481][T15631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c87a2efa0
[  694.611492][T15631] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000000
[  694.611523][T15631]  </TASK>
[  694.611618][T15631] ERROR: Out of memory at tomoyo_realpath_from_path.
[  694.612859][T15631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.613672][T15631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  695.206750][T15638] FAULT_INJECTION: forcing a failure.
[  695.206750][T15638] name failslab, interval 1, probability 0, space 0, times 0
[  695.206778][T15638] CPU: 0 UID: 0 PID: 15638 Comm: syz.6.2941 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  695.206806][T15638] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  695.206814][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  695.206828][T15638] Call Trace:
[  695.206836][T15638]  <TASK>
[  695.206851][T15638]  dump_stack_lvl+0xe8/0x150
[  695.206881][T15638]  should_fail_ex+0x3eb/0x540
[  695.206908][T15638]  should_failslab+0xa8/0x100
[  695.206931][T15638]  __kmalloc_noprof+0xf9/0x710
[  695.206958][T15638]  ? security_sk_alloc+0x52/0x360
[  695.206980][T15638]  ? security_sk_alloc+0x52/0x360
[  695.207007][T15638]  security_sk_alloc+0x52/0x360
[  695.207032][T15638]  sk_prot_alloc+0x101/0x210
[  695.207054][T15638]  ? sk_alloc+0x27/0x390
[  695.207077][T15638]  sk_alloc+0x3a/0x390
[  695.207104][T15638]  __netlink_create+0x62/0x260
[  695.207133][T15638]  ? __pfx_genl_release+0x10/0x10
[  695.207157][T15638]  netlink_create+0x3ca/0x590
[  695.207178][T15638]  ? __pfx_genl_unbind+0x10/0x10
[  695.207198][T15638]  ? __pfx_genl_bind+0x10/0x10
[  695.207223][T15638]  __sock_create+0x4b5/0xac0
[  695.207252][T15638]  __sys_socket+0xd6/0x1b0
[  695.207276][T15638]  __x64_sys_socket+0x7a/0x90
[  695.207297][T15638]  do_syscall_64+0x166/0x520
[  695.207320][T15638]  ? trace_irq_disable+0x3b/0x140
[  695.207338][T15638]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.207357][T15638]  ? clear_bhb_loop+0x70/0xc0
[  695.207380][T15638]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.207399][T15638] RIP: 0033:0x7f0c86b9fdc7
[  695.207424][T15638] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  695.207441][T15638] RSP: 002b:00007f0c87a2ff68 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[  695.207462][T15638] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9fdc7
[  695.207476][T15638] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  695.207489][T15638] RBP: 00007f0c87a31090 R08: 0000000000000000 R09: 0000000000000000
[  695.207502][T15638] R10: 00002000000001c0 R11: 0000000000000287 R12: 0000000000000001
[  695.207514][T15638] R13: 0000000000000224 R14: 0000200000000380 R15: 00002000000001c0
[  695.207544][T15638]  </TASK>
[  695.739757][T15642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  695.740729][T15642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  695.886970][   T26] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  696.035272][   T26] usb 4-1: Using ep0 maxpacket: 32
[  696.036353][   T26] usb 4-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  696.037427][   T26] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  696.037449][   T26] usb 4-1: config 0 has no interface number 0
[  696.039683][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.039702][   T26] usb 4-1: Product: syz
[  696.039711][   T26] usb 4-1: Manufacturer: syz
[  696.039719][   T26] usb 4-1: SerialNumber: syz
[  696.042136][   T26] usb 4-1: config 0 descriptor??
[  696.047056][   T26] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  696.247777][   T26] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  696.251708][   T26] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  696.358328][T15646] netlink: 'syz.6.2945': attribute type 21 has an invalid length.
[  696.358372][T15646] netlink: 'syz.6.2945': attribute type 5 has an invalid length.
[  696.358386][T15646] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2945'.
[  696.403715][T10429] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  696.450472][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.454787][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.476570][T15648] aa_policy_admin_capable: cap_mac_admin? 1
[  696.476585][T15648] aa_policy_admin_capable: policy locked? 0
[  696.484960][   T32] audit: type=1400 audit(1792497688.872:576): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=15647 comm="syz.6.2946"
[  696.555092][T10429] usb 10-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  696.556628][T10429] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  696.556648][T10429] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  696.556730][T10429] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.562029][T10429] usb 10-1: config 0 descriptor??
[  696.644019][T15655] jffs2: notice: (15655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  696.659393][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.664613][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.665905][T15658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.676045][T15658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.776067][T15661] FAULT_INJECTION: forcing a failure.
[  696.776067][T15661] name failslab, interval 1, probability 0, space 0, times 0
[  696.776102][T15661] CPU: 1 UID: 0 PID: 15661 Comm: syz.6.2950 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  696.776131][T15661] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  696.776138][T15661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  696.776148][T15661] Call Trace:
[  696.776157][T15661]  <TASK>
[  696.776166][T15661]  dump_stack_lvl+0xe8/0x150
[  696.776195][T15661]  should_fail_ex+0x3eb/0x540
[  696.776223][T15661]  should_failslab+0xa8/0x100
[  696.776247][T15661]  __kmalloc_noprof+0xf9/0x710
[  696.776275][T15661]  ? tomoyo_encode+0x2ad/0x570
[  696.776293][T15661]  ? tomoyo_encode+0x2ad/0x570
[  696.776318][T15661]  tomoyo_encode+0x2ad/0x570
[  696.776342][T15661]  tomoyo_realpath_from_path+0x5fa/0x640
[  696.776371][T15661]  ? tomoyo_path_number_perm+0x219/0x5f0
[  696.776397][T15661]  tomoyo_path_number_perm+0x246/0x5f0
[  696.776426][T15661]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  696.776450][T15661]  ? __lock_acquire+0x747/0x2de0
[  696.776505][T15661]  ? __fget_files+0x2a/0x420
[  696.776535][T15661]  ? __fget_files+0x2a/0x420
[  696.776561][T15661]  ? __fget_files+0x2a/0x420
[  696.776593][T15661]  security_file_ioctl+0xc3/0x2a0
[  696.776619][T15661]  __se_sys_ioctl+0x47/0x170
[  696.776645][T15661]  do_syscall_64+0x166/0x520
[  696.776668][T15661]  ? trace_irq_disable+0x3b/0x140
[  696.776689][T15661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.776717][T15661]  ? clear_bhb_loop+0x70/0xc0
[  696.776741][T15661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.776760][T15661] RIP: 0033:0x7f0c86b9e559
[  696.776778][T15661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.776796][T15661] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  696.776816][T15661] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  696.776830][T15661] RDX: 0000200000000340 RSI: 0000000000002285 RDI: 0000000000000003
[  696.776844][T15661] RBP: 00007f0c87a31090 R08: 0000000000000000 R09: 0000000000000000
[  696.776855][T15661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  696.776867][T15661] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  696.776893][T15661]  </TASK>
[  696.776951][T15661] ERROR: Out of memory at tomoyo_realpath_from_path.
[  697.472085][    C1] net_ratelimit: 105 callbacks suppressed
[  697.757801][   T10] usb 10-1: USB disconnect, device number 2
[  697.843116][T15670] FAULT_INJECTION: forcing a failure.
[  697.843116][T15670] name failslab, interval 1, probability 0, space 0, times 0
[  697.843137][T15670] CPU: 0 UID: 0 PID: 15670 Comm: syz.6.2953 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  697.843158][T15670] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  697.843163][T15670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  697.843170][T15670] Call Trace:
[  697.843175][T15670]  <TASK>
[  697.843185][T15670]  dump_stack_lvl+0xe8/0x150
[  697.843215][T15670]  should_fail_ex+0x3eb/0x540
[  697.843243][T15670]  should_failslab+0xa8/0x100
[  697.843266][T15670]  __kmalloc_noprof+0xf9/0x710
[  697.843284][T15670]  ? do_sys_poll+0x2c3/0x1150
[  697.843298][T15670]  ? do_sys_poll+0x2c3/0x1150
[  697.843315][T15670]  do_sys_poll+0x2c3/0x1150
[  697.843338][T15670]  ? __lock_acquire+0x747/0x2de0
[  697.843358][T15670]  ? __pfx_do_sys_poll+0x10/0x10
[  697.843389][T15670]  ? lock_acquire+0x115/0x350
[  697.843460][T15670]  ? set_user_sigmask+0xc6/0x230
[  697.843472][T15670]  ? __pfx_set_user_sigmask+0x10/0x10
[  697.843484][T15670]  ? __fget_files+0x3a2/0x420
[  697.843510][T15670]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  697.843545][T15670]  __se_sys_ppoll+0x209/0x2b0
[  697.843569][T15670]  ? fput+0xa0/0xd0
[  697.843585][T15670]  ? __pfx___se_sys_ppoll+0x10/0x10
[  697.843599][T15670]  ? __pfx_ksys_write+0x10/0x10
[  697.843612][T15670]  ? __x64_sys_ppoll+0x20/0xc0
[  697.843626][T15670]  do_syscall_64+0x166/0x520
[  697.843644][T15670]  ? trace_irq_disable+0x3b/0x140
[  697.843661][T15670]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.843681][T15670]  ? clear_bhb_loop+0x70/0xc0
[  697.843705][T15670]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.843723][T15670] RIP: 0033:0x7f0c86b9e559
[  697.843741][T15670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.843753][T15670] RSP: 002b:00007f0c87a31028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  697.843765][T15670] RAX: ffffffffffffffda RBX: 00007f0c86e25fa0 RCX: 00007f0c86b9e559
[  697.843773][T15670] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  697.843780][T15670] RBP: 00007f0c87a31090 R08: 0000000000000000 R09: 0000000000000000
[  697.843786][T15670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  697.843793][T15670] R13: 00007f0c86e26038 R14: 00007f0c86e25fa0 R15: 00007ffdb48d05a8
[  697.843811][T15670]  </TASK>
[  698.215753][T15675] profile_transition: unconfined exec no attachment
[  698.248591][T15676] profile_transition: unconfined exec no attachment
[  698.641235][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  698.652973][T12755] usb 4-1: USB disconnect, device number 33
[  698.662333][T12755] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  698.680105][  T993] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  698.703295][T12755] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  698.704256][T12755] quatech2 4-1:0.51: device disconnected
[  698.842582][  T993] usb 10-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  698.843935][  T993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.843960][  T993] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  698.843981][  T993] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  698.844048][  T993] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.848170][  T993] usb 10-1: config 0 descriptor??
[  699.086199][T15685] jffs2: notice: (15685) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  699.209968][T12755] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  699.289222][  T993] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[  699.322832][T15690] profile_transition: unconfined exec no attachment
[  699.363269][T12755] usb 4-1: unable to get BOS descriptor or descriptor too short
[  699.363314][T12755] usb 4-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40
[  699.364428][T12755] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  699.364450][T12755] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  699.364530][T12755] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  699.364562][T12755] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  699.364597][T12755] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  699.364623][T12755] usb 4-1: config 1 interface 1 has no altsetting 0
[  699.368231][T12755] usb 4-1: string descriptor 0 read error: -22
[  699.368380][T12755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.486748][  T993] usb 10-1: USB disconnect, device number 3
[  699.586866][T15694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  699.588369][T15694] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.878697][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  699.879455][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  700.089989][T12755] usb 4-1: USB disconnect, device number 34
[  700.100288][T15698] FAULT_INJECTION: forcing a failure.
[  700.100288][T15698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.100332][T15698] CPU: 0 UID: 0 PID: 15698 Comm: syz.9.2963 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  700.100359][T15698] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  700.100367][T15698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  700.100378][T15698] Call Trace:
[  700.100386][T15698]  <TASK>
[  700.100394][T15698]  dump_stack_lvl+0xe8/0x150
[  700.100424][T15698]  should_fail_ex+0x3eb/0x540
[  700.100452][T15698]  _copy_to_user+0x31/0xb0
[  700.100477][T15698]  copy_siginfo_to_user+0x22/0xc0
[  700.100499][T15698]  x64_setup_rt_frame+0x764/0xc50
[  700.100542][T15698]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  700.100575][T15698]  arch_do_signal_or_restart+0x456/0x860
[  700.100601][T15698]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  700.100632][T15698]  ? ksys_write+0x242/0x270
[  700.100658][T15698]  exit_to_user_mode_loop+0x10e/0x770
[  700.100679][T15698]  ? rcu_is_watching+0x16/0xb0
[  700.100703][T15698]  do_syscall_64+0x328/0x520
[  700.100727][T15698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.100746][T15698]  ? clear_bhb_loop+0x70/0xc0
[  700.100768][T15698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.100787][T15698] RIP: 0033:0x7f7877d5ed8e
[  700.100803][T15698] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  700.100819][T15698] RSP: 002b:00007f7875ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  700.100838][T15698] RAX: 0000000000000001 RBX: 00007f7875ff66c0 RCX: 00007f7877d5ed8e
[  700.100851][T15698] RDX: 0000000000000001 RSI: 00007f7875ff6090 RDI: 0000000000000005
[  700.100863][T15698] RBP: 00007f7875ff6090 R08: 0000000000000000 R09: 0000000000000000
[  700.100875][T15698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  700.100886][T15698] R13: 00007f7878026038 R14: 00007f7878025fa0 R15: 00007ffd930d50f8
[  700.100922][T15698]  </TASK>
[  700.451165][T15705] Invalid ELF header magic: != ELF
[  700.610115][T15708] jffs2: notice: (15708) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  700.664683][T15711] netlink: 'syz.9.2968': attribute type 10 has an invalid length.
[  700.664701][T15711] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2968'.
[  700.936816][T15722] FAULT_INJECTION: forcing a failure.
[  700.936816][T15722] name failslab, interval 1, probability 0, space 0, times 0
[  700.936846][T15722] CPU: 0 UID: 0 PID: 15722 Comm: syz.9.2973 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  700.936877][T15722] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  700.936885][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  700.936897][T15722] Call Trace:
[  700.936905][T15722]  <TASK>
[  700.936913][T15722]  dump_stack_lvl+0xe8/0x150
[  700.936944][T15722]  should_fail_ex+0x3eb/0x540
[  700.936973][T15722]  should_failslab+0xa8/0x100
[  700.936997][T15722]  __kmalloc_cache_noprof+0x9e/0x600
[  700.937025][T15722]  ? __asan_memset+0x22/0x50
[  700.937052][T15722]  ? v4l2_fh_open+0x62/0x410
[  700.937071][T15722]  ? v4l2_fh_open+0x62/0x410
[  700.937097][T15722]  v4l2_fh_open+0x62/0x410
[  700.937124][T15722]  v4l2_open+0x1bc/0x3a0
[  700.937150][T15722]  chrdev_open+0x4d9/0x600
[  700.937177][T15722]  ? __pfx_chrdev_open+0x10/0x10
[  700.937199][T15722]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  700.937222][T15722]  ? devcgroup_check_permission+0x31/0x8f0
[  700.937249][T15722]  ? __pfx_chrdev_open+0x10/0x10
[  700.937272][T15722]  do_dentry_open+0x80e/0x1360
[  700.937307][T15722]  vfs_open_consume+0x4a/0x350
[  700.937331][T15722]  ? path_openat+0x16e1/0x20f0
[  700.937355][T15722]  path_openat+0x16fc/0x20f0
[  700.937394][T15722]  do_file_open+0x23e/0x4a0
[  700.937420][T15722]  ? __pfx_do_file_open+0x10/0x10
[  700.937460][T15722]  ? _raw_spin_unlock+0x28/0x50
[  700.937482][T15722]  ? alloc_fd+0x6af/0x760
[  700.937516][T15722]  do_sys_openat2+0x115/0x200
[  700.937542][T15722]  ? __se_sys_futex+0x3a8/0x450
[  700.937567][T15722]  ? __pfx_do_sys_openat2+0x10/0x10
[  700.937598][T15722]  ? rcu_is_watching+0x16/0xb0
[  700.937626][T15722]  __x64_sys_openat+0x138/0x170
[  700.937656][T15722]  do_syscall_64+0x166/0x520
[  700.937679][T15722]  ? trace_irq_disable+0x3b/0x140
[  700.937698][T15722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.937717][T15722]  ? clear_bhb_loop+0x70/0xc0
[  700.937741][T15722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.937759][T15722] RIP: 0033:0x7f7877d5ed8e
[  700.937788][T15722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  700.937805][T15722] RSP: 002b:00007f7875ff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  700.937827][T15722] RAX: ffffffffffffffda RBX: 00007f7875ff66c0 RCX: 00007f7877d5ed8e
[  700.937842][T15722] RDX: 0000000000000002 RSI: 00007f7875ff5c00 RDI: ffffffffffffff9c
[  700.937857][T15722] RBP: 00007f7875ff5c00 R08: 0000000000000000 R09: 0000000000000000
[  700.937870][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  700.937884][T15722] R13: 00007f7878026038 R14: 00007f7878025fa0 R15: 00007ffd930d50f8
[  700.937917][T15722]  </TASK>
[  700.977856][T10429] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  701.059964][T15723] netlink: 'syz.6.2972': attribute type 10 has an invalid length.
[  701.059984][T15723] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2972'.
[  701.060570][T15723] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  701.125643][T10429] usb 4-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  701.127973][T10429] usb 4-1: config 1 has an invalid interface number: 3 but max is 0
[  701.128026][T10429] usb 4-1: config 1 has no interface number 0
[  701.141645][T10429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.141664][T10429] usb 4-1: Product: syz
[  701.141678][T10429] usb 4-1: Manufacturer: syz
[  701.141691][T10429] usb 4-1: SerialNumber: syz
[  701.154414][T15725] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2974'.
[  701.167129][T10429] usb 4-1: 3:0 : does not exist
[  701.167145][T10429] usb 4-1: 3:0 : does not exist
[  701.429557][   T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  701.490963][T10429] usb 4-1: USB disconnect, device number 35
[  701.581332][   T10] usb 10-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  701.582500][   T10] usb 10-1: config 1 has an invalid interface number: 3 but max is 0
[  701.582513][   T10] usb 10-1: config 1 has no interface number 0
[  701.584633][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.584644][   T10] usb 10-1: Product: syz
[  701.584673][   T10] usb 10-1: Manufacturer: syz
[  701.584681][   T10] usb 10-1: SerialNumber: syz
[  701.597869][   T10] usb 10-1: 3:0 : does not exist
[  701.597884][   T10] usb 10-1: 3:0 : does not exist
[  701.924984][T15725] kvm [15724]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00
[  701.925140][T15725] kvm [15724]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00
[  702.016616][T15733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.024903][T15733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.335861][T10429] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  702.763000][T15739] FAULT_INJECTION: forcing a failure.
[  702.763000][T15739] name failslab, interval 1, probability 0, space 0, times 0
[  702.763027][T15739] CPU: 0 UID: 0 PID: 15739 Comm: syz.7.2978 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  702.763054][T15739] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  702.763062][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  702.763076][T15739] Call Trace:
[  702.763085][T15739]  <TASK>
[  702.763093][T15739]  dump_stack_lvl+0xe8/0x150
[  702.763113][T15739]  should_fail_ex+0x3eb/0x540
[  702.763129][T15739]  should_failslab+0xa8/0x100
[  702.763143][T15739]  __kmalloc_noprof+0xf9/0x710
[  702.763165][T15739]  ? tomoyo_encode+0x2ad/0x570
[  702.763183][T15739]  ? tomoyo_encode+0x2ad/0x570
[  702.763208][T15739]  tomoyo_encode+0x2ad/0x570
[  702.763233][T15739]  tomoyo_realpath_from_path+0x5fa/0x640
[  702.763259][T15739]  ? tomoyo_path_number_perm+0x219/0x5f0
[  702.763274][T15739]  tomoyo_path_number_perm+0x246/0x5f0
[  702.763290][T15739]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  702.763303][T15739]  ? __lock_acquire+0x747/0x2de0
[  702.763345][T15739]  ? __fget_files+0x2a/0x420
[  702.763374][T15739]  ? __fget_files+0x2a/0x420
[  702.763400][T15739]  ? __fget_files+0x2a/0x420
[  702.763430][T15739]  security_file_ioctl+0xc3/0x2a0
[  702.763455][T15739]  __se_sys_ioctl+0x47/0x170
[  702.763477][T15739]  do_syscall_64+0x166/0x520
[  702.763499][T15739]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.763518][T15739]  ? clear_bhb_loop+0x70/0xc0
[  702.763541][T15739]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.763559][T15739] RIP: 0033:0x7f68d539e559
[  702.763578][T15739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.763593][T15739] RSP: 002b:00007f68d6218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  702.763614][T15739] RAX: ffffffffffffffda RBX: 00007f68d5625fa0 RCX: 00007f68d539e559
[  702.763627][T15739] RDX: 0000200000000280 RSI: 00000000000007a9 RDI: 0000000000000004
[  702.763639][T15739] RBP: 00007f68d6218090 R08: 0000000000000000 R09: 0000000000000000
[  702.763659][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.763671][T15739] R13: 00007f68d5626038 R14: 00007f68d5625fa0 R15: 00007ffe3bc5b938
[  702.763702][T15739]  </TASK>
[  702.765580][T15739] ERROR: Out of memory at tomoyo_realpath_from_path.
[  702.793404][    C0] net_ratelimit: 108 callbacks suppressed
** 1 printk messages dropped **
[  703.020434][T15741] ==================================================================
[  703.020445][T15741] BUG: KASAN: slab-out-of-bounds in hex_string+0x419/0x520
[  703.020473][T15741] Read of size 1 at addr ffff88805667a57c by task syz.7.2979/15741
[  703.020489][T15741] 
[  703.020502][T15741] CPU: 1 UID: 0 PID: 15741 Comm: syz.7.2979 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  703.020530][T15741] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  703.020539][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  703.020551][T15741] Call Trace:
[  703.020558][T15741]  <TASK>
[  703.020567][T15741]  dump_stack_lvl+0xe8/0x150
[  703.020593][T15741]  print_address_description+0x55/0x1e0
[  703.020620][T15741]  ? hex_string+0x419/0x520
[  703.020641][T15741]  print_report+0x58/0x70
[  703.020662][T15741]  kasan_report+0x117/0x150
[  703.020685][T15741]  ? hex_string+0x419/0x520
[  703.020708][T15741]  hex_string+0x419/0x520
[  703.020726][T15741]  pointer+0x38a/0xe10
[  703.020741][T15741]  ? __pfx_pointer+0x10/0x10
[  703.020750][T15741]  ? pointer+0x38a/0xe10
[  703.020770][T15741]  vsnprintf+0x626/0xef0
[  703.020793][T15741]  pointer+0x971/0xe10
[  703.020812][T15741]  ? prb_reserve+0xd6c/0x11b0
[  703.020833][T15741]  ? __pfx_pointer+0x10/0x10
[  703.020852][T15741]  ? format_decode+0x635/0xda0
[  703.020870][T15741]  vsnprintf+0x626/0xef0
[  703.020882][T15741]  vscnprintf+0x41/0x90
[  703.020892][T15741]  printk_sprint+0x31/0x480
[  703.020904][T15741]  ? vprintk_store+0x72c/0xd90
[  703.020916][T15741]  vprintk_store+0x74f/0xd90
[  703.020935][T15741]  ? __pfx_vprintk_store+0x10/0x10
[  703.020957][T15741]  ? widen_string+0x3b/0x2a0
[  703.020976][T15741]  ? string+0x28a/0x2d0
[  703.020994][T15741]  ? vsnprintf+0xe42/0xef0
[  703.021016][T15741]  ? panic_on_this_cpu+0x32/0x40
[  703.021035][T15741]  vprintk_emit+0x192/0x5f0
[  703.021047][T15741]  ? __pfx_vprintk_emit+0x10/0x10
[  703.021058][T15741]  ? kernel_text_address+0xa5/0xe0
[  703.021070][T15741]  dev_vprintk_emit+0x338/0x400
[  703.021100][T15741]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  703.021128][T15741]  ? __pfx_stack_trace_save+0x10/0x10
[  703.021152][T15741]  dev_printk_emit+0xee/0x140
[  703.021177][T15741]  ? kasan_save_track+0x3e/0x80
[  703.021189][T15741]  ? __kasan_kmalloc+0x93/0xb0
[  703.021198][T15741]  ? __kmalloc_node_track_caller_noprof+0x4af/0x720
[  703.021214][T15741]  ? __pfx_dev_printk_emit+0x10/0x10
[  703.021226][T15741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.021240][T15741]  __dynamic_dev_dbg+0x211/0x2e0
[  703.021266][T15741]  ? __pfx___dynamic_dev_dbg+0x10/0x10
[  703.021301][T15741]  ? dtv_property_process_get+0x23df/0x4480
[  703.021323][T15741]  dtv_property_process_get+0x4263/0x4480
[  703.021343][T15741]  dvb_frontend_do_ioctl+0x1d27/0x4290
[  703.021354][T15741]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  703.021365][T15741]  ? __pfx_dvb_frontend_do_ioctl+0x10/0x10
[  703.021377][T15741]  ? stack_trace_save+0xa9/0x100
[  703.021386][T15741]  ? __pfx_stack_trace_save+0x10/0x10
[  703.021395][T15741]  ? kasan_save_track+0x4f/0x80
[  703.021411][T15741]  ? stack_depot_save_flags+0x33/0x7f0
[  703.021436][T15741]  ? __lock_acquire+0x747/0x2de0
[  703.021456][T15741]  ? kasan_save_track+0x4f/0x80
[  703.021472][T15741]  ? kasan_save_track+0x3e/0x80
[  703.021489][T15741]  ? kasan_save_free_info+0x40/0x50
[  703.021506][T15741]  ? __kasan_slab_free+0x5c/0x80
[  703.021515][T15741]  ? kfree+0x1c5/0x650
[  703.021526][T15741]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  703.021540][T15741]  ? security_file_ioctl+0xc3/0x2a0
[  703.021552][T15741]  ? __se_sys_ioctl+0x47/0x170
[  703.021567][T15741]  ? do_syscall_64+0x166/0x520
[  703.021590][T15741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.021645][T15741]  ? __might_fault+0xaf/0x130
[  703.021664][T15741]  dvb_usercopy+0x199/0x2e0
[  703.021675][T15741]  ? __pfx_dvb_frontend_do_ioctl+0x10/0x10
[  703.021685][T15741]  ? __pfx_dvb_usercopy+0x10/0x10
[  703.021697][T15741]  ? __fget_files+0x2a/0x420
[  703.021712][T15741]  ? __fget_files+0x2a/0x420
[  703.021733][T15741]  ? __pfx_dvb_frontend_ioctl+0x10/0x10
[  703.021752][T15741]  dvb_frontend_ioctl+0x59/0x80
[  703.021770][T15741]  __se_sys_ioctl+0xfc/0x170
[  703.021792][T15741]  do_syscall_64+0x166/0x520
[  703.021814][T15741]  ? trace_irq_disable+0x3b/0x140
[  703.021827][T15741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.021837][T15741]  ? clear_bhb_loop+0x70/0xc0
[  703.021848][T15741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.021858][T15741] RIP: 0033:0x7f68d539e559
[  703.021871][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.021883][T15741] RSP: 002b:00007f68d6218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  703.021904][T15741] RAX: ffffffffffffffda RBX: 00007f68d5625fa0 RCX: 00007f68d539e559
[  703.021918][T15741] RDX: 0000200000000180 RSI: 0000000080106f53 RDI: 0000000000000003
[  703.021932][T15741] RBP: 00007f68d5435ad8 R08: 0000000000000000 R09: 0000000000000000
[  703.021945][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  703.021957][T15741] R13: 00007f68d5626038 R14: 00007f68d5625fa0 R15: 00007ffe3bc5b938
[  703.021977][T15741]  </TASK>
[  703.021982][T15741] 
[  703.021992][T15741] Allocated by task 15741:
[  703.021998][T15741]  kasan_save_track+0x3e/0x80
[  703.022008][T15741]  __kasan_kmalloc+0x93/0xb0
[  703.022017][T15741]  __kmalloc_node_track_caller_noprof+0x4af/0x720
[  703.022032][T15741]  memdup_user+0x2b/0xd0
[  703.022053][T15741]  dvb_frontend_do_ioctl+0x11a6/0x4290
[  703.022070][T15741]  dvb_usercopy+0x199/0x2e0
[  703.022094][T15741]  dvb_frontend_ioctl+0x59/0x80
[  703.022109][T15741]  __se_sys_ioctl+0xfc/0x170
[  703.022126][T15741]  do_syscall_64+0x166/0x520
[  703.022142][T15741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.022154][T15741] 
[  703.022156][T15741] The buggy address belongs to the object at ffff88805667a400
[  703.022156][T15741]  which belongs to the cache kmalloc-512 of size 512
[  703.022166][T15741] The buggy address is located 0 bytes to the right of
[  703.022166][T15741]  allocated 380-byte region [ffff88805667a400, ffff88805667a57c)
[  703.022176][T15741] 
[  703.022179][T15741] The buggy address belongs to the physical page:
[  703.022185][T15741] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56678
[  703.022194][T15741] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  703.022210][T15741] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  703.022227][T15741] page_type: f5(slab)
[  703.022245][T15741] raw: 00fff00000000040 ffff88813ff29c80 dead000000000100 dead000000000122
[  703.022261][T15741] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  703.022279][T15741] head: 00fff00000000040 ffff88813ff29c80 dead000000000100 dead000000000122
[  703.022294][T15741] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  703.022308][T15741] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  703.022323][T15741] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  703.022332][T15741] page dumped because: kasan: bad access detected
[  703.022346][T15741] page_owner tracks the page as allocated
[  703.022352][T15741] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7348, tgid 7347 (syz.2.650), ts 198207807726
[  703.022383][T15741]  post_alloc_hook+0x1f9/0x250
[  703.022408][T15741]  get_page_from_freelist+0x220f/0x2280
[  703.022424][T15741]  __alloc_frozen_pages_noprof+0x1fe/0x410
[  703.022441][T15741]  allocate_slab+0x7d/0x5e0
[  703.022458][T15741]  refill_objects+0x2d5/0x350
[  703.022468][T15741]  __pcs_replace_empty_main+0x2c8/0x6c0
[  703.022478][T15741]  __kmalloc_noprof+0x476/0x710
[  703.022490][T15741]  hash_ipportnet6_add+0x2608/0x3290
[  703.022501][T15741]  hash_ipportnet6_uadt+0xa57/0xde0
[  703.022513][T15741]  call_ad+0x360/0xb50
[  703.022531][T15741]  ip_set_ad+0x82a/0x9d0
[  703.022549][T15741]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  703.022575][T15741]  netlink_rcv_skb+0x226/0x4a0
[  703.022590][T15741]  nfnetlink_rcv+0x2b9/0x28c0
[  703.022613][T15741]  netlink_unicast+0x8ef/0xa80
[  703.022625][T15741]  netlink_sendmsg+0x7f0/0xb20
[  703.022634][T15741] page last free pid 63 tgid 63 ts 196125488259 stack trace:
[  703.022641][T15741]  free_unref_folios+0xdc6/0x14e0
[  703.022653][T15741]  folios_put_refs+0x9e9/0xb30
[  703.022664][T15741]  release_pages+0x464/0x4d0
[  703.022677][T15741]  io_free_region+0xb3/0x300
[  703.022791][T15741]  io_ring_ctx_free+0x29d/0x5e0
[  703.022800][T15741]  io_ring_exit_work+0x57c/0x610
[  703.022808][T15741]  process_scheduled_works+0xc3d/0x1630
[  703.022819][T15741]  worker_thread+0xa47/0xfb0
[  703.022834][T15741]  kthread+0x38b/0x480
[  703.022859][T15741]  ret_from_fork+0x514/0xb70
[  703.022882][T15741]  ret_from_fork_asm+0x1a/0x30
[  703.022906][T15741] 
[  703.022910][T15741] Memory state around the buggy address:
[  703.022921][T15741]  ffff88805667a400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  703.022931][T15741]  ffff88805667a480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  703.022938][T15741] >ffff88805667a500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04
[  703.022944][T15741]                                                                 ^
[  703.022950][T15741]  ffff88805667a580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  703.022957][T15741]  ffff88805667a600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  703.022962][T15741] ==================================================================
[  703.022979][T15741] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  703.934358][T15741] CPU: 1 UID: 0 PID: 15741 Comm: syz.7.2979 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  703.945383][T15741] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  703.951180][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  703.961231][T15741] Call Trace:
[  703.964502][T15741]  <TASK>
[  703.967430][T15741]  vpanic+0x26f/0x710
[  703.971419][T15741]  panic+0xc5/0xd0
[  703.975138][T15741]  ? __pfx_panic+0x10/0x10
[  703.979561][T15741]  ? hex_string+0x419/0x520
[  703.984071][T15741]  ? rcu_is_watching+0x16/0xb0
[  703.988839][T15741]  ? hex_string+0x419/0x520
[  703.993348][T15741]  ? hex_string+0x419/0x520
[  703.997851][T15741]  check_panic_on_warn+0x89/0xb0
[  704.002789][T15741]  ? hex_string+0x419/0x520
[  704.007285][T15741]  end_report+0x73/0x170
[  704.011528][T15741]  ? hex_string+0x419/0x520
[  704.016031][T15741]  kasan_report+0x128/0x150
[  704.020538][T15741]  ? hex_string+0x419/0x520
[  704.025047][T15741]  hex_string+0x419/0x520
[  704.029373][T15741]  pointer+0x38a/0xe10
[  704.033437][T15741]  ? __pfx_pointer+0x10/0x10
[  704.038021][T15741]  ? pointer+0x38a/0xe10
[  704.042263][T15741]  vsnprintf+0x626/0xef0
[  704.046510][T15741]  pointer+0x971/0xe10
[  704.050582][T15741]  ? prb_reserve+0xd6c/0x11b0
[  704.055258][T15741]  ? __pfx_pointer+0x10/0x10
[  704.059853][T15741]  ? format_decode+0x635/0xda0
[  704.064621][T15741]  vsnprintf+0x626/0xef0
[  704.068865][T15741]  vscnprintf+0x41/0x90
[  704.073052][T15741]  printk_sprint+0x31/0x480
[  704.077552][T15741]  ? vprintk_store+0x72c/0xd90
[  704.082316][T15741]  vprintk_store+0x74f/0xd90
[  704.086908][T15741]  ? __pfx_vprintk_store+0x10/0x10
[  704.092019][T15741]  ? widen_string+0x3b/0x2a0
[  704.096609][T15741]  ? string+0x28a/0x2d0
[  704.100763][T15741]  ? vsnprintf+0xe42/0xef0
[  704.105177][T15741]  ? panic_on_this_cpu+0x32/0x40
[  704.110132][T15741]  vprintk_emit+0x192/0x5f0
[  704.114631][T15741]  ? __pfx_vprintk_emit+0x10/0x10
[  704.119656][T15741]  ? kernel_text_address+0xa5/0xe0
[  704.124790][T15741]  dev_vprintk_emit+0x338/0x400
[  704.129643][T15741]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  704.135020][T15741]  ? __pfx_stack_trace_save+0x10/0x10
[  704.140391][T15741]  dev_printk_emit+0xee/0x140
[  704.145073][T15741]  ? kasan_save_track+0x3e/0x80
[  704.149921][T15741]  ? __kasan_kmalloc+0x93/0xb0
[  704.154684][T15741]  ? __kmalloc_node_track_caller_noprof+0x4af/0x720
[  704.161277][T15741]  ? __pfx_dev_printk_emit+0x10/0x10
[  704.166561][T15741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.172635][T15741]  __dynamic_dev_dbg+0x211/0x2e0
[  704.177583][T15741]  ? __pfx___dynamic_dev_dbg+0x10/0x10
[  704.183079][T15741]  ? dtv_property_process_get+0x23df/0x4480
[  704.188974][T15741]  dtv_property_process_get+0x4263/0x4480
[  704.194699][T15741]  dvb_frontend_do_ioctl+0x1d27/0x4290
[  704.200152][T15741]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  704.206300][T15741]  ? __pfx_dvb_frontend_do_ioctl+0x10/0x10
[  704.212104][T15741]  ? stack_trace_save+0xa9/0x100
[  704.217038][T15741]  ? __pfx_stack_trace_save+0x10/0x10
[  704.222410][T15741]  ? kasan_save_track+0x4f/0x80
[  704.227275][T15741]  ? stack_depot_save_flags+0x33/0x7f0
[  704.232737][T15741]  ? __lock_acquire+0x747/0x2de0
[  704.237668][T15741]  ? kasan_save_track+0x4f/0x80
[  704.242508][T15741]  ? kasan_save_track+0x3e/0x80
[  704.247358][T15741]  ? kasan_save_free_info+0x40/0x50
[  704.252556][T15741]  ? __kasan_slab_free+0x5c/0x80
[  704.257491][T15741]  ? kfree+0x1c5/0x650
[  704.261560][T15741]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  704.267290][T15741]  ? security_file_ioctl+0xc3/0x2a0
[  704.272489][T15741]  ? __se_sys_ioctl+0x47/0x170
[  704.277245][T15741]  ? do_syscall_64+0x166/0x520
[  704.282008][T15741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.288096][T15741]  ? __might_fault+0xaf/0x130
[  704.292776][T15741]  dvb_usercopy+0x199/0x2e0
[  704.297271][T15741]  ? __pfx_dvb_frontend_do_ioctl+0x10/0x10
[  704.303070][T15741]  ? __pfx_dvb_usercopy+0x10/0x10
[  704.308097][T15741]  ? __fget_files+0x2a/0x420
[  704.312702][T15741]  ? __fget_files+0x2a/0x420
[  704.317301][T15741]  ? __pfx_dvb_frontend_ioctl+0x10/0x10
[  704.322844][T15741]  dvb_frontend_ioctl+0x59/0x80
[  704.327696][T15741]  __se_sys_ioctl+0xfc/0x170
[  704.332286][T15741]  do_syscall_64+0x166/0x520
[  704.336874][T15741]  ? trace_irq_disable+0x3b/0x140
[  704.341899][T15741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.347960][T15741]  ? clear_bhb_loop+0x70/0xc0
[  704.352632][T15741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.358520][T15741] RIP: 0033:0x7f68d539e559
[  704.362937][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  704.382534][T15741] RSP: 002b:00007f68d6218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  704.390952][T15741] RAX: ffffffffffffffda RBX: 00007f68d5625fa0 RCX: 00007f68d539e559
[  704.398922][T15741] RDX: 0000200000000180 RSI: 0000000080106f53 RDI: 0000000000000003
[  704.406886][T15741] RBP: 00007f68d5435ad8 R08: 0000000000000000 R09: 0000000000000000
[  704.414848][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  704.422811][T15741] R13: 00007f68d5626038 R14: 00007f68d5625fa0 R15: 00007ffe3bc5b938
[  704.430803][T15741]  </TASK>
[  704.434071][T15741] Kernel Offset: disabled
[  704.438402][T15741] Rebooting in 86400 seconds..